Ransomware group
Killsec ransomware: victims and leak site activity
The Killsec ransomware group has listed 286 victims on its leak site since March 2024; its latest post is from 18 September 2026. Most affected countries: United States, India and United Kingdom. Most targeted sector: Professional Services.
Total posts
286
First seen
2024-03-21
Latest post
2026-09-18
Countries hit
50
About Killsec
KillSec originated as a hacktivist group aligned with the Anonymous movement before pivoting to ransomware operations in October 2023, officially launching a RaaS platform in June 2024 with an affiliate-friendly 88% revenue split, primarily targeting healthcare, financial services, and government sectors with over 250 documented victims as of late 2025.
- Leak site (Tor)
- http://ks5424y3wpr5zlug5c7i6svvxweinhbdcqcfnptkfcutrncfazzgz5id.onion/posts.php
- Profile
- ransomware.live
Most targeted countries
- United States 87
- India 50
- United Kingdom 11
- Brazil 10
- Belgium 8
- Australia 7
- Mexico 6
- Romania 6
- United Arab Emirates 5
- Canada 5
Most targeted sectors
- Professional Services 50
- Technology 50
- Healthcare 43
- Financial Services 36
- Manufacturing 21
- Retail & E-Commerce 17
- Education 16
- Transportation 15
- Government & Defense 12
- Hospitality 7