Search Ransomware Intelligence
Jump to a group, country, industry or search victims.
Kill Security
As of Oct 19, 2026, Kill Security has listed 277 confirmed victims on its leak site since Mar 21, 2024, 0.9% of all victims tracked by Brandefense. Its most targeted country is United States (35.4% of its victims) and its most targeted sector is Financial Services.
KillSec originated as a hacktivist group aligned with the Anonymous movement before pivoting to ransomware operations in October 2023, officially launching a RaaS platform in June 2024 with an affiliate-friendly 88% revenue split, primarily targeting healthcare, financial services, and government sectors with over 250 documented victims as of late 2025.
Follow and IOC feeds are part of the Brandefense platform.
- Confirmed Victims
- 277
- Rank By Victims
- #25
- Last Leak-Site Post
- Sep 18, 2026
- Top Country
- United States
- Top Sector
- Financial Services
Victims Posted Per Month.
| Month | Confirmed victims |
|---|---|
| May 2026 | 3 |
| June 2026 | 0 |
| July 2026 | 3 |
| August 2026 | 1 |
| September 2026 | 1 |
| October 2026 (month in progress) | 0 |
| Month | Confirmed victims |
|---|---|
| November 2025 | 2 |
| December 2025 | 8 |
| January 2026 | 2 |
| February 2026 | 5 |
| March 2026 | 8 |
| April 2026 | 0 |
| May 2026 | 3 |
| June 2026 | 0 |
| July 2026 | 3 |
| August 2026 | 1 |
| September 2026 | 1 |
| October 2026 (month in progress) | 0 |
| Month | Confirmed victims |
|---|---|
| March 2024 | 5 |
| April 2024 | 1 |
| May 2024 | 2 |
| June 2024 | 0 |
| July 2024 | 3 |
| August 2024 | 12 |
| September 2024 | 18 |
| October 2024 | 30 |
| November 2024 | 34 |
| December 2024 | 28 |
| January 2025 | 9 |
| February 2025 | 20 |
| March 2025 | 16 |
| April 2025 | 18 |
| May 2025 | 5 |
| June 2025 | 2 |
| July 2025 | 0 |
| August 2025 | 2 |
| September 2025 | 31 |
| October 2025 | 8 |
| November 2025 | 2 |
| December 2025 | 8 |
| January 2026 | 2 |
| February 2026 | 5 |
| March 2026 | 8 |
| April 2026 | 0 |
| May 2026 | 3 |
| June 2026 | 0 |
| July 2026 | 3 |
| August 2026 | 1 |
| September 2026 | 1 |
| October 2026 (month in progress) | 0 |
Latest Kill Security Victims.
Search all 277 →| Victim | Country | Industry | Data claimed | Posted |
|---|---|---|---|---|
| Giti Corp giti-corp.com | CNChina | Manufacturing | Not stated | |
| Global Go globalgo.consulting | USUnited States | Consulting | Not stated | |
| cashcowboy cashcowboy.net | CACanada | Financial Services | Not stated | |
| Bulwark Exterminating bulwarkpestcontrol.com | USUnited States | Education and Research | Not stated | |
| origins ivf originsivf.com | INIndia | Healthcare | Not stated | |
| dsdlawfirm.com | USUnited States | Consulting | Not stated |
How They Operate.
Kill Security's threat actor profile lists 1 malware and tools, with its targets and related actors.
TTPs, CVEs and malware →Who Kill Security Targets.
Sectors
History.
First confirmed victim listed on its leak site
First seen in Brandefense data
Busiest month on record: 34 confirmed victims
Most recent leak-site post
Get Real-Time Alerts, IOC Feeds And Takedowns.
The Brandefense platform watches every leak site for your company, vendors and executives, and acts on what it finds.