Germany arrests alleged core Qilin ransomware member after extradition

German authorities have arrested a Russian national alleged to be a core member of the Qilin ransomware group, following his extradition from Japan. Qilin, a ransomware-as-a-service operation active since August 2022, has targeted over 2,350 organizations across 62 countries using double-extortion tactics. Notable victims include Nissan, Asahi, Lee Enterprises, Australia’s Court Services Victoria, and the U.S. Bureau of Alcohol, Tobacco, Firearms and Explosives (ATF). The group has also exploited zero-day and n-day vulnerabilities in Check Point and Palo Alto Networks VPN appliances.

AI-extracted · verify before operational use