Tracking Adversaries: The Qilin RaaS
ID: 4e7c10ab-af3e-594b-a23e-3b39d829c659
STIX ID: report--4e7c10ab-af3e-594b-a23e-3b39d829c659
Feed Name: BushidoToken Blog
Threat Score
This report summarizes open-source intelligence on the Qilin ransomware RaaS (aka Agenda), detailing its emergence since 2022, RAMP forum presence, affiliate revenue sharing, global victimology (including healthcare/NHS impacts), multiple technical variants (Golang, Rust, ESXi-targeting), post-compromise TTPs (credential access, Nmap, Cobalt Strike, BYOVD tools), and its Tor-based victim recovery and data-leak infrastructure.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.