Hacktivist Group Killnet Targets Intelligence Websites, Attack Unsuccessful

Killnet threat actors are once again targeting websites in their latest campaign against Eastern Bloc government websites. In previous months, hacktivist group Killnet has launched numerous global DDoS campaigns including attacks against United States airport websites just several weeks ago. Recently, Killnet threat actors listed websites known for intelligence services throughout Poland, Bulgaria, Moldova, Romania, and Estonia in their Telegram channel. Despite their efforts, Killnet actors were unable to keep the websites offline for long and all sites are currently operational. Ivan Demerdzhiev, a Bulgarian internal minister, stated that Killnet utilized an “image attack aimed at creating certain moods and certain results in public attitudes”. Killnet has a significant reputation for attacking those not aligned with pro-Russia activities and those who assist the enemy. A few days later, the Federal Bureau of Investigation released a statement on hacktivist groups targeting critical infrastructure with DDoS attacks. The Bureau goes on to state that it recognizes the repeated attempts at hacktivists group DDoS attacks alongside their limited success in keeping these assets down. CTIX will continue to monitor threat groups throughout the landscape and provide additional updates accordingly.