The Ransomware Group That Hired Lawyers and Caught North Korea's Attention

The group responsible, Qilin ransomware, represented something new in the criminal ecosystem: a ransomware operation so sophisticated and profitable that it now offers its affiliates access to legal counsel for ransom negotiations. By 2025, the group has logged more than 700 victims and established itself as the most prolific ransomware operation in the world.