Threat Group Profile
killsec
Dormant / historical
Victim claims
5
First seen
May 2026
Last activity
03 Jun 2026
Tracked since
—
Group overview
KillSec originated as a hacktivist group aligned with the Anonymous movement before pivoting to ransomware operations in October 2023, officially launching a RaaS platform in June 2024 with an affiliate-friendly 88% revenue split, primarily targeting healthcare, financial services, and government sectors with over 250 documented victims as of late 2025.
Preferred targets
Financial Services · 2
Business Services · 2
Healthcare · 1
Most targeted countries
MX · 1
IN · 1
US · 1
NG · 1
JP · 1
