[REVISION HISTORY]
German arrest of Qilin ransomware group member
Updated 1 time since CLSTR started tracking revisions of this situation.
What changed
2026-10-08 08:53 UTC → 2026-10-09 19:56 UTC ·
added
removed
German authorities in North Rhine-Westphalia have arrested and extradited a key member of the Russian ransomware group Qilin. The suspect, a 28-year-old Russian national known by the pseudonym ‘Snake’, was apprehended in Tokyo, Osaka, Japan, while on vacation in May and extradited to Germany. Germany last Friday. The arrest is the result of ‘Operation Albus,’ a months-long investigation involving the State Criminal Police Office and the Central and Contact Point for Cybercrime (ZAC). Investigators believe the suspect was responsible for building the group’s attack infrastructure. The operation involved extensive international cooperation between German investigators and Japanese authorities, including the National Police Agency and the Tokyo High Public Prosecutors Office. Qilin is identified as a highly active cybercriminal organization that has targeted nearly 4,000 companies globally since 2024, with ransom demands totaling approximately $3 billion. In Germany, the group has targeted 150 entities. entities, including 30 in North Rhine-Westphalia. Interior Minister Herbert Reul described the arrest as the most significant blow to German investigators in the fight against cybercrime to date.
Versions
- 2026-10-09 19:56 UTC German arrest of Qilin ransomware group member
- 2026-10-08 08:53 UTC German arrest of Qilin ransomware group member
Only revisions since CLSTR began indexing content versions appear here. Select a version to see what changed compared to the one before it.