Newcomer Qilin Ransomware Targets 100-Year Old Corporation

The novel Qilin ransomware took responsibility for the recent hit against the US-based MORDFIN GROUP. This is a mammoth company that established itself as an authority in the field of accounting, real estate, auditing, and tax services.

• Qilin is virtually unknown in the ransomware sphere
• This is due to the actor’s low profile, low number of targets, and low ransom values
• MORDFIN GROUP didn’t comment on the attack, but evidence of the operation was posted by Qilin on its personal website
• The number of ransomware attacks has grown recently, with more cybercriminal organizations becoming active in the recent years

Qilin is but one of the many ransomware actors present in the public sphere today. Unlike other similar organizations, Qilin prefers to remain low and now cause waves. It’s been reported that the organization only hit 12 small and medium-sized targets throughout 2023.

This is a far cry from the average of several dozen infiltrations and even hundreds associated with other ransomware groups. Another peculiarity is that Qilin keeps the value of the ransom low. This is supposedly to increase the chance of payment.

According to some investigation agencies, Qilin usually demands between $50,000 and $800,000 on average. This may seem a lot, but it’s actually on the low end of the spectrum. High-end ransom demands can reach as high as $4 million or more.

That’s because more dangerous and powerful ransomware actors assess the value of the ransom based on the victim’s payment capabilities. Qilin does this too, although not to the same extent. The group also avoids high-profile targets.