Zero-Dwell Threat Intelligence Reports

BQTLock Ransomware Evolves with Admin Account Creation and Persistent Task Injection.exe

spreader persistence checks-bios checks-usb-bus

BQTLock Variant Deploys Telegram C2 and LNK-Based Spreader Tactics.exe

64bits calls-wmi corrupt spreader checks-bios upx

Qilin Ransomware Variant Deploys Veeam-Targeting and Restart Manager Abuse.exe

detect-debug-environment

Chaos-Based Ransomware Variant Expands Its Destructive Capabilities.exe

assembly

New Lazy/BQTLock Hybrid Targets Windows Systems with Stealth and Speed.exe

64bits spreader

Spora-Linked BQTLock Ransomware Targets Windows Systems with Precision.exe

64bits idle

Qilin Ransomware Binary Delivering Inline Threats and Tor Negotiation Details.exe

detect-debug-environment

Qilin/Agenda Ransomware Payload Containing Embedded Victim Credentials.exe

detect-debug-environment

Qilin/Black Panther Loader Disabling Defender and Destroying Backups.exe

long-sleeps calls-wmi spreader checks-usb-bus

Vilsel/Qilin-Tagged Dropper Installed Under Acrobat DC Program Path.exe

spreader payload

Large Console-Mode Qilin Payload Detected as Ransomware.Qilin/QilinLoader.exe

spreader payload

DcRat Spyware Loader Disabling UAC and Secure Desktop Prompts.exe