Killmilk

KillMilk, a threat actor and leader of the hacking group Killnet, has been identified as Nikolai Serafimov, a 30-year-old Russian citizen. KillMilk has been instrumental in consolidating Russian hacktivist groups under Killnet's leadership, amassing a following of 8,000 members on his personal Telegram channel. Notably, he exposed the identity of Raty, the head of Anonymous Russia, leading to their apprehension by Belarusian authorities. Furthermore, KillMilk announced the inclusion of Anonymous Sudan into the Killnet cluster after they attacked Sweden and Denmark for an incident involving the burning of the Quran. In recent activities, KillMilk claimed responsibility for a DDoS attack on Telegram Messenger and was reported to have plans to target hospital organizations with denial of service attacks. He also played a role in the cyberattack on Ukraine’s largest mobile operator Kyivstar, described as “the biggest cyberattack on telco infrastructure in the world.” The Black Skills PMHC project is another initiative led by KillMilk, aiming to create a new structure of hacktivism across the Russian community and transition from altruistic attacks to paid orders from private and public entities. However, KillMilk recently announced his retirement, appointing "Deanon Club" as his successor. Deanon Club has expressed intentions for large-scale recruitment for the KillNet team, with a focus on targeting government financial facilities, encryption firms, and the gambling sector. Despite his retirement, KillMilk's influence remains significant, with his successor stating, “Killmilk and I have been friends for a long time, and this is the person who brought me to the masses.”