[QILIN] – Ransomware Victim: UScraft

AI Generated Summary of the Ransomware Leak Page

UScraft is identified as the victim in a ransomware leak post attributed to the threat group “qilin.” The leak metadata lists the country as the United States and does not disclose the victim’s industry. The post is dated 2025-11-06 17:50:05.564499; since a compromise date is not provided, this timestamp should be treated as the post date rather than the intrusion date. The leak page includes a claim URL, indicating an extortion or information-sharing channel, but there is no explicit ransom figure or disclosed data volume in the provided data. The entry shows no screenshots or images and no downloadable files, suggesting the page carries minimal material in this data snapshot. The victim name is preserved as “UScraft.”

Overall, the entry provides limited detail: zero images and zero downloads, no listed industry, and no attached data. The presence of a claim URL implies the attackers intend a public-facing announcement or further updates, but without visible materials, the page does not substantiate whether encryption, data exfiltration, or both occurred in this record. The post date remains the sole timestamp; readers should monitor for future disclosures from the qilin group or from UScraft that might reveal encryption status, data exposure, or any ransom demands.