THREAT OPS › Threat News › [qilin] Philippine Ports Authority posted to leak site
[qilin] Philippine Ports Authority posted to leak site
Ransomware group: qilin Victim: Philippine Ports Authority Victim website: ppa.com.ph Sector: Transportation Country: PH Discovered: 2026-09-05T13:46:22.001080+00:00 Leak-site post: http://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=65f2d9fb-d508-4c18-84e1-14defac537bb Description: N/A Note: leak-site listings typically precede public disclosure.
Indicators of compromise
- ppa.com.phdomain
- http://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=65f2d9fb-d508-4c18-84e1-14defac537bburl