Administrator of Qilin Ransomware Gang Allegedly Identified as Aleksey Mikhailovich Yakovtsev
An investigative report by KrebsOnSecurity identifies Aleksey Mikhailovich Yakovtsev, a 36-year-old Russian from St. Petersburg, as the alleged administrator behind the Qilin ransomware gang. Qilin has been active since September 2022 and is described as one of the most active ransomware affiliate programs, claiming at least 365 victim organizations over three months recently. The group utilizes double extortion tactics and offers affiliates at least 80% of ransom proceeds, contributing to its rapid expansion and recruitment. The attribution to Yakovtsev is based on linking his real-world identity to multiple underground personas through forum accounts, Telegram identifiers, leaked records, and breached data, although it remains an allegation without judicial confirmation. Qilin affiliates employ techniques including compromised VPN credentials, credential theft, lateral movement, and cloud-based exfiltration.
Linha do tempo
-
Administrator of Qilin Ransomware Gang Allegedly Identified as Aleksey Mikhailovich Yakovtsev
ler a análise desta fonte ocultar
An investigative report by KrebsOnSecurity identifies Aleksey Mikhailovich Yakovtsev, a 36-year-old Russian from St. Petersburg, as the alleged administrator behind the Qilin ransomware gang. Qilin has been active since September 2022 and is described as one of the most active ransomware affiliate programs, claiming at least 365 victim organizations over three months recently. The group utilizes double extortion tactics and offers affiliates at least 80% of ransom proceeds, contributing to its rapid expansion and recruitment. The attribution to Yakovtsev is based on linking his real-world identity to multiple underground personas through forum accounts, Telegram identifiers, leaked records, and breached data, although it remains an allegation without judicial confirmation. Qilin affiliates employ techniques including compromised VPN credentials, credential theft, lateral movement, and cloud-based exfiltration.