Threat actor · all actors
Killmilk (KillNet founder persona)HACK-KILLMILK hacktivist
🇷🇺 RU
aka Killmilk (KillNet founder persona), Killmilk
Last updated: 2026-08-20
0attributed CVEs
0ATT&CK techniques
0.0IDF score (tooling uniqueness)
0exclusive CVEs
—years active
About this actor
Self-identified founder of KillNet who later distanced from the brand; identified by name and image by German Der Spiegel and Russian outlet Gazeta.ru in July 2023. Continues to operate Russian-aligned DDoS operations. No criminal charges filed to date.
How we know this
- Data origin
- Curated overlay Hacktivist entry synthesised from public reporting — not a MITRE-tracked intrusion set.
- Techniques
- No ATT&CK techniques mapped.
- Named victims
- None on file.
Thin data: No ATT&CK techniques are mapped yet — the behavioural profile is empty.
See how actor data is built for the full pipeline.
Activity timeline
No activity events recorded.
Profile
| CVE | Risk | CVSS | EPSS | Published | Products |
|---|---|---|---|---|---|
| No attributed CVEs. | |||||
No techniques attributed.
Co-occurring actors
None.
Similar actors
Same nation-state
Same category
- Moses Staff 1.00
- Al-Toufan 1.00
- AnonOps 1.00
- Anonymous Brasil 1.00
- Anonymous Collective 1.00