ZeroHour

killsec3

ransomware group · aka KillSec, KillSec3, KillSec 3 · unknown · active since Mid-2023 (per public ransomware leak-site trackers)

Victims · 7d
0flat
Victims · 30d
0active targets
Victims · 90d
3
All-time (tracked)
391since 2024-10-28
Last post
07-23 16:51UTC
Estimated earnings
public reporting
Profile · glm-5.3-flash · updated

KillSec (tracked here under the leak-site designation 'killsec3') is an opportunistic ransomware and data-extortion operation first observed by ransomware trackers in mid-2023; any relationship to a similarly named hacktivist collective is unconfirmed. The group publishes victims and stolen data on a Tor leak site with publication countdowns, consistent with a double-extortion model, but in-depth vendor research into its malware payload, affiliate structure, and ransom demands is limited. Its listings show broad, opportunistic targeting of predominantly small and mid-sized organizations across healthcare, veterinary, legal, insurance, manufacturing, and consumer services in the United States, Latin America, India, and Israel. This dashboard's tracking shows low recent volume — 3 victims in the past 90 days and 3 total since 2026-07-23 — in line with the group's generally low posting cadence. No specific CVEs are publicly associated with its tradecraft, and no public earnings estimates are available.

Tactics & tooling
  • Publishes victim announcements and stolen data on a Tor leak site with countdown timers to publication
  • Claims double extortion (data theft plus encryption); public detail on the encryption payload used is limited
  • Targets small and mid-sized organizations more than large enterprises, based on listed victims
  • Opportunistic, multi-region targeting with no clear geographic pattern (US, Mexico, Brazil, India, Israel observed)
  • Multi-sector targeting: healthcare, veterinary, legal, insurance, manufacturing, consumer services
  • Initial access vectors not publicly documented; no widely reported exploitation of specific CVEs
  • Uses leak-site publication deadlines as the primary extortion lever in posted cases
Targeted sectors
HealthcareVeterinary servicesLegal servicesInsuranceManufacturingPest control / consumer servicesPayments / financial services
Notable public victims

Palram (palram.com) — Israeli manufacturer of polycarbonate/PVC building products, Bulwark Exterminating — US pest-control provider, Origins IVF — fertility clinic, DSD Law Firm (dsdlawfirm.com), CS Insurance (csinsurance.mx) — Mexico-based insurance firm, ACE Hospital (acehospital.in) — India-based hospital, Hospital Veterinário Diadema 24h (hospitalvetdiadema24h.com.br) — 24-hour veterinary hospital, Brazil

Estimated earnings

No public figure.

Leak-site victims

VictimDiscoveredDetails
Capital Cell Global (CCG) ccg-advisory.com · Feb 10, 2025ccg-advisory.com
ASRAM Medical College and Hospita asram.in · Feb 10, 2025asram.in
Albright Institute albrightinstitute.edu.au · Feb 10, 2025albrightinstitute.edu.au
WhoHire whohire.com · Feb 10, 2025whohire.com
Ponte16 Hotel & Casino ponte16.com.mo · Feb 3, 2025ponte16.com.mo
Nano Health nanohealth.in · Feb 1, 2025nanohealth.in
payahmedabadechallan.org payahmedabadechallan.org · Jan 30, 2025payahmedabadechallan.org
Let’s Secure Insurance letsecure.in · Jan 26, 2025letsecure.in
Keepz keepz.me · Jan 25, 2025keepz.me
DataSociete datasociete.net · Jan 25, 2025datasociete.net
PrimoTicketing primoticketing.com · Jan 24, 2025primoticketing.com
FAAB Invest Advisors Private Limited faab.in · Jan 21, 2025faab.in
Nimbus Facility Services nimbusforwork.com · Jan 21, 2025nimbusforwork.com
anupalanonline.com AnupalanOnline · Jan 16, 2025AnupalanOnline
Farmacia Cofar cofar.cl · Jan 14, 2025cofar.cl
Greene Supply Company americanstandard-us.com · Dec 21, 2024americanstandard-us.com
Hammons Supply Company hammonssupply.com · Dec 21, 2024hammonssupply.com
J AND S Electrical And Lighting Supply LLC jselectricalsupply.com · Dec 21, 2024jselectricalsupply.com
LAMERS ENTERPRISE INC lamersenterprise.com · Dec 21, 2024lamersenterprise.com
Langford Tool And Drill Co langfordtool.com · Dec 21, 2024langfordtool.com
McCally Tool and Supply mccallytool.com · Dec 21, 2024mccallytool.com
Blome International blome.com · Dec 21, 2024blome.com
BRIGHT BOLT ENTERPRISES INC brighbolt.com · Dec 21, 2024brighbolt.com
Casa Juarez Restaurant Supply Co casajuarezrestaurantsupplies.com · Dec 21, 2024casajuarezrestaurantsupplies.com
Davis Products Company Inc davisproductsco.com · Dec 21, 2024davisproductsco.com
Economy Restaurant Equipment And Supply Company economyrestaurantequip.com · Dec 21, 2024economyrestaurantequip.com
GAMKA SALES CO. INC gamka.com · Dec 21, 2024gamka.com
Greater Michigan Distributors g-m-d.com · Dec 21, 2024g-m-d.com
GPM Lawn Sprinkler Supply gpmpoolandspa.com · Dec 21, 2024gpmpoolandspa.com
Abrasive Supply Corporation AbrasiveSupply.com · Dec 21, 2024AbrasiveSupply.com
Albert Paper Company albertpaperco.com · Dec 21, 2024albertpaperco.com
Allied Packing And Rubber Inc alliedpackingandrubber.com · Dec 21, 2024alliedpackingandrubber.com
Avana Electrotek avanaelectrotek.com · Dec 21, 2024avanaelectrotek.com
Badger Popcorn And Concession Supply Company badgerpopcorn.com · Dec 21, 2024badgerpopcorn.com
Accolent ERP Software accolentsoftware.com · Dec 20, 2024accolentsoftware.com
Khalil Center khalilcenter.com · Dec 20, 2024khalilcenter.com
Water Utilities Corporation wuc.bw · Dec 20, 2024wuc.bw
PT Pertamina pertamina.com · Dec 20, 2024pertamina.com
Verosa LLC verosa.com · Dec 18, 2024verosa.com
JSSR Options Co., Ltd. (JSSR) jssr.co.th · Dec 15, 2024jssr.co.th
Tumeny Payments Limited tumenypay.com · Dec 15, 2024tumenypay.com
Interforos Casting interforos.com.mx · Dec 11, 2024interforos.com.mx
Thanks For The Help thanksforthehelp.com · Dec 9, 2024thanksforthehelp.com
USA2ME usa2me.com · Dec 5, 2024usa2me.com
briatek.com.ng briatek.com.ng · Nov 28, 2024briatek.com.ng
clubfitsoftware.com.au clubfitsoftware.com.au · Nov 28, 2024clubfitsoftware.com.au
cloudofgoods.com cloudofgoods.com · Nov 28, 2024cloudofgoods.com
gehnaindia.com gehnaindia.com · Nov 28, 2024gehnaindia.com
gajicermat.com gajicermat.com · Nov 28, 2024gajicermat.com
Government of the People . · Nov 26, 2024.

In the newsAll →

No articles mention this group yet.

Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .