#qilin
This tag brings together CiberLATAM’s coverage of a ransomware operation and its activity in the region, with emphasis on tactics, targets, and operational shifts. Readers will find analysis, alerts, and reporting on extortion campaigns, data-leak threats, and defensive responses affecting Latin American organizations.
Qilin posts victims in Mexico, Chile
ZeroHour added new Qilin victims in Mexico, Chile, Argentina and Trinidad and Tobago. Panzer also listed Brazil’s K3G Solutions.
Sep 22, 2026 · 2 min
Vigatec appears in Qilin reports for September
Qilin allegedly listed Vigatec on its leak site on Sept. 17, 2026. There is no official confirmation or technical detail yet.
Sep 20, 2026 · 2 min
Qilin Posts Argentina’s Vitar Group on Leak Site
Qilin posted Argentina’s Vitar Group on its leak site, while threat intel also tracked recent group activity in Spain.
Sep 16, 2026 · 3 min
Mexico, Brazil Face AI-Linked Intrusions
Unit 42 and other reports detail active campaigns in Mexico, Ecuador and Brazil using LLMs, NextChat and shared SOCKS5 relays.
Sep 8, 2026 · 5 min
Qilin Tied to Sanatorio Modelo de Caseros
CronUp Ciberseguridad added Sanatorio Modelo de Caseros to a list of Qilin victims, with an attack date of 08-26-2026.
Sep 1, 2026 · 3 min
Chile's Difor claimed by Qilin
Qilin claimed Chilean tech firm Difor. Incident trackers list it as a victim with an estimated attack date of Aug. 23, 2026.
Aug 28, 2026 · 2 min
ATF probes cyber incident in isolated system
ATF said an isolated system was affected and reported no signs of impact to eForms, its corporate network or other systems.
Aug 28, 2026 · 3 min
CoinbaseCartel, Storm Target US Victims
CoinbaseCartel, Storm, Qilin, DragonForce and SilentRansomGroup posted new victims in the US and Canada across health, finance
Aug 27, 2026 · 4 min
Criba and Flecha Bus Join Ransomware Victims
DragonForce added Criba and Frato, KRYBIT added cases in Brazil and Guatemala, and CoinbaseCartel also posted Flecha Bus.
Aug 27, 2026 · 4 min
Quaker State Mexico listed by Qilin
Quaker State Mexico appeared in a Qilin-attributed listing, with no independent public confirmation of a breach or data theft.
Aug 22, 2026 · 2 min
Argentina Led Ransomware Victims in July
Bitdefender logged 21 claimed ransomware victims in Argentina in July, with The Gentlemen, Qilin and DragonForce among active groups.
Aug 17, 2026 · 3 min
Oldelval and Qilin drive Argentina ransomware
Oldelval reported a ransomware incident, blamed on The Gentlemen, while Qilin added victims in the same period.
Aug 12, 2026 · 2 min
Mexico Ranks Second in LATAM Ransomware Cases
Mexico ranks second in Latin America for ransomware victims, with more than 270 public cases by late July and services among the main targets.
Aug 5, 2026 · 4 min
Argentina on the ransomware map
Ransomware.live shows 160 to 177 victims linked to Argentina. Qilin also claimed an attack on the Argentine Army.
Aug 1, 2026 · 2 min
Brazil in Akira and Qilin's ransomware sights
Manufacturing, technology and business services are the main targets in Brazil, as Akira, Qilin and DragonForce go after hypervisors.
Jul 30, 2026 · 3 min
Peru: Qilin and Rhysida in ransomware registry
Ransomware.live links Qilin and Rhysida to Peruvian government and private-sector domains, but part of the record is unclear.
Jul 29, 2026 · 2 min
Qilin puts Argentine Army on leak site
Qilin added the Argentine Army to its leak site and tied it to a claimed July 24 attack. Signs of credential theft also emerged.
Jul 28, 2026 · 3 min
LATAM Ransomware Targets Health
Kazu, Qilin and other groups are expanding in Latin America, with victims in health care, government and corporate services.
Jul 28, 2026 · 2 min
Qilin and Securotrop in Q2 2026
Between May and June 2026, multiple trackers and intelligence reports linked Qilin to active ransomware campaigns that escalated around a critical Check
Jul 7, 2026 · 39 min
Qilin and Fortinet Exploitation Keep Pressure on Chile as
Chile faced 8.8 billion cyberattack attempts in 2025, and between January and June 2026
Jul 7, 2026 · 38 min