Potential Qilin Data Exfiltration Via Cyberduck

Georg Lauenstein@gsec

•updated Jan 15, 2026•1•0•246

Detects large volumes of outbound data transfers using the Cyberduck application to known cloud storage providers. The Qilin ransomware group has been observed using Cyberduck for data exfiltration.