Qilin Dominates Ransomware Market Amid Growing Cybercrime Consolidation

**Executive summary:** The report describes consolidation in the ransomware ecosystem with Qilin emerging as a dominant RaaS operator (around 16% market share) and listing large numbers of victims, while The Gentlemen is rising; a May leak exposed operational data, affiliates and ransom negotiation screenshots, and Qilin is observed using phishing and vulnerability exploitation (including an attempted targeting of a Check Point VPN product), increasing risk to organizations and likely drawing law enforcement attention.