Ransomware Group intelligence
Killsec
ActiveTrack Killsec with 285 published victims and 3 known leak locations in a single intelligence view.
Overview
Killsec is tracked by Breach House as a ransomware group with 285 published victims.
United States is currently the most targeted country in this dataset.
3 known leak locations are currently associated with this group.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (3)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Unknown | kill432ltnkqvaqntbalnsgojqqs2wz4lhnamrqjg66tq6fuvcztilyd.onion |
| Leak location 2 | Onion service | Unknown | ks5424y3wpr5zlug5c7i6svvxweinhbdcqcfnptkfcutrncfazzgz5id.onion |
| Leak location 3 | Onion service | Unknown | ks5424y3wpr5zlug5c7i6svvxweinhbdcqcfnptkfcutrncfazzgz5id.onion |
Top Activity Sectors
No sector intelligence available.
Ransom Notes (0)
▼No ransom notes available for this group.
Tools Used
▼No tools used available.
YARA Rules (0)
▼No YARA rules available.
Indicators of Compromise (0)
▼No IoCs available for this group.
Negotiation Chats (0)
▼No negotiation chats available.
Research Sources
No external research sources linked yet.
Victims (285)
Search, filter and paginate the victim timeline for Killsec. Showing 1–100 of 285.
| Type | Target | Discovered | Country | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | csinsurance.mx id29574 View details | Mexico | Other | — | |
|
Price ??? Disclosures 0/1 |
|||||
| Ransomware | acehospital.in id29575 View details | India | Other | — | |
|
Price ??? Disclosures 0/1 |
|||||
| Ransomware | dsdlawfirm.com id29140 View details | United States | Other | — | |
|
Price ??? Disclosures 0/1 |
|||||
| Ransomware | mrs holdings id28999 View details | Nigeria | Other | — | |
|
Price ??? Disclosures 0/1 |
|||||
| Ransomware | Medical PAY id28372 View details | Japan | Finance / Legal / Insurance | — | |
|
Price ??? Disclosures 0/1 |
|||||
| Ransomware | hospitalvetdiadema24h.com.br id27398 View details | Brazil | Healthcare / Pharma | — | |
|
Price ??? Disclosures 0/1 |
|||||
| Ransomware | palram.com id27397 View details | Israel | Other | — | |
|
Price ??? Disclosures 0/1 |
|||||
| Ransomware | meena health id27318 View details | Healthcare / Pharma | — | ||
|
Price ??? Disclosures 0/1 |
|||||
| Ransomware | NextCapitalTrust id27317 View details | Communication / Marketing | — | ||
|
Price ??? Disclosures 0/1 |
|||||
| Ransomware | shlomo bit id27241 View details | Israel | Communication / Marketing | — | |
|
Price ??? Disclosures 0/1 |
|||||
| Ransomware | MyFair id27112 View details | Korea, Republic of | Communication / Marketing | — | |
|
Price ??? Disclosures 0/1 |
|||||
| Ransomware | MedicalGPT id27111 View details | United States | Healthcare / Pharma | — | |
|
Price ??? Disclosures 0/1 |
|||||
| Ransomware | yurdriversnetwork id27110 View details | United States | Telecommunications | — | |
|
Price ??? Disclosures 0/1 |
|||||
| Ransomware | primaria ungheni id26834 View details | Romania | Communication / Marketing | — | |
|
Price ??? Disclosures 0/1 |
|||||
| Ransomware | onlinedivorcetexas.com id26700 View details | United States | Communication / Marketing | — | |
|
Price ??? Disclosures 0/1 |
|||||
| Ransomware | Orain.io id26605 View details | Spain | Communication / Marketing | — | |
|
Price ??? Disclosures 0/1 |
|||||
| Ransomware | Getly id26374 View details | Nigeria | Communication / Marketing | — | |
|
Price ??? Disclosures 0/1 |
|||||
| Ransomware | brooklyn group id26218 View details | United States | Communication / Marketing | — | |
|
Price ??? Disclosures 0/1 |
|||||
| Ransomware | X-CD Technologies id25731 View details | United States | IT | — | |
|
Price ??? Disclosures 0/1 |
|||||
| Ransomware | publicsafety.ohio.gov id25402 View details | United States | Public Sector | — | |
|
Price ??? Disclosures 0/1 |
|||||
| Ransomware | grade results id25083 View details | United States | Communication / Marketing | — | |
|
Price ??? Disclosures 0/1 |
|||||
| Ransomware | republica federative do brasil id24776 View details | Brazil | Public Sector | — | |
|
Price ??? Disclosures 0/1 |
|||||
| Ransomware | dabafinance.com id24761 View details | United Kingdom | Finance / Legal / Insurance | — | |
|
Price ??? Disclosures 0/1 |
|||||
| Ransomware | screenate id24631 View details | India | Communication / Marketing | — | |
|
Price ??? Disclosures 0/1 |
|||||
| Ransomware | koncept law id24630 View details | India | Finance / Legal / Insurance | — | |
|
Price ??? Disclosures 0/1 |
|||||
| Ransomware | caryanams id24629 View details | India | Communication / Marketing | — | |
|
Price ??? Disclosures 0/1 |
|||||
| Ransomware | playroll id24628 View details | United Kingdom | Communication / Marketing | — | |
|
Price ??? Disclosures 0/1 |
|||||
| Ransomware | seajob id24627 View details | India | Communication / Marketing | — | |
|
Price ??? Disclosures 0/1 |
|||||
| Ransomware | Rama Judicial id24262 View details | Colombia | Communication / Marketing | — | |
|
Price ??? Disclosures 0/1 |
|||||
| Ransomware | Force Brokerage id23909 View details | United States | Communication / Marketing | — | |
|
Price ??? Disclosures 0/1 |
|||||
| Ransomware | National Institute of Administratio... id23312 View details | Romania | Education | — | |
|
The National Institute of Administration (INA) is a Romanian public institution dedicated to the professional development and training of civil servants and personnel in public administration. Operating under the coordination of the Ministry of Development, Public Works, and Administration, INA plays a pivotal role in enhancing the efficiency, transparency, and effectiveness of public services across Romania. |
|||||
| Ransomware | Badger Popcorn And Concession Suppl... id23311 View details | United States | Communication / Marketing | — | |
|
Badger Popcorn & Concession Supply Company specializes in providing high-quality concession supplies, with a focus on gourmet popcorn and related equipment. The company offers a diverse range of products, including popcorn snacks, cleaning supplies, soft serve and ice cream machines, and slush puppie equipment. As a Medallion Dealer for Gold Medal Products Co., Badger Popcorn is committed to delivering exceptional products and services, catering to both individual customers and businesses. The company is also known for its gift tins, featuring gourmet popcorn options, making it a go-to destination for unique gift ideas. |
|||||
| Ransomware | Economy Restaurant Equipment And Su... id23310 View details | United States | Hospitality / Food & Beverage / Tourism | — | |
|
Economy Restaurant Equipment & Supply Company is a premier dealer of restaurant and food service equipment in Southern California, specializing in a comprehensive range of products and services. The company offers professional kitchen equipment, design and planning services, and holds auctions for used equipment. Economy Restaurant Equipment stocks major brands such as Wolf, Vulcan, and True, providing everything from cooking appliances to dining supplies. With over 20 years of experience, the company is dedicated to helping food service establishments enhance their operations through quality products and expert design solutions. |
|||||
| Ransomware | J AND S Electrical And Lighting Sup... id23309 View details | United States | Services | — | |
|
J&S Electrical and Lighting Supply, LLC is a locally owned distributor specializing in electrical and lighting products, dedicated to providing exceptional service and support to its customers. Located in Athens, Georgia, the company offers a wide range of electrical supplies and lighting solutions to meet the needs of residential and commercial clients. Committed to customer satisfaction, J&S Electrical and Lighting Supply operates Monday through Friday, ensuring accessibility for all customers seeking quality electrical solutions. |
|||||
| Ransomware | FAAB Invest Advisors Private Limite... id23308 View details | India | Communication / Marketing | — | |
|
FAAB Invest Advisors Private Limited operates a green investment platform offering fractional ownership in sustainable assets such as electric mobility, farmlands, and renewable energy projects. The company focuses on providing retail investors access to environmentally-friendly, asset-backed investment opportunities with potential for returns and portfolio diversification. |
|||||
| Ransomware | DUC App: Global Money Movement, Sim... id23307 View details | Canada | Retail / E-commerce | — | |
|
DUC App is a leading financial technology platform that empowers individuals and businesses to manage global payments and currency exchange effortlessly. Offering instant transfers, international mobile top-ups, cryptocurrency transactions, and robust API integrations for e-commerce, DUC App delivers a secure, user-friendly experience across web, iOS, and Android devices -- The data includes, but is not limited to, clients' home addresses, phone numbers, transaction histories, email addresses, public and private crypto address keys, verified documents, passports, IDs, and more. If the company refuses to cooperate, we will release all information. |
|||||
| Ransomware | iCare Software id23306 View details | United States | IT | — | |
|
Founded in 1997, iCare Software, based in the United States, delivers innovative management solutions for childcare and afterschool programs. Serving childcare centers, preschools, afterschool programs, and multi-site operations, iCare automates critical tasks like attendance tracking, staff scheduling, tuition collection, and compliance reporting. Its unique offerings include AI-driven analytics, business intelligence dashboards, and CRM tools to boost enrollment and staff retention. With seamless data migration and robust back-end technology, iCare empowers providers to focus on quality care while streamlining operations and driving growth. |
|||||
| Ransomware | Vanan Online Services id23305 View details | United States | Services | — | |
|
Vanan Online Services offers a comprehensive range of language services, including transcription, translation, captioning, subtitling, voice-over, and typing. They cater to individuals and businesses across various industries, providing solutions in over 100 languages with a focus on quality and affordability. With a commitment to seamless project management and customer support, they ensure timely deliveries and customer satisfaction. The company has built a strong reputation over a decade of service, making them a trusted partner in the language services field. |
|||||
| Ransomware | KillSec 4.0 id22807 View details | Other | |||
|
No additional victim description available. |
|||||
| Ransomware | WalletKu Indompet Indonesia id22621 View details | Indonesia | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | XChief / ForexChief id22620 View details | Virgin Islands, British | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Study Gate id22583 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Rainwalk Technology id22525 View details | Canada | IT | ||
|
No additional victim description available. |
|||||
| Ransomware | Fractalite id22524 View details | United Kingdom | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | BEHCA id22523 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | VTK Legal id22522 View details | Poland | Finance / Legal / Insurance | ||
|
No additional victim description available. |
|||||
| Ransomware | AX CAPITAL id22521 View details | United Arab Emirates | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | FDB Collections id22520 View details | Greece | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | MortDash id22519 View details | Other | |||
|
No additional victim description available. |
|||||
| Ransomware | Scanbo id22518 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | UwayApply id22517 View details | Korea, Republic of | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Top4Fans id22516 View details | France | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Cadorim id22515 View details | Belgium | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Allure Clinics id22428 View details | Australia | Healthcare / Pharma | ||
|
No additional victim description available. |
|||||
| Ransomware | HappyTenant id22382 View details | United Arab Emirates | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | BlockBets Casino id22290 View details | Other | |||
|
No additional victim description available. |
|||||
| Ransomware | Princeps Credit Systems Limited id22260 View details | Nigeria | Finance / Legal / Insurance | ||
|
No additional victim description available. |
|||||
| Ransomware | BusOnlineTicket Thailand id22259 View details | Thailand | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | 1 ACT Driving Schools id22258 View details | United States | Education | ||
|
No additional victim description available. |
|||||
| Ransomware | BFLI id22256 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Docklyne id22255 View details | Other | |||
|
No additional victim description available. |
|||||
| Ransomware | Accelerated Academy id22253 View details | United States | Education | ||
|
No additional victim description available. |
|||||
| Ransomware | AVA Senior Connect id22191 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Nathan And Nathan id22190 View details | United Arab Emirates | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Nathan id22167 View details | Other | |||
|
No additional victim description available. |
|||||
| Ransomware | GPS Trackit id22163 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Archer Health id22162 View details | United States | Healthcare / Pharma | ||
|
No additional victim description available. |
|||||
| Ransomware | Suiza Lab id22157 View details | Peru | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | eMedicoERP id22155 View details | India | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | GoTelemedicina id22154 View details | Colombia | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | MedicSolution+ id22153 View details | Brazil | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | DUC App: Global Money Movement, Simplified id21846 View details | United States | Services | ||
|
No additional victim description available. |
|||||
| Ransomware | Doctocliq id21821 View details | Mexico | Communication / Marketing | ||
|
En Doctocliq ayudamos a miles de doctores en 19 países a gestionar sus consultorios de forma más eficiente, rentable y humana, con una plataforma que conecta agenda, expediente clínico, finanzas y comunicación con pacientes mediante inteligencia artificial. Estamos construyendo la infraestructura digital para que millones de profesionales de la salud en Latinoamérica lideren su propio crecimiento. Nuestro equipo crece con la misma velocidad que nuestra visión: si te apasiona la tecnología, el impacto social y el trabajo colaborativo, aquí puedes transformar la salud junto a nosotros. |
|||||
| Ransomware | NewGen id20646 View details | India | Transportation / Travel / Logistics | ||
|
No additional victim description available. |
|||||
| Ransomware | StudentKare id20645 View details | India | Education | ||
|
No additional victim description available. |
|||||
| Ransomware | Novaria id20231 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Sama id20230 View details | Italy | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Constructive Building Solutions id20229 View details | United States | Construction / Real Estate | ||
|
No additional victim description available. |
|||||
| Ransomware | Medswana id20143 View details | Botswana | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | SNS SYSTEM id19766 View details | India | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Enflame Technology id19229 View details | China | IT | ||
|
No additional victim description available. |
|||||
| Ransomware | Brügger Architekten AG id18906 View details | Switzerland | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Royal Saudi Air Force id18905 View details | Saudi Arabia | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Collective Architecture id18904 View details | United Kingdom | Construction / Real Estate | ||
|
No additional victim description available. |
|||||
| Ransomware | IMA Global id18903 View details | United States | Services | ||
|
No additional victim description available. |
|||||
| Ransomware | US BioTek Laboratories id18902 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | 747 Studios id18893 View details | Germany | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | BenefitElect id18892 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Ocuco id18891 View details | Ireland | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Workers Informática Ltda id18890 View details | Brazil | Services | ||
|
No additional victim description available. |
|||||
| Ransomware | Testima Engineering id18889 View details | Manufacturing / Engineering | |||
|
No additional victim description available. |
|||||
| Ransomware | Brella id18888 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Fancy Films id18887 View details | Australia | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Lendco id18886 View details | United Kingdom | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Nydegger + Finger AG id18885 View details | Switzerland | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Dorel Home id18989 View details | United States | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Dorel Home id18989 View details | United States | Other | ||
|
Dorelhome.com is the digital storefront of Dorel Home, a North American furniture brand headquartered in Quebec that designs and manufactures ready-to-assemble home furniture and commercial hardware for major retailers. Since 1962, the company has been globally recognized for producing quality furniture for every home, room, and lifestyle, operating across diverse furniture segments throughout North America. The brand offers a wide range of home furnishings and commercial hardware, serving major retailers with a focus on sustainable growth and customer-centric strategies. Dorel Home was listed as a ransomware victim associated with the threat actor killsec, with no confirmed details on stolen data or breach specifics. |
|||||
| Ransomware | Hexicor id18988 View details | Australia | Other | ||
|
No additional victim description available. |
|||||
| Ransomware | Hexicor id18988 View details | Australia | Other | ||
|
Hexicor is an Australian technology solutions provider headquartered in Brisbane, Queensland, with operations across Queensland, South Australia, and the Northern Territory. Its services include communications and digital access control, mobility and IoT, and managed IT services for business customers. Company profiles describe it as a national ICT integrator and technology leader serving organisations that need connectivity and operational support. It was listed as a ransomware victim associated with killsec. |
|||||
| Ransomware | AAPG id18987 View details | United States | Other | ||
|
No additional victim description available. |
|||||