killsec3
ransomware group · aka KillSec, KillSec3, KillSec 3 · unknown · active since Mid-2023 (per public ransomware leak-site trackers)
KillSec (tracked here under the leak-site designation 'killsec3') is an opportunistic ransomware and data-extortion operation first observed by ransomware trackers in mid-2023; any relationship to a similarly named hacktivist collective is unconfirmed. The group publishes victims and stolen data on a Tor leak site with publication countdowns, consistent with a double-extortion model, but in-depth vendor research into its malware payload, affiliate structure, and ransom demands is limited. Its listings show broad, opportunistic targeting of predominantly small and mid-sized organizations across healthcare, veterinary, legal, insurance, manufacturing, and consumer services in the United States, Latin America, India, and Israel. This dashboard's tracking shows low recent volume — 3 victims in the past 90 days and 3 total since 2026-07-23 — in line with the group's generally low posting cadence. No specific CVEs are publicly associated with its tradecraft, and no public earnings estimates are available.
- Publishes victim announcements and stolen data on a Tor leak site with countdown timers to publication
- Claims double extortion (data theft plus encryption); public detail on the encryption payload used is limited
- Targets small and mid-sized organizations more than large enterprises, based on listed victims
- Opportunistic, multi-region targeting with no clear geographic pattern (US, Mexico, Brazil, India, Israel observed)
- Multi-sector targeting: healthcare, veterinary, legal, insurance, manufacturing, consumer services
- Initial access vectors not publicly documented; no widely reported exploitation of specific CVEs
- Uses leak-site publication deadlines as the primary extortion lever in posted cases
Palram (palram.com) — Israeli manufacturer of polycarbonate/PVC building products, Bulwark Exterminating — US pest-control provider, Origins IVF — fertility clinic, DSD Law Firm (dsdlawfirm.com), CS Insurance (csinsurance.mx) — Mexico-based insurance firm, ACE Hospital (acehospital.in) — India-based hospital, Hospital Veterinário Diadema 24h (hospitalvetdiadema24h.com.br) — 24-hour veterinary hospital, Brazil
No public figure.
Leak-site victims391 posts · newest first
| Victim | Discovered | Details |
|---|---|---|
| Brügger Architekten AG b-architekten.ch | · Apr 2, 2025 | b-architekten.ch |
| IMA Global ima.global | · Apr 2, 2025 | ima.global |
| US BioTek Laboratories usbiotek.com | · Apr 2, 2025 | usbiotek.com |
| 747 Studios 747studios.de | · Apr 1, 2025 | 747studios.de |
| BenefitElect benefitelect.com | · Apr 1, 2025 | benefitelect.com |
| Ocuco ocuco.com | · Apr 1, 2025 | ocuco.com |
| Fancy Films fancyfilms.com.au | · Apr 1, 2025 | fancyfilms.com.au |
| Lendco lendco.co.uk | · Apr 1, 2025 | lendco.co.uk |
| Nydegger + Finger AG nydegger-finger.ch | · Apr 1, 2025 | nydegger-finger.ch |
| Workers Informática Ltda workers.com.br | · Apr 1, 2025 | workers.com.br |
| Testima Engineering testima.com | · Apr 1, 2025 | testima.com |
| Brella brella.com | · Apr 1, 2025 | brella.com |
| Dorel Home dorelhome.com | · Apr 1, 2025 | dorelhome.com |
| Hexicor hexicor.au | · Apr 1, 2025 | hexicor.au |
| AAPG aapg.org | · Apr 1, 2025 | aapg.org |
| Hanna Global Solutions workforcejunction.com | · Apr 1, 2025 | workforcejunction.com |
| Flagship Press Flagship Press flagshippress.com | · Apr 1, 2025 | flagshippress.com |
| Lee & Sakahara Architects leesak.com | · Mar 31, 2025 | leesak.com |
| Kyocera Document Solutions Europe kyoceradocumentsolutions.eu | · Mar 31, 2025 | kyoceradocumentsolutions.eu |
| Design Design designdesign.us | · Mar 31, 2025 | designdesign.us |
| Lupin Limited lupin.com | · Mar 28, 2025 | lupin.com |
| Precision Accounting Intl cpapai.com | · Mar 23, 2025 | cpapai.com |
| SPARSH Hospital sparshhospital.com | · Mar 22, 2025 | sparshhospital.com |
| Innovative Surfaces innovativesurfaces.com | · Mar 22, 2025 | innovativesurfaces.com |
| Cayman National Bank caymannational.com | · Mar 21, 2025 | caymannational.com |
| Officio Medical officiomedical.com | · Mar 21, 2025 | officiomedical.com |
| Instituto de Ojos institutoojospr.com | · Mar 20, 2025 | institutoojospr.com |
| Obra Play obraplay.com | · Mar 20, 2025 | obraplay.com |
| interiseworld.com InteriseTrust | · Mar 20, 2025 | InteriseTrust |
| Harcourts Prime Properties harcourtsprime.com | · Mar 19, 2025 | harcourtsprime.com |
| Trymata trymata.com | · Mar 11, 2025 | trymata.com |
| Skyward Specialty Insurance skywardinsurance.com | · Mar 11, 2025 | skywardinsurance.com |
| Wendy Wu Tours wendywutours.com.au | · Mar 4, 2025 | wendywutours.com.au |
| Workforce Group workforcegroup.com | · Mar 2, 2025 | workforcegroup.com |
| Novi Community School District novi.k12.mi.us | · Feb 23, 2025 | novi.k12.mi.us |
| G&M Direct Hire gmdirecthire.co.uk | · Feb 23, 2025 | gmdirecthire.co.uk |
| Shaghalni shaghalni.com | · Feb 23, 2025 | shaghalni.com |
| BluAgent Technologies, Inc bluagent.com | · Feb 23, 2025 | bluagent.com |
| Medical File medicalfile.io | · Feb 20, 2025 | medicalfile.io |
| DR.Claims FL LLC dr.claims | · Feb 19, 2025 | dr.claims |
| EzyLegal ezylegal.in | · Feb 19, 2025 | ezylegal.in |
| BeniPlus beniplus.ca | · Feb 19, 2025 | beniplus.ca |
| Brolly brolly.africa | · Feb 19, 2025 | brolly.africa |
| Revi getrevi.com | · Feb 19, 2025 | getrevi.com |
| Help Me Grow Yolo helpmegrowyolo.org | · Feb 19, 2025 | helpmegrowyolo.org |
| NimuSoft nimusoft.com | · Feb 19, 2025 | nimusoft.com |
| Obex Medical obex.co.nz | · Feb 13, 2025 | obex.co.nz |
| TMC tmc.com.mx | · Feb 11, 2025 | tmc.com.mx |
| Logix Corporate Solutions logixcorporate.com | · Feb 11, 2025 | logixcorporate.com |
| Enfin enfin.com | · Feb 10, 2025 | enfin.com |
In the newsAll →
No articles mention this group yet.