Qilin Publishes New Victim ETO

| 2026-10-25 07:24 HIGH LOW RANSOMWARE & EXTORTION

JSON

Executive Summary

Highlight CTI
AI-generated

On October 25, 2026, the ransomware group Qilin published a new victim, ETO, and subsequently exfiltrated data from it. The operation is classified as both an Exfiltration and Ransomware tactic. The malware used in this attack was identified as Qilin. DNS records were found for the victim's domain, indicating that the entity affected by this incident is DNS. This cyber operation likely involved the unauthorized access to ETO's systems with the intention of extorting ransom from them.

Technical Mitigations AI-generated

• Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.

Intelligence Metadata

Actors / Malware / CVEs / Campaigns

Qilin

Target & Sectors

Global Scope

Incident Timeline

‎2026/10/25

Threat actors used DNS records to target the domain of a victim, ETO.

Click on any entity below to view its context and source!

organisation DNS

The following DNS records were found for the victim's domain.

Ransomware Live

Intelligence Sources

Ransomware Live 2026-10-25

🏴‍☠️ Qilin has just published a new victim : ETO Ransomware Live

Highly Correlated Entities

tactic Cyber Operation Type

‎Exfiltration tactic

Unknown Source

Contextual Telemetry

Context Block 2 METRICS

malware Malware Payload

‎Qilin tool

organisation Identified Entity

‎DNS entity

Click on any entity below to view its context in the main text!