started · updated
Qilin hacker arrested in Japan and extradited to Germany
German authorities in North Rhine-Westphalia have announced a major breakthrough against the Russian ransomware group Qilin. A 28-year-old Russian national, identified as Vladimir K. (using the pseudonym ‘Snake’), was arrested in Tokyo, Japan, in May while on vacation. He was extradited to Germany last Friday and is currently in custody.
The arrest follows a months-long investigation, codenamed ‘Operation Albus,’ involving the infiltration and monitoring of the hacking group by the State Criminal Police Office and the Central and Contact Point for Cybercrime (ZAC). Investigators tracked extensive digital footprints to identify the suspect, who is believed to be a core member responsible for building the group's attack infrastructure.
Qilin is described as one of the world's most active and ruthless cybercriminal organizations. Since 2024, the group has reportedly targeted nearly 4,000 companies globally, with ransom demands totaling approximately $3 billion. Over $140 million in ransoms have been paid. In Germany, there are 150 known cases, including 30 in North Rhine-Westphalia. The arrest is being hailed by officials as a ‘historic success’ in international cooperation against cybercrime, despite the lack of a formal extradition treaty between Japan and Germany.
Entities
Benjamin Limbach · Central and Contact Point for Cybercrime (ZAC) · Herbert Reul · Japan · North Rhine-Westphalia · North Rhine-Westphalia State Criminal Police Office · Qilin · Vladimir K.
Claims
What the coverage asserts, and how many sources carry each claim.
- [● 6 SOURCES] Ransom demands by the group totaled nearly 3 billion US dollars, with over 140 million dollars paid. www.finanzen.at · www.volksfreund.de · www.saarbruecker-zeitung.de · www.it-boltwise.de · www.aktual24.ro · +1 more
- [● 5 SOURCES] The Qilin hacking group has extorted nearly 4,000 companies worldwide since 2024. www.finanzen.at · www.volksfreund.de · www.saarbruecker-zeitung.de · www.aktual24.ro · www.abendblatt.de
- [● 3 SOURCES] The suspect was transferred to Germany last Friday and is currently in a German correctional facility. www.finanzen.at · www.volksfreund.de · www.saarbruecker-zeitung.de
- [● 3 SOURCES] A 28-year-old Russian member of the Qilin hacking group was arrested in Tokyo in May. www.finanzen.at · www.volksfreund.de · www.saarbruecker-zeitung.de
- [● 7 SOURCES] Investigators from the State Criminal Police Office and the Central and Contact Point for Cybercrime (ZAC) infiltrated the group. www.finanzen.at · www.volksfreund.de · www.saarbruecker-zeitung.de · www.it-boltwise.de · www.kurierverlag.de · +1 more
- [● 8 SOURCES] German investigators monitored the group for months to track digital traces. www.finanzen.at · www.volksfreund.de · www.saarbruecker-zeitung.de · www.it-boltwise.de · www.kurierverlag.de · +2 more
- [● 6 SOURCES] The suspect is now in a German correctional facility instead of eating sushi in Japan. www.it-boltwise.de · www.kurierverlag.de · www.finanzen.at · www.volksfreund.de · www.saarbruecker-zeitung.de
- [● 8 SOURCES] The arrest of a Qilin hacker is a historic success. www.it-boltwise.de · www.kurierverlag.de · www.aktual24.ro · www.finanzen.at · www.volksfreund.de · +2 more
- [● 8 SOURCES] There have been 150 known cases of Qilin extortion in Germany, including 30 in North Rhine-Westphalia. www.aktual24.ro · www.finanzen.at · www.volksfreund.de · www.saarbruecker-zeitung.de · abcnews.al · +3 more
- [● 15 SOURCES] The 28-year-old Russian suspect was arrested in Tokyo in May and extradited to Germany last Friday. www.it-boltwise.de · www.aktual24.ro · www.finanzen.at · www.abendblatt.de · www.volksfreund.de · +8 more
- [● 2 SOURCES] The hacking group's operation was codenamed Operation Albus. www.kurierverlag.de
- [● 6 SOURCES] Investigators from the State Criminal Police Office and the Central and Contact Point for Cybercrime (ZAC) infiltrated the group and monitored them for months. www.it-boltwise.de · www.kurierverlag.de · www.finanzen.at · www.volksfreund.de · www.saarbruecker-zeitung.de