Qilin, a ransomware operation known to breach firms in critical sectors via phishing emails, added Yanfeng to its extortion portal Monday.