Qilin

Profile

The Qilin ransomware group actively exploits vulnerabilities in VPN appliances, notably an authentication bypass in PAN-OS and zero-day flaws in Check Point VPNs, to gain initial access for ransomware attacks. Recent reports link these security flaws directly to Qilin and their use in compromising corporate networks. The group focuses on compromising VPN appliances to deploy ransomware in target environments.