Qilin
ObscureIQ Threat Intelligence · Actor Profile
QilinConfidence: High
Ransomware (RaaS)
Also known as: Agenda
Motivation: Financial
8Attributed Breaches Circulating
HighAttribution Confidence
Ransomware (RaaS)Actor Type
Overview
Also known as Agenda, first observed in 2022 and among the more active ransomware groups by 2025. Targets healthcare, manufacturing, legal services, critical infrastructure, and public-sector entities using leak pressure and encryption-based extortion.
Tactics, Targeting & TTPs
Targeting: global, high-value sectors. Uses leak pressure and encryption-based extortion.
Source
Attribution draws on public threat-intelligence reporting · Established (multi-source). Primary source →
Were you exposed in one of these breaches?
Check your exposure privately, or request a tailored exposure audit.