killsec

Ransomware
Sourceransomware.live

About the group

KillSec originated as a hacktivist group aligned with the Anonymous movement before pivoting to ransomware operations in October 2023, officially launching a RaaS platform in June 2024 with an affiliate-friendly 88% revenue split, primarily targeting healthcare, financial services, and government sectors with over 250 documented victims as of late 2025.

Exploited vulnerabilities

No CVEs attributed to this group in public sources (MITRE ATT&CK). Absence of attribution does not mean absence of activity.

Impact and victims

The group killsec has 10 known ransomware victims. See the most affected sectors and countries and recent victims.

10known victims
10in Brazil
6sectors hit
Activity (12 months)
12
03
Most attacked sectors
Government & Defense3
Healthcare2
Manufacturing2
Financial Services1
Technology1
Transportation1
Most affected countries
🇧🇷 Brasil10
Recent victims
hospitalvetdiadema24h.com.brHealthcare · BR · 2026-03-17
republica federative do brasilGovernment & Defense · BR · 2025-12-15
MedicSolution+Healthcare · BR · 2025-09-06
Workers Informática LtdaTechnology · BR · 2025-04-01
CamimManufacturing · BR · 2024-11-20
Axpr Valve ScienceManufacturing · BR · 2024-11-13
ConCashFinancial Services · BR · 2024-10-28
Government of BrazilGovernment & Defense · BR · 2024-10-25
nfe.fazenda.gov.brGovernment & Defense · BR · 2024-09-29
terralogs.com.brTransportation · BR · 2024-08-23

killsec uses real techniques and exploits real flaws. TrueHacking's AI Autonomous Pentest simulates these attacks against your infrastructure and brings more security to your application.

Explore the AI Autonomous Pentest →