malware family

Qilin

unknownentity:malware_family

[Qilin](https://attack.mitre.org/software/S1242) is a ransomware family operated as a ransomware-as-a-service (RaaS) that has been active since at least 2022. It includes variants written in Go and Rust capable of targeting Windows, Linux, and VMware ESXi environments. [Qilin](https://attack.mitre.org/software/S1242) shares functionality overlaps with [Black Basta](https://attack.mitre.org/software/S1070), [REvil](https://attack.mitre.org/software/S0496), and [BlackCat](https://attack.mitre.org/

Curated · btcintel

claims we make, each with its source and citation · sources may contradict; we show the set, never a score

Facts

id: qilin
kind: malware family
status: unknown
aliases: Agenda
jurisdictions: —
claims naming it: 0 · 0 attributions · 2 relations · 0 events

Identifiers

attack S1242via mitre-attack
misp-galaxy d5b3ce3d-59e2-4e56-a29a-42fb8b733a51via misp-galaxy-ransomware

Relations

MITRE ATT&CK Enterpriserecords thatWater GalurausesQilin
fetch —sha256 dc1639caa5501d72
rel_491btcintel:relations:491@v1 sha256:850adcd99d652146
confidenceauthority data · 60
MITRE ATT&CK Enterpriserecords thatMoonstone SleetusesQilin
fetch —sha256 dc1639caa5501d72
rel_606btcintel:relations:606@v1 sha256:6c081b0df4fb11c6
confidenceauthority data · 60

Events

computedno dated events recorded for this entity

Claims naming this entity

computedno current claim names this entity

Subjects0 subjects carry a claim naming this entity · a sample

computedno subject carries a claim naming this entity

Community

notes from Nostr labelers · never merged with the bands above · not endorsed

Community content is indexed from Nostr and not endorsed by btcintel.

not computed yetNot indexed yet: the community index has not looked at this subject.