Mandiant: Killnet collective shows new capabilities via Anonymous Sudan affiliation
Pro-Russia hacktivist collective; brand reorganized multiple times since its emergence around January 2022. Conducts performative DDoS against Western government, healthcare, and airport sites timed…
Summary
Mandiant published an analysis of the Killnet collective covering activity from January 2022 onward. The report tracks more than 500 distinct victims between January 1 and June 20, 2023, documents Killnet's shift from a squad-based structure to higher-profile affiliates including Anonymous Sudan, Zarya, Anonymous Russia and Devils Sec, and notes that Anonymous Sudan accounted for roughly 63% of identified DDoS attacks claimed by the collective in 2023. Mandiant assessed with high confidence that operations claimed by Killnet consistently mirror Russian strategic objectives, while stating that direct ties to Russian security services remained unproven.
Tags
Primary source
cloud.google.comOther KillNet events
- 2023-11-21Russian outlet Gazeta.ru names Killnet leader Killmilk as Nikolai Serafimov
- 2023-03-13Killmilk announces 'Black Skills' private military hacking company
- 2022-12-22HHS HC3 analyst note warns of Killnet threat to US healthcare sector
- 2022-05-14Italian police mitigate Killnet DDoS attempts against Eurovision 2022 grand final