Security News > 2024 > July > Microsoft links Scattered Spider hackers to Qilin ransomware attacks
Microsoft says the Scattered Spider cybercrime gang has added Qilin ransomware to its arsenal and is now using it in attacks.
"In the second quarter of 2024, financially motivated threat actor Octo Tempest, our most closely tracked ransomware threat actor, added RansomHub and Qilin to its ransomware payloads in campaigns," Microsoft said Monday.
The Qilin ransomware operation that Scattered Spider just joined surfaced in August 2022 under the "Agenda" name but was rebranded as Qilin just one month later.
After obtaining admin credentials and collecting all sensitive data, they deploy the ransomware payloads to encrypt all network devices and leverage the stolen data to carry out double-extortion attacks.
Last month, the CEO of the UK's National Cyber Security Centre linked Qilin to a ransomware attack that hit pathology services provider Synnovis in early June and impacted several major NHS hospitals in London, forcing them to cancel hundreds of operations and appointments.
Qilin ransomware gang linked to attack on London hospitals.
News URL
Related news
- Microsoft links North Korean hackers to new FakePenny ransomware (source)
- Microsoft Uncovers 'Moonstone Sleet' — New North Korean Hacker Group (source)
- What Is ShrinkLocker? New Ransomware Targets Microsoft BitLocker Encryption Feature (source)
- Microsoft Warns of Surge in Cyber Attacks Targeting Internet-Exposed OT Devices (source)
- Hackers Use MS Excel Macro to Launch Multi-Stage Malware Attack in Ukraine (source)
- London hospitals left in critical condition after ransomware attack (source)
- Major London hospitals disrupted by Synnovis ransomware attack (source)
- Qilin ransomware gang linked to attack on London hospitals (source)
- Azure Service Tags Vulnerability: Microsoft Warns of Potential Abuse by Hackers (source)
- London hospitals face blood shortage after Synnovis ransomware attack (source)