THREAT OPS › Threat News › [qilin] EmpireWorks posted to leak site
[qilin] EmpireWorks posted to leak site
Ransomware group: qilin Victim: EmpireWorks Victim website: empireworks.com Sector: Other Country: n/a Discovered: 2026-08-17T21:28:43.333930+00:00 Leak-site post: http://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=f2aec5e0-95f3-4ad9-8856-594786b67984 Description: N/A Note: leak-site listings typically precede public disclosure.
Indicators of compromise
- empireworks.comdomain
- http://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=f2aec5e0-95f3-4ad9-8856-594786b67984url