BrainCipher
Brain Cipher emerged in July 2024. Both Windows and Linux variants are available. Brain Cipher using the leaked build of LockBit Black for their operations. The group suspected to have exploited CVE-2023-28252 (Microsoft Windows CLFS Driver Privilege Escalation Vulnerability). The Ransom demand ranges from $150,000 to $1,00,0000. Demand to be paid with Monero (XMR) cryptocurrency. In 2025, they have shifted their new Negotiation portal to new server with vanity TOR Domain starting with 'brain'.
| Name | Country | Sector | Date |
|---|---|---|---|
| fsbgroup.ca | CA | Financial Services | 2025-10-29 21:37:52.388072 |
| semag.fr | FR | Technology | 2025-10-29 21:37:10.608015 |
| axxia.fr | FR | Technology | 2025-10-29 21:36:28.904825 |
| oxfordcounty.ca | CA | Public Sector | 2025-10-20 18:06:07.549022 |
| cdom.org | — | Education | 2025-10-20 18:05:36.941768 |
| bmsi.org | US | Not Found | 2025-09-16 17:17:34.229410 |
| bw-lv.de | DE | Not Found | 2025-08-04 16:08:39.035159 |
| VIRTUALWEB.US | US | Technology | 2025-07-28 21:05:44.322380 |
| jorgefernandez.es | ES | Not Found | 2025-07-25 19:48:15.338441 |
| Pulmonary Physicians of South Florida Clinics | US | Healthcare | 2025-05-05 10:39:32.527884 |
| neatem.fr | FR | Not Found | 2025-05-05 10:37:20.480255 |
| mbmdubai.com | AE | Not Found | 2025-05-05 10:35:36.088779 |
| ddecor.com | IN | Consumer Services | 2025-05-05 10:33:32.465700 |
| ruizre.es | ES | Not Found | 2025-05-05 10:31:21.459301 |
| soundtransit.org | US | Transportation/Logistics | 2025-05-05 10:29:51.790709 |
| valedolobo.com | PT | Hospitality and Tourism | 2025-05-05 10:27:40.160664 |
| edisoft.es | ES | Technology | 2025-05-05 10:25:33.146007 |
| iycsa.com.co | CO | Not Found | 2025-05-05 10:23:04.518082 |
| Rhode Island Department of Humain Services | US | Government | 2024-12-23 14:32:20.588723 |
| Modern Dental Group Limited | HK | Healthcare | 2024-12-18 08:39:10.188148 |
| Estar Seguros, S.A. | MX | Financial | 2024-12-12 09:56:03.808730 |
| Cristal y Lavisa S.A. de C.V. | MX | Manufacturing | 2024-12-12 09:54:57.200314 |
| Deloitte UK | GB | Business Services | 2024-12-04 14:35:20.807032 |
| Royce Corporation | US | Not Found | 2024-12-03 15:05:52.752522 |
| G-ONE AUTO PARTS DE MÉXICO, S.A. DE C.V. | MX | Manufacturing | 2024-12-02 17:15:47.179877 |
| COOPERATIVA TELEFONICA DE CALAFATE LTD. | AR | Business Services | 2024-11-13 16:40:55.145591 |
| G-One Auto Parts de México S.A. de C.V. | MX | Manufacturing | 2024-11-13 16:39:45.176909 |
| Berridge Manufacturing Co. | US | Manufacturing | 2024-10-29 10:14:33.053623 |
| K&S Tool & Mfg Co. | US | Manufacturing | 2024-10-28 22:11:19.494880 |
| Basilio Advogados | BR | Business Services | 2024-10-28 22:10:10.654219 |
| CHRISTODOULOS G. VASSILIADES & CO. LLC | CY | Business Services | 2024-10-28 22:09:01.328010 |
| hanwa.co.th | TH | Business Services | 2024-09-22 22:05:31.934092 |
| rmn.fr | FR | Government | 2024-08-29 01:13:43.067319 |
| ghanare.com | GH | Not Found | 2024-08-28 19:10:01.316165 |
| beinlaw.co.il - Prof. Bein & Co. | IL | Business Services | 2024-08-21 21:42:46.853420 |
| tiendasmacuto.com | VE | Business Services | 2024-08-17 18:56:50.839918 |
| fabamaq.com | AR | Manufacturing | 2024-08-12 23:02:42.241256 |
| cyceron.fr | FR | Healthcare | 2024-08-12 22:59:22.476918 |
| Sherbrooke Metals | — | Manufacturing | 2024-07-21 19:23:38.174032 |
| Apex Global | Big leak outlooks - 2tb. | — | Technology | 2024-07-21 19:22:52.231178 |
| Cole Technologies Group | — | Technology | 2024-07-21 19:22:10.555420 |
| Family Wealth Advisors Ltd. | IL | Financial | 2024-07-21 19:21:28.400965 |
| Mars 2 LLC | — | Agriculture and Food Production | 2024-07-21 19:20:41.473247 |
| Indonesia Terkoneksi | ID | Business Services | 2024-07-01 19:10:39.000000 |
Data from ransomware.live