Qilin Ransomware Claims New Australian Victims Amid Ongoing Exploitation

• •Qilin ransomware claims two new Australian victims: Reddrop Group and Zig Inge Group.
• •CVE-2026-20316 exploited by Qilin to gain unauthorized access to networks.
• •Qilin averages 100 victim listings monthly, totaling 2,323 victims since 2022.

The Qilin ransomware group has claimed two new victims in Australia: the Reddrop Group and the Zig Inge Group. The Reddrop Group was listed in a leak post on September 16, 2026, while the Zig Inge Group was mentioned on September 24, 2026. Details about the breaches remain unclear, and no evidence has been provided by the hackers. Qilin operates under a ransomware-as-a-service model, with affiliates receiving a share of ransom payments. Cisco recently warned of Qilin exploiting CVE-2026-20316, a vulnerability in its Secure Firewall Management Center software, to gain unauthorized access. This vulnerability was added to the CISA KEV list on July 29, 2026. Qilin has been highly active, averaging 100 victim listings each month in 2026, totaling 2,323 victims since its emergence in 2022. The group has targeted various sectors, raising concerns about its impact on critical infrastructure.