concentrated between 31 per cent and 50 per cent of their attacks on the APAC region, while the most prolific group, the Qilin ransomware operation, was the single most active actor in the region. Those actors, S-RM’s research suggests, are also...

scene in September 2025, The Gentlemen has risen to the number two spot when it comes to victim count, behind only the Qilin ransomware-as-a-service operation. Its most recent Australian victim was Royal Foods, which confirmed it was investigating a...

and procedures (TTPs). Several ransomware groups rewrote their malware in Rust, including RansomExx, ALPHV, Hive, Luna, and Qilin. Given that Rust is a relatively new programming language, anti-virus solutions are unable to dissect and analyse it as...

work we are hoping to refine and improve as we continue. You can read the December 2023 report here. Ransomware Operators: Qilin, 8Base, Trigona Companies targeted: Four Total data allegedly impacted: At least 57 gigabytes After a hectic December that...

earlier this month is likely to cause disruptions for London hospitals for months to come, according to the NHS. The Qilin ransomware gang was blamed for an attack on the pathology group, initially affecting five London hospitals. However, the number of...

2024), comes after a number of major cyber attacks against UK critical infrastructure and services. Just last month, the Qilin ransomware gang launched an attack on pathology services provider Synnovis Group LLP, leading to a number of major NHS...

scene in September 2025, The Gentlemen has risen to the number-two spot when it comes to victim count, behind only the Qilin ransomware-as-a-service operation. The Gentlemen group is thought to largely comprise Russian speakers and operates under a...

emerging in September 2025, The Gentlemen has risen to the number-two spot when it comes to victim count, behind only the Qilin RaaS operation. Its most recent Australian victim was children’s wear retailer Ollie’s Place, which confirmed it was...

as quickly as possible”, but has yet to reveal a timeline for recovery. The cyber attack was claimed by an affiliate of the Qilin ransomware-as-a-service group, listing the Japanese beer brand on its dark web leak site. The hacker claimed to have...

as education and healthcare, there are many who see such sectors as prime targets for exploitation, as Beek points out. “Qilin, SafePay, and INC Ransom have been the most active in attacking the education sector over the last six months. We’ve observed...

Researchers at Rapid7 have put together a look back at the year that was, the threats that emerged, and how hackers gained access to their victims in 2024. The beginning of a new year is both a time to look ahead and a time of reflection, and looking...

This week’s essential cyber security podcast uncovers a new threat actor targeting a raft of Australian organisations and asks the important question: Is AI profitable yet? Hint – it is not. Cyber Daily’s David Hollingworth and Daniel Croft open the...

targeting of widely deployed web applications. Ransomware activity remained fragmented across multiple operators, with Qilin leading leak-site activity with 357 darknet leak posts, followed by The Gentlemen with 206 and Akira with 174. The company also...

have been known to list victims incorrectly on their leak sites, especially in cases of mistaken identity. Last month, the Qilin ransomware operation mistakenly identified one of its victims as global training firm Richardson Sales Performance. However,...

of leak posts made in the first three months of 2025: Clop 413 RansomHub 232 Babuk 168 Babuk-Bjorka 163 Akira 135 Lynx 115 Qilin 111 FunkSec 96 Cactus 94 Play 84 The big trends The Black Basta ransomware group appears to have self-destructed after its...

and SIM swapping attacks before using the malware of other prolific ransomware groups, including DragonForce, RansomHub, and Qilin. Now, following the wave of incidents on UK and US retailers, threat intelligence researchers from Google suspect that the...

a German woman in 2020 as a result of delayed treatment. The Synnovis ransomware attack occurred in June 2024 when the Qilin ransomware gang claimed to have exfiltrated 400 gigabytes from the company, which included patient names, dates of birth and NHS...

Rover is struggling to get its production lines running following a cyber attack at the beginning of the month, while the Qilin ransomware gang claimed to have stolen data from a design studio linked to Japanese car giant Nissan in August. This isn’t...

services. The ransomware threat actors most active in the region are KillSec, FunkLocker, Hunters International, and Qilin, with 63, 59, 35, and 34 victims, respectively. “Ransomware as a service (RaaS) providers FunkLocker and KillSec named a...

to accountability – and that’s when real resilience begins. Sam Salehi Managing director ANZ at Qualys The recent wave of Qilin ransomware attacks – impacting Australian organisations from construction and manufacturing to financial services –...