killsec
Intelligence Profile
KillSec originated as a hacktivist group aligned with the Anonymous movement before pivoting to ransomware operations in October 2023, officially launching a RaaS platform in June 2024 with an affiliate-friendly 88% revenue split, primarily targeting healthcare, financial services, and government sectors with over 250 documented victims as of late 2025.
Threat Analysis
killsec is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of financial.
Financially motivated threat actors like killsec prioritize monetary gain through methods such as ransomware deployment, banking trojans, cryptocurrency theft, BEC scams, or credential harvesting for resale on underground markets.
Known Campaigns
Killsec is conducting an active ransomware campaign targeting organizations across 3 countries. Primary targets: Financial Services, Healthcare. 6 confirmed victims recorded in the last 45 days. Campaign appears to have stalled.