Qilin
Cybercrime Financial Dormant
- Mentions
- 5
- First seen
- 08 Jun 2026
- Last seen
- 31 Aug 2026
Relevant to you · Affects your stack
- Technology:
- Ubiquiti UniFi
- Threat focus:
- ransomwareespionage / apt
Origin
Unattributed
Sources
inferred Confidence medium
Profile
Qilin is a ransomware group that, according to recent reports, exploits a PAN-OS authentication bypass and a Check Point VPN zero-day vulnerability to gain initial access. The attacks are linked to Qilin ransomware. No specific targeted sectors, regions, or countries were mentioned in the headlines.
Affected vendors
Check PointPalo Alto NetworksPaperCutUbiquiti
Associated malware / tools
QilinQilin ransomware
Linked CVEs
- CVE-2026-0257 KEV CVSS 7.8 EPSS 87%
Activity (8 weeks)
Recent activity
- 31st August – Threat Intelligence Report Check Point Research
- Qilin Ransomware Attackers Exploit PAN-OS Authentication Bypass for Initial Access The Hacker News
- Critical Palo Alto VPN bug now exploited by Qilin ransomware gang BleepingComputer
- Check Point VPN Zero-Day Exploited in Qilin Ransomware Attacks SecurityWeek
- Check Point links VPN zero-day attacks to Qilin ransomware gang BleepingComputer