Core member of Qilin ransomware gang extradited from Japan to Germany
BIBIBI
AT A GLANCE
The report said that a core member of Qilin was arrested in Japan and extradited to Germany on suspicion of extorting Bitcoin.
Article
【Qilin Ransomware Group Core Member Arrested in Japan and Extradited to Germany, Involving Ransom of Approximately 165000 USD Bitcoin】
A core member of the globally notorious Qilin ransomware group, a 28-year-old Russian national, was arrested in Japan and on October 2 was lawfully extradited to Germany. Reports state that the man allegedly, in 2024 year September illegally breached the systems of a German logistics company, encrypted its data, and demanded and extorted approximately 165000 USD(approximately 26000000 yen) in Bitcoin. The investigation showed that within the Qilin criminal network, he was responsible for building attack systems and taking a percentage of the ransom collected by each branch execution team. Japanese police took him into custody in the latter part of May while he was traveling in Osaka. He was subsequently transferred to the German side after the Tokyo High Court ruled that the conditions were met. Qilin operates under a “ransomware-as-a-service” (RaaS) model and had previously claimed responsibility in 2025 for the cyberattack on Japan’s Asahi Group.
Key points
01
Reports state that a 28-year-old Russian man is a core member of the Qilin ransomware gang.
02
The man was arrested in Japan and on October 2 was extradited to Germany.
03
The man allegedly, in 2024 year,September breached the systems of a German logistics company and encrypted its data.
04
The ransom amount cited in reports was approximately 165000 USD, equivalent to approximately 26000000 yen, requested in the form of bitcoin.
05
The investigation showed that the man was responsible for building the attack system and took a share of the ransom collected by branch execution teams.
06
Japanese police, in May late this year, detained the man while he was traveling in Osaka; after the Tokyo High Court ruled that the conditions were met, it transferred him to the German authorities.
07
Qilin operates under a “ransomware-as-a-service” (RaaS) model.
08
Qilin once claimed in 2025 to be responsible for the cyberattack on Japan’s Asahi Group.
AI-assisted interpretation
The following is analysis, separate from reported facts. Verify important claims independently.
This material describes a transnational ransomware case: a man alleged to be involved with Qilin is suspected of breaching corporate systems, encrypting data, and demanding Bitcoin. He was subsequently arrested in Japan and extradited to Germany. The RaaS model means “ransomware as a service”; the material states that the man was responsible for building the attack infrastructure and received a cut of the ransom payments collected by affiliate teams.
Why it matters to readers
The report covers transnational arrests and extradition, and also discloses how the Qilin network builds attack systems, operates its affiliates, and splits ransom proceeds.
Beginners should focus on two points: ransomware may encrypt corporate data to demand Bitcoin; even if the individuals involved operate across borders, they may face law enforcement and extradition between different countries.
Risks and unknowns
The material comes from a Telegram channel and is not accompanied by announcements from German or Japanese law enforcement authorities, court documents, or other independent sources.
The name of the man involved, the specific charges, the case number, and his current judicial status were not provided in the materials.
“October 2” and “this year May“Late in the month” does not explicitly specify the year in the main text.
Approximately 165000 USD The materials do not specify whether the Bitcoin has been paid, recovered, seized, or disposed of.
Related Developments
Loading event timeline…
Qilin's claim of responsibility for the cyberattack on Japan's Asahi Group was described only as self-asserted.
Related concepts
ransomware
This term is not in the glossary yet. Browse related concepts in the glossary.
