Close Menu
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
  • About Us
Facebook X (Twitter) Instagram Threads
Ransomnews
  • Home
  • News
  • Security
  • Privacy
  • Cybercrime
    • Threat Groups
    • Ransomware
    • Explainers
    • Stealer Logs
  • AI
  • OSINT
  • Tools
    • Ransomtracker
    • Stealercheck
    • FortiBleed Checker
  • About Us
Facebook X (Twitter) LinkedIn
Ransomnews

KILLSEC3 · Threat actor profile

// THREAT ACTOR

KILLSEC3_

Active

KILLSEC3 is a ransomware operator tracked through its public data-leak infrastructure. The group operates under the double-extortion model that defines the modern ransomware ecosystem — file encryption combined with the threat of stolen-data publication on a public leak site — and continues to post fresh victim claims as part of an ongoing extortion campaign.

For Ransomnews editorial coverage of KILLSEC3 — incident write-ups, attribution notes, and additional context — see the Threat Groups archive or run a site search.

402 Victims tracked
1 / 3 Active mirrors
2024-10-28 First listing
2026-07-23 Most recent

Victims by year

  • 2026 22
  • 2025 293
  • 2024 87

Leak site mirrors

3 mirrors tracked, 1 currently reachable. These are criminal-infrastructure URLs — links are deliberately not provided.

  • ks5424y3wpr5zlug5c7i6svvxweinhbdcqcfnptkfcutrncfazzgz5id.onion KillSec snapshot · 2026-08-03 15:22
  • ks5424y3wpr5zlug5c7i6svvxweinhbdcqcfnptkfcutrncfazzgz5id.onion snapshot · 2026-08-03 15:03
  • xo4o2o2ezgydykywn6zkyqx7toio6z5rzvmjyakgtgkk22vv7223jmqd.onion 403 Forbidden snapshot · 2026-08-06 21:01

Recent victims

The 50 most recent victims claimed by KILLSEC3. Total in the index: 402.

Date listed Victim Description
2026-07-23 cashcowboy
2026-07-23 Bulwark Exterminating
2026-07-23 origins ivf
2026-06-03 csinsurance.mx
2026-06-03 acehospital.in
2026-05-14 dsdlawfirm.com
2026-05-09 mrs holdings
2026-05-01 Medical PAY
2026-03-17 hospitalvetdiadema24h.com.br
2026-03-17 palram.com
2026-03-11 shlomo bit
2026-03-06 MyFair
2026-03-06 MedicalGPT
2026-03-06 yurdriversnetwork
2026-02-25 primaria ungheni
2026-02-21 onlinedivorcetexas.com
2026-02-17 Orain.io
2026-02-09 Getly
2026-02-04 brooklyn group
2026-01-23 X-CD Technologies
2026-01-10 NextCapitalTrust
2026-01-10 publicsafety.ohio.gov
2025-12-25 grade results
2025-12-15 republica federative do brasil
2025-12-14 dabafinance.com
2025-12-09 screenate
2025-12-09 koncept law
2025-12-09 caryanams
2025-12-09 playroll
2025-12-09 seajob
2025-11-27 meena health
2025-11-27 Rama Judicial
2025-11-15 Force Brokerage
2025-10-15 Global Go
2025-10-10 Doctor 24x7 Doctor24x7 is an online telemedicine platform that allows users to con…
2025-10-10 Delcaper Whether handling personal details like names and addresses or more sen…
2025-10-10 Government of Brazil No description given.
2025-10-10 NoBroker NoBroker is a Bangalore-based brokerage-free proptech company that pro…
2025-10-10 Bliss WorldWide BLISS WORLDWIDE DESTINATION MANAGEMENT PRIVATE LIMITED is a private li…
2025-10-10 Edmov No description given.
2025-10-10 Mixfame Mixfame.com is a digital platform that connects aspiring models, actor…
2025-10-10 Concash No description given.
2025-10-10 Fortis Fortis Healthcare Limited is a leading healthcare provider in India, o…
2025-10-10 Sumitomo Sumitomo Rubber South Africa (Pty) Ltd. is a subsidiary of Sumitomo Ru…
2025-10-10 OxyHealth OxyHealth is a premier healthcare provider based in Riyadh, Saudi Arab…
2025-10-10 National Institute of Administratio... The National Institute of Administration (INA) is a Romanian public in…
2025-10-10 Giggle Finance Giggle Finance is an online platform designed to provide fast, accessi…
2025-10-10 Axpr Valve Science AXPR Valve Science Distribuição e Manutenção Industrial Ltda is a spec…
2025-10-10 BluMed Health Online pharmacy that dispenses medicines in various dosages through a …
2025-10-10 Buddy Loan Buddy Loan is a financial services platform that specializes in provid…

← Back to Ransomtracker

Statistics on this page are computed by Ransomnews from a live leak-site monitoring feed. Numbers update every ten minutes. Operator-written victim descriptions are truncated and shown in snippet form only. Source data: RansomLook (CC BY 4.0), aggregated and adapted by Ransomnews.

Facebook X (Twitter) LinkedIn
© 2026 Ransomnews.com

Type above and press Enter to search. Press Esc to cancel.

Cookies on Ransomnews

We use strictly-necessary cookies to run the site and may use first-party analytics to understand which articles are read. Some pages contain affiliate links — when you click one, the affiliate network sets cookies on the merchant's domain to attribute the referral. See the Cookie Policy and Affiliate Disclosure for detail.

RANSOMNEWS.COM

Tracking the criminal infrastructure of the internet.

Independent coverage of ransomware, breach economics, threat actors, privacy, AI security, and the open-source investigation toolkit.

// Topics

  • News
  • Security
  • Privacy
  • Cybercrime
  • AI
  • OSINT
  • Threat Groups
  • Stealer Logs
  • Ransomtracker
  • Stealercheck
  • FortiBleed Checker

// Site

  • About Us
  • Editorial Team
  • Contact
  • Tip Line
  • Editorial

// Legal

  • Privacy Policy
  • Terms of Service
  • Cookie Policy
  • Funding & Independence
  • RSS Feed
© 2026 Ransomnews.com · Tracking the criminal infrastructure of the internet.