Key to Qilin's Ransomware Success: Bulletproof Hosting

Reigning Ransomware Group Thrives in Part Through Affiliated Cybercrime Services Mathew J. Schwartz (euroinfosec) • October 16, 2025

Victims of ransomware-as-a-service operation Qilin have the small solace of knowing they're not alone. The Russian-speaking group launched the greatest number of ransomware attacks for the second quarter running this year, judging by claims posted to its "WikiLeaksV2" data leak site.

See Also: Preparing for the Next Attack

The site on Tuesday listed Volkswagen Group France as a victim, followed Wednesday by a swath of victims that included Agencia Tributaria - Spain's tax administration agency - as well as Massachusetts-based real estate broker Charles River Properties and the New Jersey Property-Liability Insurance Guaranty Association.

Key to Qilin's success appears to be its "close affiliation" with a network of hosting providers with ties to companies in Saint Petersburg, Russia, and Hong Kong that help the group "to discreetly host illicit ...