Ransomware Operations Surge Following Qilin’s New Pattern of Attacks

The report describes Qilin’s rapid rise in June 2025 to become a dominant ransomware-as-a-service actor after absorbing affiliates from the defunct RansomHub, executing sophisticated, high-impact campaigns against government agencies, critical infrastructure, automotive, energy and medical sectors across multiple countries; the group leverages advanced reconnaissance and persistent access to maximize societal and political disruption rather than solely financial gain.