INSPECTING ARCHIVED INTELLIGENCE (OUTDATED VERSION).
Qilin Publishes New Victim City of Columbia SC
|
2026-10-29 15:09
CRITICAL
HIGH
RANSOMWARE & EXTORTION
Executive Summary
AI-generated
On October 29, 2026, the City of Columbia in South Carolina was targeted by Qilin, a ransomware gang, with an estimated attack date also on that day. The attackers are believed to be from the United States, and their malware payload is identified as Qilin. No third-party employee credentials were compromised, but 159 users were affected. The attack works by exploiting DNS records for the victim's domain, which was discovered by HudsonRock. As of now, no further information on the current status of the incident has been provided.
Technical Mitigations AI-generated
• Reset credentials and API keys that may have been exposed, and review access logs for the affected accounts or integrations.
Technical Observables 3 IoCs Login Required
Indicators of Compromise (IoCs) Protected
Raw threat telemetry, malicious IP addresses, file hashes, and direct VirusTotal correlation are restricted to authenticated users.
sha256 1
md5 2
Intelligence Metadata
Actors / Malware / CVEs / Campaigns
QilinQilin
Target & Sectors
NORTH_AMERICA
NORTH_AMERICA
energyenergy
manufacturingmanufacturing
retailretail
healthhealth
transportationtransportation
financefinance
Incident Timeline
2026/10/29 15:09
Threat actors, identified as Qilin, compromised DNS records and credentials of employees at the City of Columbia, SC on October 29, 2026.
Click on any entity below to view its context and source!
source_region
United States
Support us
Group
Qilin
Discovered
2026-10-29 15:09
UTC
Est. attack date
2026-10-29
Country
Sector
Agriculture and Food Production
Education
Energy & Utilities
Financial Services
Government & Defense
Healthcare
Hospitality
Manufacturing
Other
Professi…
malware
Qilin
Support us
Group
Qilin
Discovered
2026-10-29 15:09
UTC
Est. attack date
2026-10-29
Country
Sector
Agriculture and Food Production
Education
Energy & Utilities
Financial Services
Government & Defense
Healthcare
Hospitality
Manufacturing
Other
Professi…
organisation
UTC
Support us
Group
Qilin
Discovered
2026-10-29 15:09
UTC
Est. attack date
2026-10-29
Country
Sector
Agriculture and Food Production
Education
Energy & Utilities
Financial Services
Government & Defense
Healthcare
Hospitality
Manufacturing
Other
Professi…
organisation
HudsonRock
Compromised Employees
Support us
Group
Qilin
Discovered
2026-10-29 15:09
UTC
Est. attack date
2026-10-29
Country
Sector
Agriculture and Food Production
Education
Energy & Utilities
Financial Services
Government & Defense
Healthcare
Hospitality
Manufacturing
Other
Professi…
tactic
T1589.001 - Credentials
Support us
Group
Qilin
Discovered
2026-10-29 15:09
UTC
Est. attack date
2026-10-29
Country
Sector
Agriculture and Food Production
Education
Energy & Utilities
Financial Services
Government & Defense
Healthcare
Hospitality
Manufacturing
Other
Professi…
organisation
DNS Records
Support us
Group
Qilin
Discovered
2026-10-29 15:09
UTC
Est. attack date
2026-10-29
Country
Sector
Agriculture and Food Production
Education
Energy & Utilities
Financial Services
Government & Defense
Healthcare
Hospitality
Manufacturing
Other
Professi…
organisation
DNS
Support us
Group
Qilin
Discovered
2026-10-29 15:09
UTC
Est. attack date
2026-10-29
Country
Sector
Agriculture and Food Production
Education
Energy & Utilities
Financial Services
Government & Defense
Healthcare
Hospitality
Manufacturing
Other
Professi…
victims
0 Compromised Users
Support us
Group
Qilin
Discovered
2026-10-29 15:09
UTC
Est. attack date
2026-10-29
Country
Sector
Agriculture and Food Production
Education
Energy & Utilities
Financial Services
Government & Defense
Healthcare
Hospitality
Manufacturing
Other
Professi…
data_breach
159 Party Employee Credentials
Support us
Group
Qilin
Discovered
2026-10-29 15:09
UTC
Est. attack date
2026-10-29
Country
Sector
Agriculture and Food Production
Education
Energy & Utilities
Financial Services
Government & Defense
Healthcare
Hospitality
Manufacturing
Other
Professi…
general_metric
2 External Attack Surface
Support us
Group
Qilin
Discovered
2026-10-29 15:09
UTC
Est. attack date
2026-10-29
Country
Sector
Agriculture and Food Production
Education
Energy & Utilities
Financial Services
Government & Defense
Healthcare
Hospitality
Manufacturing
Other
Professi…
general_metric
26 DNS
Support us
Group
Qilin
Discovered
2026-10-29 15:09
UTC
Est. attack date
2026-10-29
Country
Sector
Agriculture and Food Production
Education
Energy & Utilities
Financial Services
Government & Defense
Healthcare
Hospitality
Manufacturing
Other
Professi…
2026/10/29
Threat actors, identified as Qilin, compromised DNS records and credentials of the City of Columbia, SC on October 29, 2026.
Click on any entity below to view its context and source!
source_region
United States
Support us
Group
Qilin
Discovered
2026-10-29 15:09
UTC
Est. attack date
2026-10-29
Country
Sector
Agriculture and Food Production
Education
Energy & Utilities
Financial Services
Government & Defense
Healthcare
Hospitality
Manufacturing
Other
Professi…
malware
Qilin
Support us
Group
Qilin
Discovered
2026-10-29 15:09
UTC
Est. attack date
2026-10-29
Country
Sector
Agriculture and Food Production
Education
Energy & Utilities
Financial Services
Government & Defense
Healthcare
Hospitality
Manufacturing
Other
Professi…
organisation
UTC
Support us
Group
Qilin
Discovered
2026-10-29 15:09
UTC
Est. attack date
2026-10-29
Country
Sector
Agriculture and Food Production
Education
Energy & Utilities
Financial Services
Government & Defense
Healthcare
Hospitality
Manufacturing
Other
Professi…
organisation
HudsonRock
Compromised Employees
Support us
Group
Qilin
Discovered
2026-10-29 15:09
UTC
Est. attack date
2026-10-29
Country
Sector
Agriculture and Food Production
Education
Energy & Utilities
Financial Services
Government & Defense
Healthcare
Hospitality
Manufacturing
Other
Professi…
tactic
T1589.001 - Credentials
Support us
Group
Qilin
Discovered
2026-10-29 15:09
UTC
Est. attack date
2026-10-29
Country
Sector
Agriculture and Food Production
Education
Energy & Utilities
Financial Services
Government & Defense
Healthcare
Hospitality
Manufacturing
Other
Professi…
organisation
DNS Records
Support us
Group
Qilin
Discovered
2026-10-29 15:09
UTC
Est. attack date
2026-10-29
Country
Sector
Agriculture and Food Production
Education
Energy & Utilities
Financial Services
Government & Defense
Healthcare
Hospitality
Manufacturing
Other
Professi…
organisation
DNS
Support us
Group
Qilin
Discovered
2026-10-29 15:09
UTC
Est. attack date
2026-10-29
Country
Sector
Agriculture and Food Production
Education
Energy & Utilities
Financial Services
Government & Defense
Healthcare
Hospitality
Manufacturing
Other
Professi…
victims
0 Compromised Users
Support us
Group
Qilin
Discovered
2026-10-29 15:09
UTC
Est. attack date
2026-10-29
Country
Sector
Agriculture and Food Production
Education
Energy & Utilities
Financial Services
Government & Defense
Healthcare
Hospitality
Manufacturing
Other
Professi…
data_breach
159 Party Employee Credentials
Support us
Group
Qilin
Discovered
2026-10-29 15:09
UTC
Est. attack date
2026-10-29
Country
Sector
Agriculture and Food Production
Education
Energy & Utilities
Financial Services
Government & Defense
Healthcare
Hospitality
Manufacturing
Other
Professi…
general_metric
2 External Attack Surface
Support us
Group
Qilin
Discovered
2026-10-29 15:09
UTC
Est. attack date
2026-10-29
Country
Sector
Agriculture and Food Production
Education
Energy & Utilities
Financial Services
Government & Defense
Healthcare
Hospitality
Manufacturing
Other
Professi…
general_metric
26 DNS
Support us
Group
Qilin
Discovered
2026-10-29 15:09
UTC
Est. attack date
2026-10-29
Country
Sector
Agriculture and Food Production
Education
Energy & Utilities
Financial Services
Government & Defense
Healthcare
Hospitality
Manufacturing
Other
Professi…
2026/10/29
Ransomware operators, identified as Qilin, have published the City of Columbia, SC, as a new victim on their platform.
Click on any entity below to view its context and source!
organisation
SC
🏴☠️ Qilin has just published a new victim : City of Columbia, SC.
infrastructure
Microsoft 365
…Cloud / SaaS Services Detected
Amazon SES/WorkMail
Anthropic
Mandrill
Microsoft 365
Stripe
Zoho Campaigns
Leak Screenshot:
Other recent victims
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
Microsoft 365
MS=ms67669797
asv=9f40bcab6063cae34bfba96b1f440ce5
zoho-verification=zb32640195.zmverify.zoho.com
rZpLzRmn6ZiU7gAKfo4xhvxNS3xbYQVB7AHluIEdTGZNNJbT0LkFs0i0SdNDr8B27+ClEwsGpiPlcgOZilJhdA==
google-site-verification=skZe4Rnlbu7nS6GZ4-yoKbB2AmTJbq9X462XWLPcdus
jotform-domain-verification=c73b49559e9ee0f08946eec8cef27f6a
ANzGIT7aJUsR2dLgaWlv93hAaITam9g…
organisation
Stripe
Zoho Campaigns
Leak Screenshot
…Cloud / SaaS Services Detected
Amazon SES/WorkMail
Anthropic
Mandrill
Microsoft 365
Stripe
Zoho Campaigns
Leak Screenshot:
Other recent victims
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
infrastructure
365 Stripe Zoho
…Cloud / SaaS Services Detected
Amazon SES/WorkMail
Anthropic
Mandrill
Microsoft 365
Stripe
Zoho Campaigns
Leak Screenshot:
Other recent victims
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
Tactical Metrics
Metrics
victims
0
Compromised Users
Click for context!
Support us
Group
Qilin
Discovered
2026-10-29 15:09
UTC
Est. attack date
2026-10-29
Country
Sector
Agriculture and Food Production
Education
Energy & Utilities
Financial Services
Government & Defense
Healthcare
Hospitality
Manufacturing
Other
Professi…
Metrics
data_breach
159
Party Employee Credentials
Support us
Group
Qilin
Discovered
2026-10-29 15:09
UTC
Est. attack date
2026-10-29
Country
Sector
Agriculture and Food Production
Education
Energy & Utilities
Financial Services
Government & Defense
Healthcare
Hospitality
Manufacturing
Other
Professi…
Metrics
infrastructure
Microsoft 365
Affected Product
…Cloud / SaaS Services Detected
Amazon SES/WorkMail
Anthropic
Mandrill
Microsoft 365
Stripe
Zoho Campaigns
Leak Screenshot:
Other recent victims
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
Microsoft 365
MS=ms67669797
asv=9f40bcab6063cae34bfba96b1f440ce5
zoho-verification=zb32640195.zmverify.zoho.com
rZpLzRmn6ZiU7gAKfo4xhvxNS3xbYQVB7AHluIEdTGZNNJbT0LkFs0i0SdNDr8B27+ClEwsGpiPlcgOZilJhdA==
google-site-verification=skZe4Rnlbu7nS6GZ4-yoKbB2AmTJbq9X462XWLPcdus
jotform-domain-verification=c73b49559e9ee0f08946eec8cef27f6a
ANzGIT7aJUsR2dLgaWlv93hAaITam9g…
Metrics
infrastructure
365
Stripe Zoho
…Cloud / SaaS Services Detected
Amazon SES/WorkMail
Anthropic
Mandrill
Microsoft 365
Stripe
Zoho Campaigns
Leak Screenshot:
Other recent victims
Legal Disclaimer:
Ransomware.live
does not engage in the acquisition, exfiltration, downloading, possession,
hosting, access, consultation, redistribution, or disclosure of unlawfully obtained data.
Intelligence Sources
Ransomware Live
2026-10-29
Unpublish from Social Media?
Are you sure you want to delete this podcast video from all synchronized social networks (YouTube, Facebook, Threads)?
Important:
Due to Meta API restrictions, Instagram Reels cannot be deleted automatically via API by third-party apps.
View Profile to Delete Manually
View Profile to Delete Manually
Tactical Intelligence
Report Intelligence Issue
Podcast Options
Generate
Incident Version History
CURRENT VERSION
Last Updated: 2026-10-30T12:18
Comprehensive Tactical Telemetry
Highly Correlated Entities
8x
organisation
Identified Entity
UTC
entity
6x
industry
Targeted Sector
Finance
sector
2x
tactic
Cyber Operation Type
Ransomware
tactic
2x
timeline
Temporal Reference
2026/10/29 15:09
date
Contextual Telemetry
Context Block
12 METRICS
target region
Target Country
United States
country
source region
Origin Country
United States
country
malware
Malware Payload
Qilin
tool
attribution
Attributing Entity
Energy & Utilities
Financial Services
Government & Defense
Healthcare
Hospitality
Manufacturing
Other
Professional Services
Retail & E-Commerce
Technology
Transportation
Infostealer
authority
tactic
MITRE ATT&CK Technique
T1589.001 - Credentials
technique
victims
Compromised Users
0
compromised users
data breach
Party Employee Credentials
159
party employee credentials
general metric
External Attack Surface
2
external attack surface
general metric
Dns
26
dns
infrastructure
Affected Product
Microsoft 365
software
infrastructure
Stripe Zoho
365
stripe zoho
general metric
Ms
365
ms
Click on any entity below to view its context in the main text!
Selective Unpublish
Select the networks you want to remove this post from. The system will try to delete the real post through the API and clean the database so you can publish it again.
By navigating this website, you accept the use of strictly necessary technical cookies for session security and basic platform functionality. We do not use tracking or advertising cookies. Read our Privacy Policy.