Ransom! Welcome Financial Group

Qilin, a threat actor, claimed to have compromised Welcome Financial Group, a major player in Hong Kong’s finance industry, which offers a wide range of financial services including banking, digitalization, and asset management. The impacted country is #HongKong.

Incident Details

  • Victim: Welcome Financial Group
  • Country: HK
  • Actor: qilin
  • Source: http://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/view?uuid=33e04930-9861-3b75-8848-934a8b0e8fae
  • Discovered: 2025-08-18 00:35:21.078672
  • Published: 2025-08-17 00:00:00.000000

Information

  • Ransomware attack targeted Welcome Financial Group in Hong Kong.
  • The actor behind the attack is Qilin.
  • Welcome Financial Group operates within a large ecosystem in Korea’s finance industry.
  • The group offers a variety of services including banking, digitalization, payments, integrated asset management, distressed loans, residential leasing, and startup financing.

Disclaimer: This post is based on public claims made by the ransomware group "qilin". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.

monitored by: ransomware.live