Ransomware needs a way in. Stolen credentials are the cheapest one.

SKUPINA Don Don Ransomware Attack

dondon.siRansomed

qilinGroup

SloveniaCountry

Jun 4, 2026Discovered

Overview

View group profile

Domain

dondon.si

Industry

Manufacturing

Country

Slovenia

Discovered

4 months ago

Attack date

Jun 4, 2026

Confidence

100%

Severity

Medium

Status

Claimed

Threat group

qilin

Total victims

1,474

First seen

Oct 2025

Last seen

Oct 2026

Group status

active

Sophistication

Impact score

123

Threat level

3.9/10

Aggressiveness10/10

Lethality0/10

Criticality1.3/10

Status breakdown

Data Leaked0.2%3

Claimed

this victim

99.8%1,471

Targeted sectors

Education Energy & Utilities Financial Services Government & Defense Healthcare Hospitality Manufacturing Other Professional Services Retail & E-Commerce Technology Transportation

Victim's position within group

Industry

Manufacturing

Known target sector

Country

Slovenia

Frequently targeted country

Other victims

View all (1474)

Same group · qilin

Group activity

Monthly attacks · qilin

1,474

total · avg 113.4/mo