Qilin Publishes New Victim Farmacia I

| 2026-10-30 13:36 HIGH LOW RANSOMWARE & EXTORTION

JSON

Executive Summary

Highlight CTI
AI-generated

On October 30, 2026, ransomware operator Qilin published a new victim, Farmacia I, with the DNS records for its domain being publicly visible. The cyber operation type was identified as both Exfiltration and Ransomware, indicating that stolen data was being exfiltrated from the victim's system and encrypted using the Qilin malware payload. This incident highlights the malicious activities of Qilin, a ransomware operator who has been linked to various attacks in recent times. As a result of this operation, Farmacia I is affected, with an unspecified number of DNS records found for its domain being publicly disclosed by Qilin.

Technical Mitigations AI-generated

• Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.

Intelligence Metadata

Actors / Malware / CVEs / Campaigns

Qilin

Target & Sectors

Global Scope

Incident Timeline

‎2026/10/30

Threat actors published a new victim, Farmacia I, on Qilin.

Click on any entity below to view its context and source!

organisation DNS

🏴‍☠️ Qilin has just published a new victim : Farmacia I. The following DNS records were found for the victim's domain.

Ransomware Live

Intelligence Sources

Ransomware Live 2026-10-30

🏴‍☠️ Qilin has just published a new victim : Farmacia I Ransomware Live

Highly Correlated Entities

tactic Cyber Operation Type

‎Exfiltration tactic

Unknown Source

Contextual Telemetry

Context Block 2 METRICS

malware Malware Payload

‎Qilin tool

organisation Identified Entity

‎DNS entity

Click on any entity below to view its context in the main text!