Qilin Ransomware Group Targets Multiple Australian Organizations in February In late January and February, the Qilin ransomware group claimed attacks on four Australian organizations, primarily based in Western Australia. The first victim, Esperance Communications, was listed in late January with minimal details disclosed. On 11 February, the group added Mount Barker Co-operative, alleging the theft of 40GB of data, though the leaked files remain inaccessible. A week later, Esperance Metaland was listed, with hackers claiming 14GB and over 16,000 files exfiltrated though no evidence was provided. The fourth victim, a Queensland-based entity, was named on 22 February, with similarly vague claims. None of the affected organizations have publicly confirmed the incidents, leaving the validity of the attacks uncertain. Qilin, a ransomware-as-a-service (RaaS) operation, has rapidly expanded since its 2022 emergence, with 800+ victims in 2025 up from just 45 in its first year. Security firm ThreatLocker reports the group uses stealthy infiltration tactics, averaging 19 days of dwell time before deploying ransomware. While some analysts question Qilin’s technical sophistication, its ransomware binary remains effective. The group’s motives and next moves remain unclear, but its recent focus on Australian targets suggests a deliberate campaign. Observers continue to monitor Qilin’s leak site for potential data releases.