threatintel
actor tracker
IOC pivot
ioc · name

Agenda

?? · UnknownQilinconfidence · high

Original Go-based ransomware family name used by Qilin affiliates from mid-2022 before the Rust rewrite. Group-IB and SentinelOne both track Qilin/Agenda as one lineage; the operators encrypted Synnovis pathology systems on 3 June 2024 causing the south-London NHS hospital outage.

family
Agenda/Qilin
first seen
Aug 24, 2022
publisher
SentinelOne
source citation