Sophos X-Ops uncovered a major breach involving Qilin ransomware, revealing a novel and alarming tactic involving the mass theft of credentials stored in Google Chrome browsers from compromised endpoints.
The Qilin ransomware group has been operational since at least 2022 and gained notoriety for its "double extortion" strategy. This method involves stealing a victim's data, encrypting their systems, and threatening to expose or sell the stolen data unless a ransom is paid.
