
Threat IntelligenceRansomware
Know Your Adversary: Qilin
Summary Qilin is a double-extortion Ransomware-as-a-Service (RaaS) that steals data first, then encrypts at scale across Windows, Linux and VMware ESXi. Recent...
Jan 5, 2026·3 min readRead
Expert perspectives on digital forensics, incident response, and the evolving threat landscape. Stay informed with analysis from the Strand team.
3 articles
Get the latest insights on digital forensics and incident response delivered to your inbox.
Get in Touch
Summary SafePay is a double-extortion ransomware that steals data before encrypting it, appending “.safepay” to files and dropping the note readme_safepay.txt....