Threat Group Profile
killsec
● Active — last 30 days
Victim claims
9
First seen
May 2026
Last activity
23 Aug 2026
Tracked since
Mar 2024
Group overview
KillSec originated as a hacktivist group aligned with the Anonymous movement before pivoting to ransomware operations in October 2023, officially launching a RaaS platform in June 2024 with an affiliate-friendly 88% revenue split, primarily targeting healthcare, financial services, and government sectors with over 250 documented victims as of late 2025.
Preferred targets
Financial Services · 3
Healthcare · 2
Business Services · 2
Other · 1
Transportation · 1
Most targeted countries
US · 3
IN · 2
MX · 1
NG · 1
JP · 1
PE · 1