---
title: "Threat Intel Content Update: 9/16/2025"
description: Tidal Cyber's threat intelligence content updates for the week of 9/16/2025- Qilin Ransomware
---

[Threat Intelligence Content Updates ](https://www.tidalcyber.com/threat-updates)

# [Threat Intel Content Update: 9/16/2025](https://www.tidalcyber.com/threat-updates/threat-intel-content-update-9/16/2025)

 Written by [Tidal Cyber](https://www.tidalcyber.com/threat-updates/author/tidal-cyber) | Sep 16, 2025 6:27:39 PM

#### **Qilin Ransomware**

Threat Profiles & Threat Objects

- - **Trending Threat Alert: Qilin Ransomware** - We recently added a large amount of new TTP intelligence to our Qilin Ransomware objects as the group continues to claim an alarming number of attacks.  
        
          - Attack trends: August represented a new monthly high of victims claimed by Qilin ransomware actors (87 victims). 
          - Qilin claimed the highest number of victims of all ransomware groups the past two months, making it the highest-weighted threat in our “Major & Emerging Ransomware and Extortion Threat” curated Threat Profile, available by default in all Enterprise Edition tenants, during those months. 
          - Qilin has remained in this Threat Profile throughout most of this year, meaning **teams using this Profile in Coverage Maps have been continually assessing their coverage against this threat’s TTPs**.
          - Recent TTP intelligence updates: We updated Group metadata and added many new Technique, threat object, and Procedure relationships related to Qilin based on recent technical reporting. 
          - These updates include two Campaigns that **added nearly 50 Technique relationships**; **more than tripling the number of Techniques** related to the Qilin Ransomware Software; and the **addition of more than 50 Qilin-related Procedure Sightings**.

[View full post](https://www.tidalcyber.com/threat-updates/threat-intel-content-update-9/16/2025)

```json
{
  "@context" : "http://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Tidal Cyber"
  },
  "dateModified" : "2025-09-16T18:27:39.191Z",
  "datePublished" : "2025-09-16T18:27:39Z",
  "headline" : "Threat Intel Content Update: 9/16/2025",
  "image" : {
    "@type" : "ImageObject",
    "height" : 440,
    "url" : "https://21164103.fs1.hubspotusercontent-na1.net/hubfs/21164103/Threat%20Intelligence%20Content%20Update%20Social%202025-2.jpg",
    "width" : 900
  },
  "mainEntityOfPage" : "https://www.tidalcyber.com/threat-updates/threat-intel-content-update-9/16/2025",
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "height" : 60,
      "url" : "/hs/hsstatic/content_shared_assets/static-1.4092/img/default-amp-logo.png",
      "width" : 60
    },
    "name" : "Threat Intelligence Content Updates"
  }
}
```