Killnet, a Russian hacktivist group led by Killmilk, has been attempting to solidify its position as the leader of various ragtag hacktivist groups in Russia. However, despite its efforts to portray itself as a powerful arm of the Russian government and a potential cyber mercenary army, experts say that these claims are far from accurate. Killnet has a history of failing to live up to its own hype.
One of the main issues faced by Killnet and other cybercriminals operating in Russia is that the cyberattack threat group market in the country has become oversaturated and consolidation is inevitable. This has sparked a battle for supremacy among Russian hacktivist groups, and Killnet has chosen to fight it out in the media.
It is unclear whether Killnet has any actual connection to the Russian government. Security vendor Mandiant suggests that based on the activities of known Kremlin-controlled hacking operations, Killnet does not fit into the military program. Instead, Killnet’s operations seem to be focused on generating headlines and promoting pro-Russia messaging, rather than engaging in serious cyber threats.
Despite not having direct support from Russia and facing competition within the cybercriminal sector, Killnet has decided to build its brand and media profile in order to attract fellow hackers to join their cause. However, their impact on the cyber threat landscape has been minimal. While Killnet has claimed to target healthcare centers and launch DDoS attacks against infrastructure in the US, their attacks have not resulted in major disruptions.
In an attempt to further establish their brand, Killnet recently launched Black Skills, a cyber-army-for-hire modeled after the Wagner Group, a mercenary army that served Russia during its invasion of Ukraine. However, experts doubt that Killnet has the infrastructure and capacity to operate as a private military company.
In addition to its lack of technical prowess, Killnet has also been involved in petty drama within the hacktivist community. They publicly outed the leader of rival hacktivist group Anonymous Russia and appointed a new leader, but this move did not increase their control or influence among Russian hacktivists.
There have also been claims that Killnet will collaborate with ransomware group REvilL and Anonymous Sudan to launch cyberattacks against the Western SWIFT banking system. However, these attacks have yet to materialize.
Despite its limited success in the cyber threat landscape, the Killnet brand has gained notoriety in Russia. They are the subject of rap songs and even have their own jewelry line. Killnet has recently released a promotional video teasing an upcoming short film, indicating their attempts to establish themselves as a prominent player in the hacktivist world.
While Killnet may be successful in convincing some groups to join them, experts do not believe that they will emerge as a dominant force in Russian cybercrime. It is unlikely that they will be able to consolidate a majority of hacktivist groups under their banner.
In conclusion, Killnet’s attempts to consolidate Russian hacktivist groups under its leadership have been met with limited success. Despite branding itself as a powerful arm of the Russian government and a potential cyber mercenary army, Killnet has failed to live up to these claims. With a saturated market and fierce competition, Killnet has turned to media tactics in order to attract fellow hackers. However, their impact on the cyber threat landscape has been minimal, and it remains to be seen if they can establish themselves as a significant player in the Russian hacktivist scene.

