Skip to content

Back to the catalog

Qilin Ransomware Suspect Arrested in Japan, Extradited to Germany
securityweek.comarticle

Qilin Ransomware Suspect Arrested in Japan, Extradited to Germany

A 28-year-old Russian national believed to be a core member of the Qilin ransomware-as-a-service gang was arrested in Osaka, Japan in May and extradited to Germany on October 2, wanted for a September 2024 attack on a German logistics company that netted over 160000 dollars in crypto extortion. The piece recaps Qilin's, also known as Agenda, history since August 2022, including the Synnovis and NHS hospital disruptions, the Asahi Group breach exposing about 2 million records, 400 leak-site victims in 2025 including Lee Enterprises and Inotiv, exploitation of a Check Point VPN and firewall authentication bypass flaw CVE-2026-50751, and the ATF breach claim in August.

TL;DR Alleged core Qilin ransomware member arrested in Japan, extradited to Germany over a 2024 logistics-company attack.
Open original ↗

Organisations named here

  • Asahi Group
  • ATF
  • Synnovis

CVEs named here

  • CVE-2026-50751

Technologies named here

  • Check Point VPN and firewall products
  • Synnovis systems
  • Asahi Group systems
  • Logistics company
  • Lee Enterprises
  • Inotiv
  • VPN
  • Tor

Techniques named here

  • Authentication bypass
  • Data encryption for ransom
  • Extortion via leak site

Threat actors named here

  • Qilin
  • Alleged Qilin suspect
  • AGENDA

Related in Threat Intel