Kill Ransomware Group, also known as KillSec or KillSecurity, emerged publicly in late 2023. Initially, it presented as a hacktivist group aligned with Anonymous, primarily engaging in DDoS attacks and website defacements before transitioning to financially motivated ransomware operations in October 2023. The Russia-aligned group later established a ransomware-as-a-service (RaaS) model by June 2024, offering affiliates comprehensive services including penetration testing, OSINT gathering, and a user-friendly control panel with builder tools. This group is distinguished by its pivot from hacktivism to a sophisticated RaaS operation that disproportionately targets the healthcare sector and employs a hybrid extortion model, which includes website defacement.

Actores similares

lockbit3ransomware · 2016qilinransomware · 1933akiraransomware · 1524playransomware · 1268clopransomware · 1254lockbit2ransomware · 1002ransomhubransomware · 842incransomransomware · 832alphvransomware · 731dragonforceransomware · 580