Ransomware Gang Leader Detained in Japan, Extradited to Germany — 5chers: “Wait, Hackers Actually Get Caught?”

From our other sites

The story

A Russian national (28), believed to be a core member of the ransomware group “Qilin,” was detained by Japanese investigators while visiting Japan and handed over to German authorities investigating him on extortion charges, the Asahi Shimbun reports. Qilin is known for encrypting corporate systems and demanding payment, and its attacks have drawn attention domestically as well. In the thread, reactions ranged from surprise that the group shares its name with a creature from Chinese mythology, to questions about why Japan handed him to Germany instead of arresting him itself, to speculation linking the case to a recent string of unauthorized-access incidents.

Oct 6 (Tue), 5:00 AM JST

Asahi Shimbun

Japanese investigators have detained a Russian national (28) believed to be a core member of “Qilin,” a ransomware group that has repeatedly carried out cyberattacks on companies worldwide. On the 2nd, Japan handed him over to German authorities, who are investigating him on extortion charges.

Source: news.yahoo.co.jp / Original article here

What people said

2AnonymousOct 6, 2026 09:17
Seriously? Kirin Beer sucks (mixing up the hacker group's name, Qilin, with the unrelated Kirin beer brand — same word in Japanese)
42AnonymousOct 6, 2026 09:30
Japan is insanely soft on economic crime and sex crime
46AnonymousOct 6, 2026 09:31
Wait, hackers actually get caught?
51AnonymousOct 6, 2026 09:32
"My Ransomware Girlfriend," original by Yoshizumi (a pun on the manga/rom-com "Rent-A-Girlfriend," swapping "rental" for "ransom")
4AnonymousOct 6, 2026 09:18
They should've just locked him up and made him work for Japan's benefit
152AnonymousOct 6, 2026 10:28
Re: #4
You think he'd actually work properly though?
7AnonymousOct 6, 2026 09:19
My files just got encrypted by ransomware — is it actually possible to restore them? Do you have to pay the ransom to get them back?
15AnonymousOct 6, 2026 09:21
Re: #7
The police will restore them for you (sarcasm)
9AnonymousOct 6, 2026 09:19
I want to ask someone who really knows this stuff — if you had to compare this to Babel II, what part would it be??? (Babel II: a classic sci-fi manga/anime about a boy with psychic powers and giant robot servants)
157AnonymousOct 6, 2026 10:31
Re: #9
The part where Babel II storms into the hideout in Yomi's lair (Yomi is the series' main villain)
16AnonymousOct 6, 2026 09:21
Well, getting punished in Germany probably means a harsher sentence anyway
102AnonymousOct 6, 2026 09:56
Re: #16
German prisons are basically paradise — you can even bring in a TV
https://www.youtube.com/watch?v=DqVQzA0uc44
25AnonymousOct 6, 2026 09:23
Could all these recent data-breach incidents be retaliation for this?
39AnonymousOct 6, 2026 09:28
Re: #25
Attack tools are sold all over the dark web, so anyone anywhere could pull this off. Though it's true Russia and North Korea are putting serious effort into cyber ops…
29AnonymousOct 6, 2026 09:25
Japan's investigators actually did pretty well here
53AnonymousOct 6, 2026 09:33
Re: #29
Germany told them who the guy was, so they had no choice but to hand him over…
85AnonymousOct 6, 2026 09:48
Re: #29
Honestly, tracking this stuff down first should be the Public Security Bureau's job… take the hint
38AnonymousOct 6, 2026 09:28
Probably ends up as "obstruction of business by force" with a ¥500,000 fine or so…

There's probably a reason he was in Japan of all places…
164AnonymousOct 6, 2026 10:33
Re: #38
Because he got sent to Germany
49AnonymousOct 6, 2026 09:32
But why would the group name itself after a legendary creature from Chinese mythology?
55AnonymousOct 6, 2026 09:34
Re: #49
And it's supposed to be a symbol of peace — a gentle creature that wouldn't hurt a bug or even step on a blade of grass
81AnonymousOct 6, 2026 09:47
Russia, China, North Korea — the communist-bloc countries really go all-in on being evil, huh
86AnonymousOct 6, 2026 09:48
Re: #81
Guess it's just a national culture where stealing gets you praised 🤔
82AnonymousOct 6, 2026 09:47
Cybercrime: Russia, China, North Korea
Scam/fraud rings: Cambodia, China

Those are the big players, I guess?
90AnonymousOct 6, 2026 09:50
Re: #1
He's not getting prosecuted anyway, so what's even the point of arresting him
91AnonymousOct 6, 2026 09:51
Re: #90
At least read the article
93AnonymousOct 6, 2026 09:52
Might as well just fake his execution and put him to use
95AnonymousOct 6, 2026 09:52
Re: #93
He's already been handed over to Germany
101AnonymousOct 6, 2026 09:55
Re: #95
Seriously? This country really is useless
113AnonymousOct 6, 2026 10:05
Re: #101
Japan hadn't even identified him as the culprit on its own — they couldn't even get an arrest warrant.

So technically it wasn't an "arrest" by Japan — just a detention and handover based entirely on Germany's request
106AnonymousOct 6, 2026 09:57
Some other country probably just said "hey, he's in Japan right now, go grab him," and Japan went "sure thing" — arrested him exactly as told and handed him over exactly as told
128AnonymousOct 6, 2026 10:14
Re: #106
Same as with the US requests — if they can arrest someone just by being asked, doesn't that mean Public Security already had his location tracked from the moment he entered the country?
126AnonymousOct 6, 2026 10:12
Not even realizing he was being hunted, just casually sightseeing in Japan……
Specialized in PC skills, but deep down he must be an idiot
201AnonymousOct 6, 2026 11:17
Re: #126
Japan has no anti-espionage law, so it's seen as a criminal-friendly country — even the "watch thief" (a foreign repeat offender notorious for publicly calling Japan easy pickings) said as much. There are probably a ton of others like him too
136AnonymousOct 6, 2026 10:20
What was he even doing coming to Japan?
Detaining him was a good job, but does that mean he got handed over before Japan's own investigation was even finished?
172AnonymousOct 6, 2026 10:41
Re: #136
Germany requested the detention of a Russian national, and Japanese police just did exactly that — they probably didn't fully grasp the situation themselves.

Once Germany's interrogation progresses, they'll likely share information back with Japan
187AnonymousOct 6, 2026 10:56
Re: #172
It says here they were investigating jointly, though

Background and key points of this story

Qilin is a ransomware-as-a-service (RaaS) hacker group active since around 2022, known for its “double extortion” method of encrypting corporate systems and stealing data before demanding payment. Overseas, its attacks on healthcare organizations have caused serious disruption, and domestically it’s been linked to the system outage at major brewer Asahi Group. What split opinion in the thread was why Japan didn’t arrest him itself and instead handed him to Germany. According to the article and later replies, Japan had no independent arrest warrant in this case — this was a “detention” and “handover” carried out at Germany’s request. Many were also struck by the fact that the group shares its name with the qilin, the auspicious creature from Chinese mythology, though the article doesn’t explain the reasoning behind the name, and the thread’s discussion of it never gets past speculation.

*This article is excerpted and summarized from the 5ch (News Speed+) thread “Core member of ransomware group Qilin detained in Japan — Asahi also among the “attacked”“.

Comments

Leave a Reply

Your email address will not be published. Required fields are marked *