Qilin ransomware targeted Promociones y Cobranzas Beta, a subsidiary of Davivienda in Colombia, exploiting its financial collection operations. This attack highlights the ongoing threat to financial institutions in Colombia. #Colombia
Incident Details
- Victim: PDC www.cobranzasbeta.com.co
- Country: CO
- Actor: qilin
- Source: http://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/view?uuid=51d0b87e-a3cb-38be-a9b0-a008b9931e64
- Discovered: 2025-07-30 16:27:43.470152
- Published: 2025-07-30 00:00:00.000000
Information
- The entity PDC www.cobranzasbeta.com.co is a ransomware victim.
- Located in Colombia.
- The actor responsible is Qilin.
- Promociones y Cobranzas Beta was established in 1987 as a collection unit for Banco Superior.
- Banco Superior was acquired by Davivienda in 2006.
- Since the acquisition, it has become a subsidiary specializing in collection and financial services.

Disclaimer: This post is based on public claims made by the ransomware group "qilin". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.