UserSec is a pro-Russian hacktivist group that emerged in 2022, primarily characterized by its ideologically driven Distributed Denial of Service (DDoS) attacks and extensive collaborations with other pro-Russian hacktivist entities like KillNet and Anonymous Sudan. The group’s operations are deeply rooted in supporting Russian geopolitical interests, particularly in destabilizing Western nations and challenging those supporting Ukraine. While initially focused on disruptive campaigns, UserSec has shown an evolution in tactics to include data breaches and, as a secondary motivation, financial gain through ransomware-as-a-diversion tactics, and targeting of cryptocurrency exchanges. Unlike some highly stealthy Advanced Persistent Threat (APT) groups, UserSec often operates with high public visibility, leveraging platforms like Telegram for propaganda, recruitment, and to claim responsibility for its actions, aiming to create fear and undermine public confidence. Their distinctiveness li