A 28-year-old Russian national, described as a core member of the Qilin ransomware group targeting companies worldwide, was detained in Japan, and extradition proceedings to Germany are under way.
Japanese investigative authorities detained a Russian national described as a core member of the Qilin ransomware group while he was traveling in Osaka and began procedures for his extradition. It has emerged from sources familiar with the matter that the Japanese authorities detained him after obtaining an authorization from the Tokyo High Court.
Qilin is believed to have carried out cyberattacks in countries around the world, including an attack on Asahi Group Holdings. The investigation is proceeding in cooperation with overseas law enforcement authorities and is centered on suspected extortion.
The man is alleged to have built the systems used in the attacks and directed the operational team. Sources confirmed that ransoms paid were transferred to the core members through the operational team and that the man received part of the proceeds.