cyber.hendryadrian.com
Security News · securityweek.com

Alleged Qilin Ransomware Member Arrested in Japan, Extradited to Germany

· Original article ↗

Summary

A 28-year-old Russian national suspected of being a core Qilin member was arrested in Osaka and extradited to Germany, where he is wanted over a 2024 ransomware attack on a logistics company.

Key points

  • The suspect was detained in Osaka in May and reportedly transferred to German authorities on October 2.
  • German authorities wanted him over an alleged September 2024 attack on a logistics company, involving data encryption and extortion of more than $160,000 in cryptocurrency.
  • Qilin, also known as Agenda, is a ransomware-as-a-service group active since 2022.
  • The group has claimed attacks affecting organizations including Synnovis and Asahi Group; the Asahi incident reportedly disrupted operations and exposed personal information belonging to about 2 million people.
  • The article says Qilin listed 400 victims on its leak site during 2025 and exploited a Check Point VPN and firewall authentication-bypass vulnerability in June.

Article Details

Event Type
Arrest and extradition of an alleged Qilin member from Japan to Germany.
Impact
The suspect is wanted in Germany over an alleged 2024 attack on a logistics company that encrypted data and involved extortion of more than $160,000 in cryptocurrency. The article also reports broader Qilin-linked disruptions and data compromise affecting organizations in multiple sectors.

CVE

CVE-2026-50751checkpoint · Quantum Security Gateway; checkpoint · Spark FirewallsIn June this year, Qilin was exploiting a critical authentication bypass vulnerability in Check Point VPN and firewall products, tracked as CVE-2026-50751.

Threat Actors

QilinRansomware group; the article says it has been active since August 2022.

Vendors

Check PointIn June this year, Qilin was exploiting a critical authentication bypass vulnerability in Check Point VPN and firewall products, tracked as CVE-2026-50751.

Products

Check Point firewall productsCheck Point VPNIn June this year, Qilin was exploiting a critical authentication bypass vulnerability in Check Point VPN and firewall products, tracked as CVE-2026-50751.

Countries

GermanyAn alleged member of the Qilin ransomware group was arrested in Japan and subsequently extradited to Germany.JapanAn alleged member of the Qilin ransomware group was arrested in Japan and subsequently extradited to Germany.Russia

Industries

Food and BeverageGovernmentHealthcarelogisticsto be a core member of the ransomware gang, the individual was wanted in Germany for hacking into a logistics company in September 2024, encrypting data on its systems, and extorting it of over $160,000 inPharmaceuticals

Related Articles