Killnet that had the ties with the Russian government have claimed credit for taking down websites late last week in three U.S. states(Colorado, Kentucky, and Mississippi) for politically motivated purposes.
Killnet is behind several high-profile attacks since Russia invaded Ukraine. In June, Killnet claimed responsibility for a distributed denial-of-service attack targeting government and private organizations in Lithuania after the country restricted the transit of steel and ferrous metals to Kaliningrad, a Russian exclave on the Baltic Sea.
The group claimed at the time that its DDoS attack would continue until Lithuania lifts the blockade, Killnet also claimed to have attacked and taken offline websites run by U.S. aerospace manufacturer Lockheed Martin Corp. in August. The group claimed that the motivation for the attack was Lockheed providing the M142 High Mobility Artillery Rocket System to Ukrainian armed forces.
Evidence of links between Killnet and the Russian government were detailed in a report by Mandiant subsidiary in September. The report claimed that along with the DDoS on Lithuania, Killnet had also launched attacks against organizations in Japan, Italy, Norway, and Estonia.
Killnet’s specific targeting of the board of election’s website in Kentucky has also caused some media outlets to claim attempted Russian election interference.
The web portals for all three were functioning again at the time of writing.