Ransomware
KillSec3Kill SecurityKillSecurity
Attribution
Financially motivated cybercriminal collective; no confirmed nation-state or named-individual attribution. Analysts assess operators likely based in the Eastern Europe / Russia region based on language and communications, but this is a low-confidence inference, not confirmed.
Motivation
Financial gain via ransomware extortion and data-leak extortion; residual hacktivist/notoriety motivation carried over from its Anonymous-aligned origins.
Attribution confidence
medium
MENA targeting
Saudi Arabia, UAE, Egypt
Sectors
Government/defense, financial services, healthcare, retail
Sourced from leak-site trackers — reflects the group's claim of a victim, not a confirmed breach.
Why it mattersRansomware actor, medium confidence, documented targeting Saudi Arabia, UAE, Egypt (Government/defense, financial services, healthcare sectors).
What's nextNo pipeline reports reference this actor yet — Radar mentions may still surface early signal.
No open hunts or recent alerts tracked against this actor right now.