Rebooting Killnet, a New World Order and the End of the Tesla Botnet

In a recent move, KillMilk, the enigmatic figure at the helm of Killnet, disbanded the group’s main roster. The sweeping decision was made as around 50 splinter groups within Killnet, consisting of over 1,250 people, were deviating from the primary objectives of hacktivism.

Killnet, however, hasn’t ceased to exist. In a bid to breathe new life into the organization, KillMilk recently announced on the new official Killnet VK page he will operate Killnet alone for now. The roster may be refreshed eventually, but only with new members who fit the stringent criteria set by KillMilk. The revised Killnet isn’t for armchair hackers and DDoSers, nor is it a platform for self-promotion or a ticket to overnight fame. Only the shrewdest minds, not the IT layabouts, will earn their place in the “New Killnet.”

The Black Skills Revolution

In an intriguing twist of events, on March 12, 2023, KillMilk unveiled his newest venture: the Black Skills Private Military Hacker Company (PMHC). Drawing inspiration from the Wagner Private Military Company, an infamous Russian paramilitary organization, Black Skills aims to be the cyber equivalent. According to KillMilk, Black Skills PMHC is envisaged as a comprehensive hacktivist structure within the Russian community, complete with its own unique laws, objectives and an unwavering emphasis on discipline and order.

Comprising 24 units, Black Skills PMHC is set to cover a wide spectrum of cyber operations, from intelligence gathering and pentesting to sabotage and psychology operations. Meanwhile, other units would handle the “business” side of things, including HR, accounting, training, investor relations and more.

Frustrated by the support that Ukraine’s IT ARMY receives from its government, KillMilk is making his feelings known. He is daringly taunting his co-citizens and potentially his government, voicing his disdain for their apathy and stressing his independence from their support.

The Killnet Exchange: Crypto for the Hacktivists

One of the more intriguing projects being spearheaded by KillMilk is the Killnet Exchange, the official cryptocurrency exchange for Killnet. This exchange is set to operate round the clock, offering an array of transaction types, including crypto to crypto, crypto to card, crypto to cash, or QR code—all at a modest service rate of 3-4%. What’s more, they even plan to provide courier services.

Education in the Dark: The Dark School

On May 25, Killnet introduced its first edition of the Dark School (telegra[.]ph/DARK-SHKOLA—KILLNET-04-04), a unique educational endeavor aimed at training individuals in various aspects of cyber warfare or for personal financial gain. The curriculum covers a wide array of topics, including DDOS, Google AdWords arbitrage, creation and promotion of fakes, carding, cyber intelligence, spyware use, social engineering, psychological warfare, and sabotage methodology.

For a global reach, the courses are offered in four languages: Russian, English, Spanish and Hindi. The training lasts for two weeks, culminating in a certificate stating that the attendee has undergone special cyber training under the banner of Killnet. Exceptional students could also find themselves part of the new Killnet.

A New World Order (NWO) and the End of an Era

As Killnet ventures into new territory, it is also gearing up to offer special training for participants in the New World Order (NWO), where members get free admission to the Dark School. This, however, only applies to PMCs and the Armed Forces of the Russian Federation.

Radis out, the end of Tesla botnet

In other related news, Radis, the newly appointed leader of Anonymous Russia, has announced his departure from the group. Radis was appointed by KillMilk following the arrest of its former leader, the 18-year-old Belarusian, Arseni Yeliseyeu, also known as Raty.

A few days after KillMilk announced the dissolving of the Killnet roster, Radis posted that he is moving on from Anonymous Russia and stopping his activities, including the DDoS-for-hire service known as Tesla Botnet (teslabotnet[.]ru). New and existing subscribers of the DDoS-for-hire service, rest assured, you will be refunded.

As we take stock of these significant shifts in the pro-Russian hacktivism landscape, one thing is clear: the world of hacktivism and cyber warfare are closely knitted. Ambitious and media-savvy leaders such as KillMilk rise to the occasion as dark influencers, supported both socially and financially by individuals in Russia who approve of the occupation of Ukraine. Will KillMilk be able to transform his endeavor from its Killnet roots in hacktivism to a private military cyber elite group inspired by Wagner PMC?

Update: On June 6, 2023, I wrote that the DDoS-for-hire service known as the Tesla botnet had been discontinued. On June 7, however, the announcement from RADIS was removed from the Tesla-bot Telegram channel, replaced by a new message announcing the August 2023 arrival of TeslaBot v3.

Here is the message forwarded by RADIS to the Tesla-bot channel on June 4, followed by a message written by a Tesla-bot channel owner about subscriptions being refunded:


Both messages are now removed from the channel. A new message from June 8 confirms TeslaBot v3 coming in August 2023:

Here is the original Teslabot v3 announcement from May 23:

Pascal Geenens

As the Director, Threat Intelligence for Radware, Pascal helps execute the company's thought leadership on today’s security threat landscape. Pascal brings over two decades of experience in many aspects of Information Technology and holds a degree in Civil Engineering from the Free University of Brussels. As part of the Radware Security Research team Pascal develops and maintains the IoT honeypots and actively researches IoT malware. Pascal discovered and reported on BrickerBot, did extensive research on Hajime and follows closely new developments of threats in the IoT space and the applications of AI in cyber security and hacking. Prior to Radware, Pascal was a consulting engineer for Juniper working with the largest EMEA cloud and service providers on their SDN/NFV and data center automation strategies. As an independent consultant, Pascal got skilled in several programming languages and designed industrial sensor networks, automated and developed PLC systems, and lead security infrastructure and software auditing projects. At the start of his career, he was a support engineer for IBM's Parallel System Support Program on AIX and a regular teacher and presenter at global IBM conferences on the topics of AIX kernel development and Perl scripting.

Contact Radware Sales

Our experts will answer your questions, assess your needs, and help you understand which products are best for your business.

Already a Customer?

We’re ready to help, whether you need support, additional services, or answers to your questions about our products and solutions.

Get Answers Now from KnowledgeBase
Get Free Online Product Training
Engage with Radware Technical Support
Join the Radware Customer Program


An Online Encyclopedia Of Cyberattack and Cybersecurity Terms

What is WAF?
What is DDoS?
Bot Detection
ARP Spoofing

Get Social

Connect with experts and join the conversation about Radware technologies.

Security Research Center