THREAT OPS › Threat News › [qilin] Alicotrans posted to leak site
[qilin] Alicotrans posted to leak site
Ransomware group: qilin Victim: Alicotrans Victim website: alicotrans.com Sector: Transportation Country: BR Discovered: 2026-09-14T07:59:50.254687+00:00 Leak-site post: http://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=3c7074c9-ccce-42c3-99a3-8bd348be3be2 Description: N/A Note: leak-site listings typically precede public disclosure.
Indicators of compromise
- alicotrans.comdomain
- http://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/blog?uuid=3c7074c9-ccce-42c3-99a3-8bd348be3be2url