Qilin publishes new victim qc-consult via malicious open-source software vector

On November 1, 2026, the ransomware operator Qilin published a new victim, qc-consult, indicating an exfiltration operation. The attack is classified as both an exfiltration and ransomware tactic, with Qilin being the malware payload used to carry out the operation. The identified entity affected by this incident is DNS, which was found to have been impacted by the attack. According to publicly visible information posted by Qilin, the victim's domain had its DNS records exposed, suggesting that the ransomware campaign involved the exploitation of these records to facilitate further malicious activities.