In Japan, the ransomware name everyone knows is Qilin, thanks to the Asahi attack.
On the leak sites, 2026 belongs to The Gentlemen: 23 Japanese organizations listed this year (ransomware.live), vs 15 for Qilin. Group-IB says it grew out of a Qilin affiliate team, and it hands affiliates compromised FortiGates.
The brand changes; the way in doesn't.
https://japancyberwatch.com/articles/japan-ransomware-groups-2026-the-gentlemen-qilin