THREAT OPS › Threat News › [qilin] Savills France posted to leak site
[qilin] Savills France posted to leak site
Ransomware group: qilin Victim: Savills France Victim website: savills.fr Sector: Professional Services Country: FR Discovered: 2026-07-27T11:59:02.253716+00:00 Leak-site post: http://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=6435c147-970c-4b24-9f6b-3e04ac9dddad Description: N/A Note: leak-site listings typically precede public disclosure.
Indicators of compromise
- savills.frdomain
- http://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=6435c147-970c-4b24-9f6b-3e04ac9dddadurl