Black Skills

Threat Actor updated 5 months ago (2024-05-04T18:17:54.202Z)
Download STIX
Preview STIX
Black Skills is a newly established Private Military Hacking Company (PMHC), announced by Killmilk, the leader of the Russian hacktivist collective Killnet, on March 13, 2023. The initiative, launched via Telegram, appears to be an effort by Killnet to establish itself as a corporate entity and further its cyber mercenary activities. The name "Black Skills" and the structure of the PMHC seem to be inspired by the growing presence and influence of private military companies in Russia, particularly the Wagner Group, a notorious Russian paramilitary organization. In March, Killnet debuted Black Skills as a cyber-army-for-hire, modeled after the Wagner Group, which served Russia during its invasion of Ukraine until a revolt occurred among the soldiers and its Kremlin-tied leader Yevgeny Prigozhin in June. The establishment of Black Skills by the Kremlin-affiliated collective, which first emerged in October 2021, represents an attempt to lend a corporate sheen to its cyber mercenary operations. The security vendor assessed that Killmilk's description of Black Skills was an attempt to position Killnet as the cyber equivalent of the Wagner Group. However, the potential impact of the revolt led by Wagner on Killnet and Black Skills remains unclear, according to Geenens. Despite this uncertainty, Killnet continues its efforts to drum up support for its initiatives, primarily through exaggerated claims of its successes. Researchers are closely monitoring these developments, with the understanding that the PMHC Black Skills, created by Killnet in March, is designed to mimic the online counterpart of Russian mercenaries in the style of the Wagner Group.
Description last updated: 2024-05-04T17:39:40.024Z
What's your take? (Question 1 of 5)
Help tune the shared Cybergeist dataset, assist your peers, and earn karma. Expand the panel to get started.
Possible Aliases / Cluster overlaps
It's hard to track cluster overlaps and naming conventions between vendors, so here are some possible overlapping names / profiles you also may want to look at. Create a free account to see the source evidence for each alias, and help fix any errors.
Alias DescriptionVotes
Black Listing is a possible alias for Black Skills. Black Listing, a threat actor group also known as Killnet, emerged in the cybersecurity landscape with malicious intent. This group has been particularly active since late 2022 and early 2023, when they partnered with Deanon Club to conduct Distributed Denial of Service (DDoS) attacks against severa
2
Miscellaneous Associations
Other elements of context that could aid in the identification of relevance
Ddos
Russia
Flashpoint
Telegram
Analyst Notes & Discussion
Be the first to leave your mark here! Log in to share your views and vote.
Associated Threat Actors
To see the evidence that has resulted in these threatActor associations, create a free account
Alias DescriptionAssociation TypeVotes
The KillNet Threat Actor is associated with Black Skills. Killnet is a pro-Russian threat actor group that has gained notoriety for its disruptive cyber-attacks on various government entities. The group's activities peaked in July 2022 when it targeted multiple government resources in Poland, including the Ministry of Foreign Affairs, Senate, Border Controis related to
4
The Killmilk Threat Actor is associated with Black Skills. KillMilk, a threat actor and leader of the hacking group Killnet, has been identified as Nikolai Serafimov, a 30-year-old Russian citizen. KillMilk has been instrumental in consolidating Russian hacktivist groups under Killnet's leadership, amassing a following of 8,000 members on his personal TelegUnspecified
3
Source Document References
Information about the Black Skills Threat Actor was read from the documents corpus below. This display is limited to 20 results, create a free account to see more
PreviewSource LinkCreatedAtTitle
CERT-EU
a year ago
CERT-EU
a year ago
CERT-EU
a year ago
CERT-EU
a year ago
DARKReading
2 years ago
Flashpoint
a year ago
CERT-EU
a year ago
CERT-EU
2 years ago
Flashpoint
2 years ago
Flashpoint
a year ago
CERT-EU
a year ago
CERT-EU
a year ago
CERT-EU
a year ago
CERT-EU
9 months ago