Qilin ransomware is growing, but how long will it last?
Barracuda Networks, Friday, July 18th, 2025
Qilin is a ransomware-as-a-service (RaaS) operation that is thought to be based out of Russia or other former Soviet states. It has affiliates worldwide and has become a significant global threat.
A "Qilin" is a mythical creature deeply rooted in Chinese, Korean, Japanese, and Vietnamese cultures, most often associated with peace, prosperity, justice, and protection. This is a great branding choice for a threat group because the visual is a cool dragon-like creature, and ransomware affiliates can consider themselves the embodiment of any of those characteristics. If you're a ransomware criminal, there's really no downside to saying you act on behalf of peace and justice, or that you're a powerful punisher.