Deanon Club

Threat Actor Profile Updated 3 months ago
Download STIX
Preview STIX
Deanon Club, a threat actor group, emerged as a significant entity in the cybersecurity landscape through its collaborations with Killnet, another threat actor group. The two groups have been involved in multiple malicious activities, including distributed denial-of-service (DDoS) attacks on several narcotics-focused darknet markets in late 2022 and early 2023. Deanon Club has also partnered with botnet providers to further enhance their capabilities. Notably, both groups established "Black Listing," an extortion group offering DDoS-for-hire services targeting darknet markets. The relationship between Deanon Club and Killnet evolved significantly over time. Despite initially partnering for various cyber attacks, the leader of Deanon Club referred to Killnet as "clowns" in a 2022 interview, indicating some level of discord or rivalry. However, the dynamics shifted dramatically when the original head of Killnet, known as KillMilk, retired and appointed Deanon Club as the new leader. This move signaled an integration of the two groups and a potential increase in their combined threat level. Under the new leadership of Deanon Club, Killnet announced plans for large-scale recruitment across all fronts, aiming to target government financial facilities, encryption firms, and the gambling sector. While specific details of these "new adventures" remain undisclosed, this development suggests that the combined forces of Deanon Club and Killnet could pose an increased threat to various sectors, necessitating heightened vigilance and robust cybersecurity measures.
What's your take? (Question 1 of 5)
Help tune the shared Cybergeist dataset, assist your peers, and earn karma. Expand the panel to get started.
Possible Aliases / Cluster overlaps
It's hard to track cluster overlaps and naming conventions between vendors, so here are some possible overlapping names / profiles you also may want to look at.
IDVotesProfile Description
Black Listing
1
Black Listing, a threat actor group also known as Killnet, emerged in the cybersecurity landscape with malicious intent. This group has been particularly active since late 2022 and early 2023, when they partnered with Deanon Club to conduct Distributed Denial of Service (DDoS) attacks against severa
Infinity Forum
1
Infinity Forum is a threat actor group associated with Killnet and its allies. Established as a project to raise funds for these groups, it serves a dual purpose: expanding their capabilities and numbers while also facilitating the interaction between novice hacktivists and financially driven cyberc
Killmilk
1
KillMilk, a threat actor and leader of the hacking group Killnet, has been identified as Nikolai Serafimov, a 30-year-old Russian citizen. KillMilk has been instrumental in consolidating Russian hacktivist groups under Killnet's leadership, amassing a following of 8,000 members on his personal Teleg
Miscellaneous Associations
Other elements of context that could aid in the identification of relevance
Botnet
Encryption
Extortion
Ddos
Telegram
Associated Malware
To see the evidence that has resulted in this association, create a free account
IDTypeVotesProfile Description
No associations to display
Associated Threat Actors
To see the evidence that has resulted in this association, create a free account
IDTypeVotesProfile Description
KillNetUnspecified
2
Killnet is a pro-Russian threat actor group that has been linked to a series of disruptive cyberattacks, particularly targeting governments and organizations that have expressed support for Ukraine. The group's activities gained prominence after Russia was banned from the 2022 FIFA World Cup due to
Associated Vulnerabilities
To see the evidence that has resulted in this association, create a free account
IDTypeVotesProfile Description
No associations to display
Source Document References
Information about the Deanon Club Threat Actor was read from the documents corpus below. This display is limited to 20 results, create a free account to see more
SourceCreatedAtTitle
CERT-EU
7 months ago
Leader of Russian hacktivist group Killnet ‘retires,' appoints new head
Flashpoint
a year ago
Following the Money: Killnet’s ‘Infinity Forum’ Wooing Likeminded Cybercriminals
CERT-EU
a year ago
Microsoft Blames Massive DDoS Attack for Azure, Outlook, and OneDrive Disruptions
Flashpoint
a year ago
Killnet Ostracizes Leader of Anonymous Russia, Adding New Chapter to Pro-Kremlin Hacktivist Drama
Flashpoint
a year ago
For Money and Attention: Killnet Apparently Reorganizes Again
CERT-EU
7 months ago
Major Cyber Attack Paralyzes Kyivstar - Ukraine's Largest Telecom Operator