German authorities have detained a 28-year-old Russian man, named by German press as Vladimir K, who was arrested in Japan in May after being extradited on hacking charges. The BBC has confirmed German investigators are now examining his alleged role in the 2024 Synnovis cyber attack, which disrupted pathology services at London hospitals and was linked to a patient's death. He is accused of being a core member of the Qilin cyber-crime gang, alleged to have hacked over 4,000 organisations and extorted more than $140m.
bbc.co.uk
· 2026-10-16
Japanese authorities confirmed that a Russian national wanted by Germany on an arrest warrant tied to a ransomware incident was detained upon entering Japan as a tourist and has now been extradited to Germany. The suspect is alleged to be a core member of the Qilin ransomware-as-a-service group, which has hit more than 2,350 organizations in 62 countries since emerging in 2022, including Nissan, Asahi, Lee Enterprises and Court Services Victoria.
bleepingcomputer.com
· 2026-10-09
Cisco Talos reported that three distinct threat groups—including Qilin ransomware affiliates and state-sponsored actors—have been exploiting two vulnerabilities in Cisco Secure Firewall Management Center. The flaws, a maximum-severity authentication bypass (CVE-2026-20079) and a static credential issue (CVE-2026-20316), let attackers gain root access, deploy web shells, steal credentials, and in some cases install Qilin ransomware or Cyclops Blink malware. Cisco has issued hot fixes and urges immediate patching, with broader hardening updates planned next week.
bleepingcomputer.com
· 2026-09-10
The ATF confirmed a cyberattack on a standalone system separate from its main network, formally classifying it as a 'major incident' that requires notifying Congress within a week. An ATF spokesperson said the affected system held sensitive data, including targets of ATF investigations. The Qilin ransomware gang has claimed responsibility on its leak site, though it has not published proof such as stolen data samples.
techcrunch.com
· 2026-08-27
The ATF acknowledged that a standalone system separate from its main network was compromised, calling it a 'major incident' after the Qilin ransomware gang listed the agency on its dark web leak site. The agency said the affected system does not connect to its enterprise network or eForms platform, and is now working with the Department of Justice to investigate the breach.
bleepingcomputer.com
· 2026-08-27
GoKawiil