--- title: Ransomware Attacks Surge Amid Growing Qilin-The... description: Ransomware attacks surged 20% year-over-year in H1 2026, driven largely by intensifying competition between two RaaS groups: established player Qilin and... canonical: https://daily.dev/posts/ransomware-attacks-surge-amid-growing-qilin-the-gentlemen-competition-abaipc6zh twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Ransomware Attacks Surge Amid Growing Qilin-The Gentlemen Competition | daily.dev og:description: Ransomware attacks surged 20% year-over-year in H1 2026, driven largely by intensifying competition between two RaaS groups: established player Qilin and... og:url: https://daily.dev/posts/ransomware-attacks-surge-amid-growing-qilin-the-gentlemen-competition-abaipc6zh og:image: https://api.daily.dev/og/posts/aBAiPC6Zh.png og:image:alt: Ransomware Attacks Surge Amid Growing Qilin-The Gentlemen Competition og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Ransomware Attacks Surge Amid Growing Qilin-The Gentlemen Competition **[Security Boulevard](https://daily.dev/sources/securityboulevard)** · 5 min read · 0 upvotes · 0 comments ## Summary Ransomware attacks surged 20% year-over-year in H1 2026, driven largely by intensifying competition between two RaaS groups: established player Qilin and fast-rising upstart The Gentlemen. Together they accounted for 583 attacks in Q2 alone, outpacing the next five groups combined. The Gentlemen, which launched its RaaS service in July 2025 and likely drew operators from a Qilin affiliate, grew attacks 39% quarter-over-quarter. It attracts affiliates with a 90% payout model and uses custom Go-based tooling, EDR killers, and zero-day exploits. Multiple security firms — NordStellar, GuidePoint, Comparitech, and Palo Alto Unit 42 — corroborate the trend. Researchers warn that rivalry between the two groups will likely sustain a new baseline of roughly 2,500 ransomware incidents per quarter, with smaller groups like DragonForce also feeling pressure to scale. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [The State of Ransomware Q2 2026](https://daily.dev/posts/the-state-of-ransomware-q2-2026-cwgxqmj2p) · Check Point Research · 0 upvotes · 0 comments - [Ransomware Attacks Surge 50% In 2025, Qilin Leads Wave](https://daily.dev/posts/ransomware-attacks-surge-50-in-2025-qilin-leads-wave-ukr8h9jqa) · Cyble · 1 upvotes · 0 comments --- Tags: [#malware](https://daily.dev/tags/malware), [#ransomware](https://daily.dev/tags/ransomware) [View this post on daily.dev](https://daily.dev/posts/ransomware-attacks-surge-amid-growing-qilin-the-gentlemen-competition-abaipc6zh) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Ransomware Attacks Surge Amid Growing Qilin-The Gentlemen Competition","url":"https://daily.dev/posts/ransomware-attacks-surge-amid-growing-qilin-the-gentlemen-competition-abaipc6zh","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/ransomware-attacks-surge-amid-growing-qilin-the-gentlemen-competition-abaipc6zh"},"datePublished":"2026-07-16T13:26:25.130Z","dateModified":"2026-07-16T13:27:33.665Z","description":"Ransomware attacks surged 20% year-over-year in H1 2026, driven largely by intensifying competition between two RaaS groups: established player Qilin and...","image":"https://media.daily.dev/image/upload/s--VDukGCjf--/f_auto/v1722860399/public/Placeholder%2002","thumbnailUrl":"https://media.daily.dev/image/upload/s--VDukGCjf--/f_auto/v1722860399/public/Placeholder%2002","isAccessibleForFree":true,"articleSection":"Security Boulevard","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Security Boulevard","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/3613c832180040de8d85bb29f74395be","url":"https://daily.dev/sources/securityboulevard"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/ransomware-attacks-surge-amid-growing-qilin-the-gentlemen-competition-abaipc6zh","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"malware,ransomware","timeRequired":"PT5M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Security Boulevard","item":"https://daily.dev/sources/securityboulevard"},{"@type":"ListItem","position":3,"name":"Ransomware Attacks Surge Amid Growing Qilin-The Gentlemen Competition"}]} ```