A ransomware group named Qilin, tied to Russia, placed the ATF on a leak site hosted on the dark web. That listing led the Justice Department to issue a formal designation of the matter.