Our latest OSINT report focuses on KillNet.

KillNet has evolved far beyond a conventional hacktivist group. Our analysis shows that its campaigns consistently align with political developments and the geopolitical interests of the Russian Federation, while technical attacks are regularly combined with coordinated information and psychological operations.

Although most of its operations rely on relatively low-complexity techniques, KillNet remains one of the most influential pro-Russian cyber groups due to its ability to rapidly mobilize a broad network of supporters, coordinate large-scale DDoS campaigns, and amplify their impact through Telegram and other online platforms.

This report examines KillNet’s evolution from a DDoS-for-hire service into a broad network of affiliated groups, analyzes its organizational model, key actors, partnerships, operational tactics, and influence operations, and assesses the group’s potential links to Russian state structures. Particular attention is given to how KillNet leverages publicity, information influence, and decentralized coordination as core elements of its operational model.