killsec3
ransomware group · aka KillSec, KillSec3, KillSec 3 · unknown · active since Mid-2023 (per public ransomware leak-site trackers)
Victims · 7d
0flat
Victims · 30d
0active targets
Victims · 90d
3
All-time (tracked)
391since 2024-10-28
Last post
07-23 16:51UTC
Estimated earnings
—public reporting
Profile · glm-5.3-flash · updated
KillSec (tracked here under the leak-site designation 'killsec3') is an opportunistic ransomware and data-extortion operation first observed by ransomware trackers in mid-2023; any relationship to a similarly named hacktivist collective is unconfirmed. The group publishes victims and stolen data on a Tor leak site with publication countdowns, consistent with a double-extortion model, but in-depth vendor research into its malware payload, affiliate structure, and ransom demands is limited. Its listings show broad, opportunistic targeting of predominantly small and mid-sized organizations across healthcare, veterinary, legal, insurance, manufacturing, and consumer services in the United States, Latin America, India, and Israel. This dashboard's tracking shows low recent volume — 3 victims in the past 90 days and 3 total since 2026-07-23 — in line with the group's generally low posting cadence. No specific CVEs are publicly associated with its tradecraft, and no public earnings estimates are available.
Tactics & tooling
- Publishes victim announcements and stolen data on a Tor leak site with countdown timers to publication
- Claims double extortion (data theft plus encryption); public detail on the encryption payload used is limited
- Targets small and mid-sized organizations more than large enterprises, based on listed victims
- Opportunistic, multi-region targeting with no clear geographic pattern (US, Mexico, Brazil, India, Israel observed)
- Multi-sector targeting: healthcare, veterinary, legal, insurance, manufacturing, consumer services
- Initial access vectors not publicly documented; no widely reported exploitation of specific CVEs
- Uses leak-site publication deadlines as the primary extortion lever in posted cases
Targeted sectors
HealthcareVeterinary servicesLegal servicesInsuranceManufacturingPest control / consumer servicesPayments / financial services
Notable public victims
Palram (palram.com) — Israeli manufacturer of polycarbonate/PVC building products, Bulwark Exterminating — US pest-control provider, Origins IVF — fertility clinic, DSD Law Firm (dsdlawfirm.com), CS Insurance (csinsurance.mx) — Mexico-based insurance firm, ACE Hospital (acehospital.in) — India-based hospital, Hospital Veterinário Diadema 24h (hospitalvetdiadema24h.com.br) — 24-hour veterinary hospital, Brazil
Estimated earnings
No public figure.
Leak-site victims391 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| cashcowboy | · Jul 23, 2026 | — |
| Bulwark Exterminating | · Jul 23, 2026 | — |
| origins ivf | · Jul 23, 2026 | — |
| csinsurance.mx | · Jun 3, 2026 | — |
| acehospital.in | · Jun 3, 2026 | — |
| dsdlawfirm.com | · May 14, 2026 | — |
| mrs holdings | · May 9, 2026 | — |
| Medical PAY | · May 1, 2026 | — |
| hospitalvetdiadema24h.com.br | · Mar 17, 2026 | — |
| palram.com | · Mar 17, 2026 | — |
| shlomo bit | · Mar 11, 2026 | — |
| MyFair | · Mar 6, 2026 | — |
| MedicalGPT | · Mar 6, 2026 | — |
| yurdriversnetwork | · Mar 6, 2026 | — |
| primaria ungheni | · Feb 25, 2026 | — |
| onlinedivorcetexas.com | · Feb 21, 2026 | — |
| Orain.io | · Feb 17, 2026 | — |
| Getly | · Feb 9, 2026 | — |
| brooklyn group | · Feb 4, 2026 | — |
| X-CD Technologies | · Jan 23, 2026 | — |
| NextCapitalTrust | · Jan 10, 2026 | — |
| publicsafety.ohio.gov | · Jan 10, 2026 | — |
| grade results | · Dec 25, 2025 | — |
| republica federative do brasil | · Dec 15, 2025 | — |
| dabafinance.com | · Dec 14, 2025 | — |
| screenate | · Dec 9, 2025 | — |
| koncept law | · Dec 9, 2025 | — |
| caryanams | · Dec 9, 2025 | — |
| playroll | · Dec 9, 2025 | — |
| seajob | · Dec 9, 2025 | — |
| meena health | · Nov 27, 2025 | — |
| Rama Judicial | · Nov 27, 2025 | — |
| Force Brokerage | · Nov 15, 2025 | — |
| Global Go | · Oct 15, 2025 | — |
| Doctor 24x7 | · Oct 10, 2025 | Doctor24x7 is an online telemedicine platform that allows users to consult top-rated doctors and specialists in India via video or call, 24 hours a day. The service is accessible through an app, and it offers consultations across a wide range of medical fields, including general medicine, pediatrics, gynecology, dermatology, and more. |
| Delcaper | · Oct 10, 2025 | Whether handling personal details like names and addresses or more sensitive information like government-issued IDs and financial records, Delcaper.com ensures that all data is protected using the latest encryption and privacy protocols. |
| Government of Brazil | · Oct 10, 2025 | No description given. |
| NoBroker | · Oct 10, 2025 | NoBroker is a Bangalore-based brokerage-free proptech company that provides all sorts of real estate services under a marketplace, which includes buying, renting, packers & movers, and home services. |
| Bliss WorldWide | · Oct 10, 2025 | BLISS WORLDWIDE DESTINATION MANAGEMENT PRIVATE LIMITED is a private limited company specializing in destination management and travel-related services. Based in Kochi, Kerala, India, the company provides customized travel solutions for both domestic and international clients, likely including itinerary planning, accommodation arrangements, and logistical support. |
| Edmov | · Oct 10, 2025 | No description given. |
| Mixfame | · Oct 10, 2025 | Mixfame.com is a digital platform that connects aspiring models, actors, and influencers with casting calls and job opportunities in the entertainment and fashion industry. |
| Concash | · Oct 10, 2025 | No description given. |
| Fortis | · Oct 10, 2025 | Fortis Healthcare Limited is a leading healthcare provider in India, operating a network of hospitals and healthcare facilities across the country. It specializes in multi-specialty care, providing a wide range of medical services, including cardiology, oncology, orthopedics, neurosciences, and emergency care. |
| Sumitomo | · Oct 10, 2025 | Sumitomo Rubber South Africa (Pty) Ltd. is a subsidiary of Sumitomo Rubber Industries, headquartered in Kobe, Japan. The company manufactures and distributes premium automotive tires and industrial rubber products, including renowned brands such as Dunlop, Sumitomo, and Falken. |
| OxyHealth | · Oct 10, 2025 | OxyHealth is a premier healthcare provider based in Riyadh, Saudi Arabia, specializing in a comprehensive range of medical and aesthetic services. The company operates the first licensed hyperbaric oxygen therapy center in the region, offering advanced treatments for various health conditions. |
| National Institute of Administratio... | · Oct 10, 2025 | The National Institute of Administration (INA) is a Romanian public institution dedicated to the professional development and training of civil servants and personnel in public administration. Operating under the coordination of the Ministry of Development, Public Works, and Administration, INA plays a pivotal role in enhancing the efficiency, transparency, and effectiveness of public services across Romania. |
| Giggle Finance | · Oct 10, 2025 | Giggle Finance is an online platform designed to provide fast, accessible financing specifically for self-employed individuals, independent contractors, freelancers, and small business owners in the U.S. It offers a product known as a "Giggle Business Advance," which allows users to receive a cash advance based on their future earnings, rather than traditional loan structures. |
| Axpr Valve Science | · Oct 10, 2025 | AXPR Valve Science Distribuição e Manutenção Industrial Ltda is a specialized provider in the field of industrial valve distribution, maintenance, and services, primarily serving clients in the oil, gas, chemical, and petrochemical industries. With a focus on high-quality products and reliable service, AXPR offers an extensive range of valves and related industrial equipment, supporting critical infrastructure and manufacturing processes. |
| BluMed Health | · Oct 10, 2025 | Online pharmacy that dispenses medicines in various dosages through a platform. |
| Buddy Loan | · Oct 10, 2025 | Buddy Loan is a financial services platform that specializes in providing quick and hassle-free personal loans tailored to meet diverse needs. The platform acts as a bridge between borrowers and lenders, offering access to a range of loan products for purposes like medical emergencies, education, weddings, travel, home repairs, and more. With an emphasis on convenience, Buddy Loan enables users to apply online or via their app, featuring competitive interest rates starting at 11.99% per annum and flexible repayment terms. The service partners with trusted lenders to cater to salaried and self-employed individuals, ensuring quick approvals and secure processing. Additionally, Buddy Loan offers features like free credit score checks and financial planning tools to support its users in making informed decisions. Their user base is 35 million almost |
In the newsAll →
No articles mention this group yet.
Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .