GoKawiilResearch ties Qilin ransomware leader 'Haise' to St. Petersburg man
Security researchers have linked the administrator of the Qilin ransomware-as-a-service operation, who uses the handle 'Haise,' to a 36-year-old man in St. Petersburg, Russia. The identification draws on operational security mistakes made over roughly a decade, including reused handles traced through leaked forum registration data analyzed by the platform Intel 471. Qilin has claimed at least 365 victim organizations over the past three months, making it the most active ransomware affiliate program currently tracked.