A look at pro-Russian hacktivist group Killnet, which has launched DDoS attacks against websites in countries supporting Ukraine, including Germany and the US
Matt Burgess / Wired :
Context & Ripple Effects
The war's cyber front has been widening since February, when DDoS attacks knocked several Ukrainian government sites offline alongside newly discovered wiper malware. What began as pressure on Ukrainian networks has since spread outward in both directions.
By May, hacking Russian targets was no longer considered off-limits, with Ukraine hit by an unprecedented wave of counterattacks after the invasion. Killnet's campaign against Germany, the US, and other Ukraine supporters marks the retaliatory half of that exchange — a pro-Russian echo of the volunteer hacker activity aimed at Moscow.
First-order effects
- Government and service websites in Germany and the US face direct availability attacks, forcing the targeted institutions to lean on traffic-scrubbing defenses just to stay online.
- Killnet establishes itself as the visible pro-Russian counterpart to the hacktivist waves already striking Russian targets since the invasion.
Second-order effects
- Coalition members beyond the named targets now have to treat website disruption as a routine cost of supporting Ukraine, shifting budget toward DDoS mitigation rather than one-off incident response.
- Russian-aligned operations gain a deniable proxy channel — a lineage running from espionage-focused groups like The Dukes' phishing campaigns against US NGOs to disruptive, publicly branded DDoS crews.
Third-order effects
- Hacktivist collectives are hardening into semi-permanent instruments of state-aligned conflict, where disruption of civilian-facing infrastructure becomes a standard tool of geopolitical signaling.
- If both directions of attack keep escalating, attribution blurs further and governments face pressure to formally define when volunteer cyber activity crosses into acts warranting a collective response.
The trend: State-aligned hacktivism is becoming a standing feature of interstate conflict, with each side's volunteers attacking the other's backers' infrastructure as a low-cost extension of the war.