KillnetThreat actor
A group targeting various countries using Denial of Services attacked.From MISP Galaxy
Last reported 1 month ago, by Flashpoint2 reports
ATT&CK techniques
2 techniques · each with the sentence it comes from- T1021.001Remote Desktop Protocol
“…unauthorised access into networks and systems, often through phishing attacks, exploitation of vulnerabilities, or compromising Remote Desktop Protocols (RDP).”
- T1195Supply Chain Compromise
“Moreover, the interconnected nature of the financial ecosystem amplifies the risks of supply chain compromises.”
Reports per month
last 12 monthsOctober so far (hatched). Counted by report, not by story.
What the reports say
2 reports, newest first · the exact sentence from each-
The Evolution of Hacktivism in Hybrid Warfare: Modern Tactics and Real-World Impact“These pro-Russian hacktivist groups, such as NoName057 and Killnet, alongside pro-Iranian collectives and proxy ecosystems like Handala Hack, often react to the news cycle and target countries designated by state media or ideological narratives as enemies.”
-
Cyber Threat Actors Impacting the Financial Sector in 2024“The hacktivist groups most actively targeting the financial sector were DDoSia and Killnet, which is in line with the global landscape of the hacktivist activities.”
Indicators in its reports
named in the reports above- okta-revolut[.]comin 1 report
- revolut-okta[.]comin 1 report
Copy these 2 indicators · defanged
Thanks — we review every report.