Who Runs the Ransomware Group Qilin?

Cybersecurity · November 12, 2026

Cybersecurity·krebsonsecurity.com

Security journalist Brian Krebs has traced the operator behind Qilin, now the world's busiest ransomware-as-a-service operation with over 365 claimed victims in just the last three months. A string of years-old operational security slip-ups reportedly points to a 36-year-old man based in St. Petersburg, Russia. The findings offer a rare look behind the curtain of one of the most prolific extortion gangs currently active.

// source: krebsonsecurity.com ↗

← Back to Blog