Qilin Publishes New Victim Castle Howard Estate Hacked

| 2026-10-24 16:34 HIGH LOW RANSOMWARE & EXTORTION

JSON

Executive Summary

Highlight CTI
AI-generated

On October 24, 2026, the ransomware operation "Qilin" has published a new victim, Castle Howard Estate, with DNS records being found for the victim's domain. The attack is categorized as an exfiltration and ransomware operation, indicating that sensitive data was stolen from the estate and demands are likely to be made in exchange for its return. Qilin malware is believed to be the tool used in this operation, while the identified entity behind it appears to be DNS records associated with Castle Howard Estate's domain. The attack highlights the ongoing threat of ransomware operations targeting organizations worldwide, emphasizing the need for enhanced cyber resilience measures to prevent similar incidents from occurring.

Technical Mitigations AI-generated

• Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.

Intelligence Metadata

Actors / Malware / CVEs / Campaigns

Qilin

Target & Sectors

Global Scope

Incident Timeline

‎2026/10/24

Threat actors used DNS records to target the Castle Howard Estate domain.

Click on any entity below to view its context and source!

organisation DNS

The following DNS records were found for the victim's domain.

Ransomware Live

Intelligence Sources

Ransomware Live 2026-10-24

🏴‍☠️ Qilin has just published a new victim : Castle Howard Estate Ransomware Live

Highly Correlated Entities

tactic Cyber Operation Type

‎Exfiltration tactic

Unknown Source

Contextual Telemetry

Context Block 2 METRICS

malware Malware Payload

‎Qilin tool

organisation Identified Entity

‎DNS entity

Click on any entity below to view its context in the main text!