RuskiNetThreat actor
RuskiNet is a pro-Russian hacktivist collective associated with disruptive operations including DDoS attacks, website defacements, phishing, and data leaks against government, infrastructure, financial, and civil targets.From MISP Galaxy
Last reported 16 months ago, by Group-IB1 report
Suspected originRussiaMISP Galaxy
ATT&CK techniques
1 technique · each with the sentence it comes from- T1505.003Web Shell
“These illegal marketplaces provide pre-compromised CMS access or web shells, removing the need for attackers to breach these systems themselves.”
What the reports say
1 report, newest first · the exact sentence from each-
Middle East Cyber Escalation: From Hacktivism to Sophisticated Threat Operations“RuskiNet is a hacktivist group first observed in February 2025 on X (formerly Twitter).”
Indicators in its reports
named in the reports above- airframes[.]ioin 1 report
Copy this indicator · defanged
Thanks — we review every report.