Ransomware needs a way in. Stolen credentials are the cheapest one.
killsec Ransomware Group
Ransomware group profile
Description
KillSec is a notorious ransomware group that has gained prominence for its aggressive attacks on critical infrastructure across various sectors. Known for employing advanced tactics, including double extortion methods, they encrypt data and threaten to leak sensitive information if ransom demands are not met. Their operations have increasingly targeted industries with less robust cybersecurity defenses, causing widespread disruption and financial damage.
Key insights
- •Targets critical infrastructure, particularly in healthcare and finance sectors.
- •Utilizes advanced obfuscation techniques to avoid detection.
- •Employed double extortion tactics, encrypting data and threatening leaks.
- •Gains access through spearphishing and exploiting software vulnerabilities.
- •Recent campaigns have increasingly used sophisticated ransomware variants.
- •Emerging trend involves leveraging zero-day vulnerabilities for attacks.
Threat Level & Status Breakdown
For killsec · Based on incidents in selected period
Recent activity
Monthly attack count for killsec in the selected period
Intelligence
IOCs, YARA/Sigma rules, and related families for killsec
- 4e1ed311021ce99a7556af05ca520a5569853eed
- 941a30698db98f29919cba80e66717c25592697b1447f3e96825730229d97549
- 0a3b0cd349210c4488ef71e8b331ba47
- 184a400fe334027ff287ad0cf83c165fdf4605507c83ec054fb2b544f877163c
- d4f71fc5479a02c8ff57c90fc67b948adb5604e0
- 8b758ccdfbfa5ff3a0b67b2063c2397531cf0f7b3d278298da76528f443779e9
- d8edd46220059541ff397f74bfd271336dda702c6b1869e8a081c71f595a9e68
- 01793e6f0d5241b33f07a3f9ad34e40e056a514c5d23e14dc491cee60076dc5a
- d54fa589708546eca500fbeea44363443b86f2617c15c8f7603ff4fb05d494c1
- c9f71fc4f385a4469438ef053e208065431b123e676c17b65d84b6c69ef6748a
- 62242df8c7db337e46f44c4323ac9738adba89f095deb8e5d873ee8b35fa5079
- 670be5b8c7fcd6e2920a4929fcaa380b1b0750bfa27336991a483c0c0221236a
- 12b818950d749c378aabd81a0bac9742
- 8cee3ec87a5728be17f838f526d7ef3a842ce8956fe101ed247a5eb1494c579d
- e014c9e5f712775e771c7f36d2a580d8d290c9ad
- 056451b28c4bfe6bf1536c1d67b33f312a06c656cd3c633f40cc5f5b85c6528b
- c3ecbc6023bfa170c31eaf7033b68495798e305111ca9f2f203f58b9ec942384
- f899781c5239e59fd7d11c9211c08d28
- 4814ea15da1826d9ef400c3e607ca87d11b18b8a1b4f43f13afa93467429dfb8
- aadf323d8052da80c761ab9d05717603804405ee33e624926009a30d857d6d1a
- 1d17937f2141570de62b437ff6bf09b1b58cfdb13ff02ed6592e077e2d368252
- 1e54b2e6558e2c92df73da65cd90b462dcafa1e6dcc311336b1543c68d3e82bc
- ebe6068e2161fe359a63007f9febea00399d7ef3
- f001329114937fbc439f251c803ba825
- 95ae81de52655fac3f1b226f1896690566090640
- 2bd6b5cbeddab8b01e14ed4c073afdbd4316340aada77e3e55ba5e1af21652f7
- 381b421b49f88e035b274711d315050f83c43e22
- 3a0ef7cf40cc50d47cb956fce8baa456
- f52e18b7c8417c7573125c0047adb32d8d813529
- a94d8f20704551ba54841ca83b8cbeab
- 96e20ac7d4b018b360672f3fd9e63d3429bb4dee3974951c70699f44c87278c2
- a1b468e9550f9960c5e60f7c52ca3c058de19d42eafa760b9d5282eb24b7c55f
- c3804d1329b55a37bfa2f835e1e9bbc7bdb2b260f8e3627c06e02c9f52685d44
- 7eec7d07587112777016e5742c0d002d7e64a3e1fe7bde82fed8f65e3663456a
- bdd89826ab8d3e3c03833b1ea8e4b0a34c80f13bfa5882e5b82f896cec41d141
- 318bf7ea84487c8a63a3996e24494455
- 243ed6b028aeb2c94eeafbffcad193f43b808444
- c902a206da5c3e1a4b8b8ba9f0e63f314e8cadcf044c25f729176b29c19bcbbb
- 5e9362dba53021ab588e396e1cb28100718471f07c5dd5cafa6bf5728f014b97
- 8684e74d35baab30e8f8af7db486c2a339d3063feb2074109b8c96c1fea8313e
- a5febb4b5ba6572594de87d2a9de6df65d49da755385bf3d3d4d054772ce493c
- 191a8766da98b1f992072045905cf82c771d8cb9f697d08873686778dc70c7f6
- 982ec3915d458007e960a4dbe0c9c914825fd88c1739ab3f7edfebaaa10bc265
- f015da1f2ada32f734b81aa282bea62840cd84afaa353ca52d5e2d0c82e705d1
- 9a4e39fcb4033a9c849890085b67faea7265eaf56744e77aa8180b1834b7e14a
- c220f9ba0ee8445ab6d36f19d7cf24fd6df72eea41b9ba40f585451ee24c0f6d
- e1c371c7c39c16d208bcbaa5b5d0714df696e6ef68b95a880673a904527c8b96
- 785b52e144577375abe4d1c785c451f60c423788
- e6cf946bd5a17909ae3ed9b1362cfaafa7afe02e74699dcbc3d515a6f964b0b0
- c6d6c64d12cf9dd4474aa492697720af
- c5eeec72b5e6d0e84ff91dfdcbefbbbf441878780f887febb0caf3cbe882ec72
- 49a58ddf3bedc37b61a8205bb3805413
- 64bd7003f58ac501c7c97f24778a0b8f412481776ab4e6d0e4eb692b08f52b0f
- 8e7ded0089b6adfdd951b5d8175078f7
- 6e426247c1fdaaa09091b5ab4bb5a76b
- 9d5c10c7d0d5e2ce8bb7f1d4526439ce59108b2c631dd9e78df4e096e612837b
- 99616f9eb80d8c0e2d91c12fa9db7c6ab94b8671
- be4070b79a2f956e686469b37a8db1e7e090b9061d3dce73e3733db2dbe004f0
- a0b47c781e70877ad4e721ba49f64fc0bc469e38750f070a232d12f03d9990bc
- 655d3d7d35fff093109abdae45d85bdb
- e7c03309c93c99d195e7cd7984dee2c5c9cd90e3
- 8400e1a95f7a890da7ff9abbe59e084e
- 33bac66d1de6c64e5f34ba184de4842db48ac603
- b417396efb07943d380182d610da313607308a74fc0dc77318407a5248cbab6e
- 2ba527fb8e31cb209df8d1890a63cda9cd4433aa0b841ed8b86fa801aff4ccbd
- 0df13fd42fb4a4374981474ea87895a3830eddcc7f3bd494e76acd604c4004f7
- 8ad67a1b7a5f2428c93f7a13a398e39c
- e4249cf9557799e8123e0b21b6a4be5ab8b67d56dc5bfad34a1d4e76f7fd2b19
- 8a58fa790fc3054c5a13f1e4e1fcb0e1167dbfb5e889b7c543d3cdd9495e9ad6
- c9df0a2f377ffab37ede8f2b12a776a7ae40fa8a6b4724d5c1898e8e865cfea1
- 38331f134a3f5ee9a945c2d1d4f0768a
- 5492947d2b85a57f40201cd7d1351c3d4b92ae88
- f0220f5d1f935f09d58e869247cfdb5d
- 1d5ef46357eb2298b1c3c4faccbaafa729137613
- 811cd6ebeb9e2b7438ad9d7c382db13c1c04b7d520495261093af51797f5d4cc
- 7b659210c509058bd5649881f18b21b645acb42f56384cbd6dcb8d16e5aa0549
- dece5eaeb26d0ca7cea015448a809ab687e96c6182e56746da9ae4a2b16edaa9
- b826517859a1ed53e34c2668e06868bd8680d52c9af63f8e1c976d13f7d8315b
- a1afebafe5a7598cef0ef8f348d49996
- f524eeeb2c9c20d9f1ef8fb4734a85f3daa9b6fb
- 94f73b5dc06ba6705fcef3e759413a747049c2949a0c2e44afc03b2f9989cf73
- f92cd489de2b5d82b4c3998b40cb3df8
- 4c917d92ded082bd8623d5e148d4b65ed02447bad3157cad8b66194b93150262
- d1f2de5b461f3344f4274806c4ff1ac1
- ed712da62561ecf8b4f43c81516d68f73fd753d3
- b40e56439d4dcdc238b8254adbd8862c73ca34bc
- 3786bf65df20165b526af646ab1e46c7
- 74a7b0e5438b16326b9230aea2a5b359
- 0076795b220fa48c92b57994b015119aae8242ca
- 94b5e34bef3d836632ef422205c5c1f3
- e26d65d8c25b0be7379e4322f6ebcadecbb02286
- 2f2ced67e87101f4d1275456f0861209809492fc
- ceaec46f7d65706ffc639e75c515d0a35a21338d
- 470f0db6a56a879985c62cd71c5a98a4
- 07a7f829677af65f778369a3fc4e1f86
- b64d3d38de70cade9b423e87c571a65c
- ce02802067934e0eb072f69bf6427bf6
- e73f6e1f6c28469e14a88a633aef1bc502d2dbb1d4d2dfcaaef7409b8ce6dc99
- 22af84327cb8ecafa44b51e9499238ca2798cec38c2076b702c60c72505329cb
- 501e5cc4cb65d55cff934e7447528fef5243578d
- 9cce3eaae0be9b196017cb6daf49dd56146016f936b66527320f754f179c615f
- d7bcab5acc8428026e1afd694fb179c5cbb74c5be651cd74e996c2914fb2b839
- 649ee35ad29945e8dd6511192483dddfdfe516a1312de5e0bd17fdd0a258c27f
- 53fd5984c4f6551b2c1059835ea9ca6d0342d886ba7034835db2a1dd3f8f5b04
- 311ec9208f5fe3f22733fca1e6388ea9c0327be0836c955d2cf6a22317d4bdca
- 702bf51811281aad78e6ca767586eba4b4c3a43743f8b8e56bb93bc349cb6090
- 7c4a99382dbbd7b5aaa62af0ccff68aecdde2319560bbfdaf76132b0506ab68a
- 4d590a9640093bbda21597233b400b037278366660ba2c3128795bc85d35be72
- 1b409644e86559e56add5a65552785750cd36d60745afde448cce7f6f3f09a06
- 2f3d67740bb7587ff70cc7319e9fe5c517c0e55345bf53e01b3019e415ff098b
- a6ff418f0db461536cff41e9c7e5dba3ee3b405541519820db8a52b6d818a01e
- 02a89e2fc574a8f965666f16fce5a248a4a1ec07b32e23cee38f3808d7bba3a0
- 2af2841bf925ed1875faadcbb0ef316c641e1dcdb61d1fbf80c3443c2fc9454f
- 636d4f1e3dcf0332a815ce3f526a02df3c4ef2890a74521d05d6050917596748
- a5fd7e67d46f4d2239c43101666dd0582367bd8d
- 2689db9c78a508f99898cce9a85f0632
- 65f7c3e16598a8cb279b86eaeda32cb7a685801ed07d36c66ff83742d41cd415
- 6954eaed33a9d0cf7e298778ec82d31bfbdf40c813c6ac837352ce676793db74
- 6c86608893463968bfda0969aa1e6401411c0882662f3e70c1ac195ee7bd1510
- 7d6b598eaf19ea8a571b4bd79fd6ff7928388b565d7814b809d2f7fdedc23a0a
- 8b6afbf73a9b98eec01d8510815a044cd036743b64fef955385cbca80ae94f15
- 8bdb8df5677a11348f5787ece3c7c94824b83ab3f31f40e361e600576909b073
- 977054802de7b583a38e0524feefa7356c47c53dd49de8c3d533e7689095f9ac
- c353a708edfd0f77a486af66e407f7b78583394d7b5f994cd8d2e6e263d25968
- c79413ef4088b3a39fe8c7d68d2639cc69f88b10429e59dd0b4177f6b2a92351
- cab1c4c675f1d996b659bab1ddb38af365190e450dec3d195461e4e4ccf1c286
- dfac7cd8d041a53405cc37a44f100f6f862ed2d930e251f4bf22f10235db4bb3
- e880a1bb0e7d422b78a54b35b3f53e348ab27425f1c561db120c0411da5c1ce9
- f8c80bbecbfb38f252943ee6beec98edc93cd734ec70ccd2565ab1c4db5f072f
- fd58900ea22b38bad2ef3d1b8b74f5c7023b8ca8a5b69f88cfbfe28b2c585baf
- 4c1e54067911aeb5aa8d1b747f35fdcdfdf4837cad60331e58a7bbb849ca9eed
- 4d9f632e977b16466b72b6ee90b6de768c720148c1e337709b57ca49c1cdffb6
- 508a20f25a9e0797b3dea4b5055b16af
- a31642046471ec138bb66271e365a01569ff8d7f
- c43b0006b3f7cd88d31aded8579830168a44ba79
- f194b0bc35b74f6ed410d8a35e471c57
- a88f34c0b3a6df683bb89058f8e7a7d534698069
- 106248206f1c995a76058999ccd6a6d0f420461e
- 4896cfff334f846079174d3ea2d541eec72690a0
- 5ee4be6f82a16ebb1cf8f35481c88c2559e5e41a
- aa6a9c25aff0e773d4189480171afcf7d0f69ad9
- 0a93c86ef96d81c90485df71a3b90961
- cb2d18fb91f0cd88e82cb36b614cfedf3e4ae49b
- cbe82e23f8920512b1cf56f3b5b0bca61ec137b9
- 10a5eab3eef36e75bd3139fe3a3c760f54be33e3
- 34ff2f72c191434ce5f20ebc1a7e823794ac69bba9df70721829d66e7196b044
- 160eda7ad14610d93f28b7dee20501028c1a9d4f5dc0437794ccfc2604807693
- 90df78db1fb5aea6e21c3daca79cc690900ef8a779de61d5b3c0db030f4b4353
- 6614545eec64c207a6cc981fccae8077eac33a79f286fc9a92582f78e2ae243a
- 4aeb65e3c9a2ca3177f3525686d3b9f4a39ca2b749acd8431589ee28fa528bb9
- 5db356a7809736550536b612394fa6700b1f68e4f584bfff07ece77f18703af5
- 7ae31f517fc172a4924f9ee0321c2b013cd3836c97166dac4bcfc5c108d30596
- 785a5b92bb8c9dbf52cfda1b28f0ac7db8ead4ec3a37cfd6470605d945ade40e
- de998bd26ea326e610cc70654499cebfd594cc973438ac421e4c7e1f3b887617
- f08676eeb489087bc0e47bd08a3f7c4b57ef5941698bc09d30857c650763859c
- 53b65b7c38e3d3fca465c547a8c1acc53c8723877c6884f8c3495ff8ccc94fbe
- c6b5034526b90943b8c478494068a08d
- 5d0509f68a9b7c415a726be75a078180e3f02e59866f193b0a99eee8e39c874f
- 363a97ec2f5b63c9d5e8f0f2daf487c9db423a58
- 8dca55b5485aa1d9fa8716f15ee3802d8e8f43e5
- 3d32539314f681bc250ee749e1dc4538
- 0c8d22d58a747ceccad56317b9c0afe58fe4b9f3c2138134e978e43a5f5ac390
- 881a84477b509e2e63b70915055b9af1d12cf8fde9fb5031823c8c2a38c8979a
- e2c283438e5f9236c5cb2e6b8b95ca78d520f7b776d64a050664972cb51076f5
- 710e80fb64e08f20ab58c20ccdbc966f6e3b54511775e8ed99ff0bcf51690227
- 4d0663cff0c5c3f29c81e9aefd37f16a318ff638986ecc60e9bce6c90b72606b
- 6dc8e99da68b703e86fa90a8794add87614f254f804a8d5d65927e0676107a9d
- 4f12c5dca2099492d0c0cd22edef841cbe8360af9be2d8e9b57c2f83d401c1a7
- e345d793477abbecc2c455c8c76a925c0dfe99ec4c65b7c353e8a8c8b14da2b6
- 2798bf4fd8e2bc591f656fa107bd871451574d543882ddec3020417964d2faa9
- fb2b9163e8edf104b603030cff2dc62fe23d8f158dd90ea483642fce2ceda027
- bfc1064d3624c7bc68ef6b8ce2b0f40229d5981472c8b443c58f38bf3f461b2a
- abd4263c97ab33b22f67e581ebb09ec7b98e4084dd32a7eca6502d3737715769
- 3b46515807a491f366d6e695288398ddab93e53f
- b0fd9705e8f83129f97f9111b03642fe
- 3f4b5b22b53f2fdeb7a82c94ac4d846f1e4ac0e9d055020f2f063598025b4674
- f10bd5443148d47fbf7c6a6998651eb9bda4c7c9213f9e5a65a76e98637cb748
- 401c5d2157d303df1ca465ff4097ee4474574c39f614cbb5734193a3917354c0
- e06520c65bf27d9110d68ecc0de0e0824c3a99be080ead1a5b5be8fd2a26d12d
- 5303183d82b8c4d2a47fab4167868a8cfbf8d56d3397701ab890e88c99105ae4
- 73e775fc0e1a4780a06fda4f21cca16c1dd9eda57fc8a0ab4fb14ebe5a259eac
- 3ecf05857d65f7bc58b547d023bde7cc521a82712b947c04ddf9d7d1645c0ce0
- 13265c0e32312a0763f3f8fed0f017a606355987ac9398bfb38f47c760ad32b0
- 425d28263b9cea66a259a86f0fca620f
- 49c720758b8a87e42829ffb38a0d7fe2a8c36dc3007abfabbea76155185d2902
- 95cb337dbb1f77fa8fb1b823f62e6419e92625f8
- 89a54d3a38d2364784368a40ab228403f1f1c1926892fe8355aa29d00eb36819
- 4538232bfc2fc58bbcace6e3821d5e75
- f5e122b60390bdcc1a17a24cce0cbca68475ad5abee6b211b5be2dea966c2634
- b9d1464bbffadb05228f29a3d75dc78f22a24b57
- a67d73996a5479312f4a4ea4fccdde293695359aa6b6da06c01248066a7131f9
TTPs & Attack Vectors
Tools, initial access, and MITRE ATT&CK techniques for killsec
T1486
T1486
T1490
T1490
T1566.002
T1566.002
T1059.001
T1059.001
T1047
T1047
T1078
T1078
T1562
T1562
T1021
T1021
T1021.001
T1021.001
T1071.001
T1071.001
Victims(199)
| Company | Country | Status | Discovered | |
|---|---|---|---|---|
| Giti Corp | Singapore | Claimed | about 11 hours ago | |
| Global Go | Peru | Claimed | 26 days ago | |
| cashcowboy | — | Claimed | about 2 months ago | |
| Bulwark Exterminating | — | Claimed | about 2 months ago | |
| origins ivf | — | Claimed | about 2 months ago | |
| cashcowboy | United States | Claimed | about 2 months ago | |
| Bulwark Exterminating | United States | Claimed | about 2 months ago | |
| origins ivf | India | Claimed | about 2 months ago | |
| Certus | Mexico | Claimed | 4 months ago | |
| Ace Hospital | India | Claimed | 4 months ago | |
| Certus | Mexico | Claimed | 4 months ago | |
| Ace Hospital | India | Claimed | 4 months ago | |
| DSD Law Firm | — | Claimed | 4 months ago | |
| DSD Law Firm | United States | Claimed | 4 months ago | |
| mrs holdings | Nigeria | Claimed | 4 months ago | |
| mrs holdings | — | Claimed | 4 months ago | |
| Medical PAY | — | Claimed | 5 months ago | |
| Medical PAY | Japan | Claimed | 5 months ago | |
| Government of the People | — | Claimed | 5 months ago | |
| Hospital Veterinário Diadema | Brazil | Claimed | 6 months ago |
Page 1 of 10
Affected countries(68)
Countries where this group has been reported to target or leak victims.