When preparing data for the Bitdefender Threat Debrief | October 2025, Bitdefender noticed a significant departure from established ransomware trends. Typically, the top five most impacted countries are consistently the US, Canada, and major Western European nations. However, for this period, South Korea (KR) suddenly became the second most-targeted country, with 25 victims claimed in a single month. This anomaly prompted an immediate investigation. Our initial analysis quickly revealed that the entire surge was attributed exclusively to the Qilin ransomware group. We also observed a high degree of industry focus: with the exception of one construction firm, every victim was in the financial services ...