Honghwa International

This record is a provider-reported ransomware claim attributed to qilin. It is an allegation and has not been independently confirmed.

Claim context

Group-published claim date
First tracked
Last observed
Monitoring providers
2
Independent monitoring providers
2
Post URL
https://www.ransomlook.io/
Data source
unified
Duplicate records merged
1

Provider observation timeline

Newest observations first. Provider observations are not independent confirmation of an incident.

  1. Monitoring provider: observed ; source-published ; retrieved .
  2. Monitoring provider: observed ; source-published ; retrieved .

Provider records

Every stored provider record behind this claim, newest first.

  1. Provider credit
    CTI.FYI
    Provider URL
    https://cti.fyi/
    Feed id
    cti-fyi
    Provider record id
    derived-sha256:8124f78d7f870152b6985c9eefa23b53c616dd4bde17dad2ede379ed36187786
    Observed
    Source-published
    Retrieved
    Format
    paginated-rest
    Transport
    https-rest
    Overlap class
    primary
    Independent corroboration
    yes
  2. Provider credit
    RansomLook
    Provider URL
    https://www.ransomlook.io/
    Feed id
    ransomlook
    Provider record id
    derived-sha256:96f34e25cb43f154c6170e35546e980a2f9e868dc832331000b0f3d341cc02e4
    MISP event UUID
    5cd7c901-c997-56ee-90b2-9bcabd087807
    Observed
    Source-published
    Retrieved
    Format
    json-array
    Transport
    https-rest
    Overlap class
    primary
    Independent corroboration
    yes

Tracker record history

Newest entries first. These dates describe tracker records, not attack dates.

  1. Initial tracker record: recorded ; associated provider observation .