Qilin Ransomware Affiliate Program Administrator Identified as Aleksey Yakovtsev in Russia
The ransomware group Qilin, active since September 2022 and operating a ransomware-as-a-service (RaaS) model, has become the world's most active ransomware affiliate program with over 365 victims in three months. The group, based in Russia and led by the administrator known as "Haise," uses a double extortion model targeting organizations globally. Cyber intelligence research has uncovered that "Haise" is likely Aleksey Mikhailovich Yakovtsev, a 36-year-old man from St. Petersburg, Russia. This conclusion is based on linking multiple cybercriminal handles and accounts, including “Rjun” and Telegram user "Alexbigboss44," through forum memberships, compromised account data, and personal identifiers found in leaked Russian government records. Yakovtsev has a master's degree in computing and information systems and a history in cybercrime-related trafficking and fraud activities. The Qilin group notably collaborates with English-speaking affiliates and other ransomware gangs. Attempts to contact Yakovtsev for comment were unsuccessful.
Linha do tempo
-
Qilin Ransomware Affiliate Program Administrator Identified as Aleksey Yakovtsev in Russia
ler a análise desta fonte ocultar
The ransomware group Qilin, active since September 2022 and operating a ransomware-as-a-service (RaaS) model, has become the world's most active ransomware affiliate program with over 365 victims in three months. The group, based in Russia and led by the administrator known as "Haise," uses a double extortion model targeting organizations globally. Cyber intelligence research has uncovered that "Haise" is likely Aleksey Mikhailovich Yakovtsev, a 36-year-old man from St. Petersburg, Russia. This conclusion is based on linking multiple cybercriminal handles and accounts, including “Rjun” and Telegram user "Alexbigboss44," through forum memberships, compromised account data, and personal identifiers found in leaked Russian government records. Yakovtsev has a master's degree in computing and information systems and a history in cybercrime-related trafficking and fraud activities. The Qilin group notably collaborates with English-speaking affiliates and other ransomware gangs. Attempts to contact Yakovtsev for comment were unsuccessful.