Qilin Ransomware Group Emerges as Major Threat with Advanced Linux-Based Attacks

Cisco Talos researchers have uncovered detailed information about Qilin's attack methods, revealing a sophisticated operation that primarily focuses on manufacturing sector targets. The group employs a unique combination of techniques, including the use of legitimate tools and BYOVD (Bring Your Own Vulnerable Driver) exploits to enhance their attack effectiveness ^[2].

The rise of Qilin comes amid a broader surge in ransomware attacks affecting various regions. In Britain, authorities are struggling to contain the growing threat as new criminal business models have significantly lowered barriers to entry for potential attackers ^[3]. This democratization of cybercrime tools has made it increasingly challenging for law enforcement to keep pace with evolving threats.

Other ransomware groups have also intensified their activities, with Everest claiming to have compromised 1.5 million passenger records from Dublin Airport ^[4]. Similarly, the Safepay ransomware group has reportedly breached professional video surveillance provider Xortec ^[5].

The impact of these attacks extends beyond immediate financial losses. Critical infrastructure and essential services are increasingly becoming targets, as evidenced by a recent DDoS attack on Russia's food safety agency Rosselkhoznadzor, which disrupted food shipments across the country by crippling its VetIS and Saturn systems ^[6].

1. Qilin Ransomware Combines Linux Payload With BYOVD Exploit in Hybrid Attack
2. Uncovering Qilin attack methods exposed through multiple cases
3. Why Britain is struggling to stop the ransomware cyberattacks
4. Everest Ransomware Says It Stole 1.5M Dublin Airport Passenger Records
5. Safepay ransomware group claims the hack of professional video surveillance provider Xortec
6. Russian Rosselkhoznadzor hit by DDoS attack, food shipments across Russia delayed