Story perspectives

Germany Arrests Qilin Ransomware Suspect After Japan Extradition

By Drooid · Oct 9, 2026, 12:55 AM UTC · How we work

Summary

Story summary

German authorities arrested a 28-year-old Russian suspected of Qilin ransomware after Japan extradited him.
He was transferred to Germany on 2 October 2026 following a Tokyo High Court ruling.
Japanese police detained him in Osaka in late May 2026 while on vacation.
German investigators allege he extorted a logistics firm in September 2024, demanding $165,000 in Bitcoin.
He is believed to have built Qilin’s ransomware delivery infrastructure and earned a ransom share.

History

Historical Context

In May 2017 the WannaCry ransomware, spreading via the NSA-leaked EternalBlue exploit, infected more than 230,000 computers across over 150 countries and crippled the UK’s NHS. Microsoft’s emergency patches and Marcus Hutchins’s kill-switch halted the worm, establishing a precedent for multinational action. That framework now underpins the 2024 German-Japanese extradition of a Russian Qilin ransomware suspect.

1 of 2

Story summary

German authorities arrested a 28-year-old Russian suspected of Qilin ransomware after Japan extradited him.
He was transferred to Germany on 2 October 2026 following a Tokyo High Court ruling.
Japanese police detained him in Osaka in late May 2026 while on vacation.
German investigators allege he extorted a logistics firm in September 2024, demanding $165,000 in Bitcoin.
He is believed to have built Qilin’s ransomware delivery infrastructure and earned a ransom share.

1 / 2