Trusselsaktør

Qilin

TLP:CLEAR

Motiv: Økonomisk
Malware og værktøjer: Cobalt Strike, EasyUpload.io, EDRSandBlast, Evilginx, Kali Linux, MEGA, Mimikatz, NetExec, NetSupport, Nmap, Nping, PCHunter
Teknikker (MITRE ATT&CK): Valid Accounts, Exploit Public-Facing Application, Phishing, Phishing: Spearphishing via Service, Command and Scripting Interpreter: PowerShell, Command and Scripting Interpreter: Unix Shell, System Services, System Services: Service Execution, Boot or Logon Initialization Scripts, Scheduled Task/Job, Scheduled Task/Job: Scheduled Task, Account Manipulation: SSH Authorized Keys
Senest set: 28. oktober 2026

Medlemmer får aktørens profil, de seneste hændelser og vores vurdering i dashboardet.

Data: NVD (public domain), CISA KEV, FIRST EPSS, MITRE ATT&CK, AlienVault OTX.