Researchers out new Qilin ransomware-as-a-service variant
ID: 499f09af-e150-5cd8-be82-69a24c4d8f10
STIX ID: report--499f09af-e150-5cd8-be82-69a24c4d8f10
Feed Name: CyberScoop
Threat Score
Halcyon reports that the Qilin ransomware operation has released an upgraded variant, Qilin.B, rewritten in Rust and enhanced with stronger encryption (AES-256-CTR, RSA-4096 OAEP), additional obfuscation to avoid signature detection, backup/service deletion, and persistence/anti-reboot behaviors; Qilin is a big-game hunting RaaS that has caused real-world disruption (e.g., Synnovis/NHS) and offers large affiliate payouts.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.