Brain Cipher emerged in July 2024. Both Windows and Linux variants are available. Brain Cipher using the leaked build of LockBit Black for their operations. The group suspected to have exploited CVE-2023-28252 (Microsoft Windows CLFS Driver Privilege Escalation Vulnerability). The Ransom demand ranges from $150,000 to $1,00,0000. Demand to be paid with Monero (XMR) cryptocurrency. In 2025, they have shifted their new Negotiation portal to new server with vanity TOR Domain starting with 'brain'.
Genera un perfil del actor con IA (defensivo) cuando lo pidas.
Tácticas y técnicas observadas del actor, mapeadas a MITRE ATT&CK (clic para ver la ficha oficial). Útil para priorizar detecciones.
Para detección/bloqueo en tu EDR/SIEM. Fuente: ransomware.live.
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
\\\\\\Welcome to Brain Cipher Ransomware!\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
\\\\\\\\\Dear managers!\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
\\\\\\\\\\If you're reading this, it means your systems have been hacked and encrypted and your data stolen.\\\\\\\\\\\\\\\\\\\\\\\\\
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
\\\\\\\\\\\\The most proper way to safely recover your data is through our support. We can recover your systems within 4-6 hours.\\\\\\
\\\\\\\\\\\\\In order for it to be successful, you must follow a few points:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
\\\\\\\\\\\\\\\1.Don't go to the police, etc.\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
\\\\\\\\\\\\\\\\2.Do not attempt to recover data on your own.\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
\\\\\\\\\\\\\\\\\3.Do not take the help of third-party data recovery companies.\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
\\\\\\\\\\\\\\\\\\\\\\\In most cases, they are scammers who will pay us a ransom and take a % for themselves.\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
\\\\\\\\\\\\\\\\\\\\If you violate any 1 of these points, we will refuse to cooperate with you!!!\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
\\
\\ ATTENTION!!! If you do not contact us within 48 hours, we will post the record on our website:
\\
\\
\\ [redactado]
\\
\\
\\
\\ 3 steps to data recovery:
\\
\\
\\ 1. Download and install Tor Browser ([redactado]
\\
\\ 2. Go to our support page: [redactado]
\\ ******* This page can take up to 30 minutes to load.
\\
\\ 3. Enter your encryption ID: [snip]
\\
\\
\\ Email to support: [redactado]
\\
\\
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\
_ _
| | (_)
| |__ _ __ __ _ _ _ __
| '_ \| '__/ _` | | '_ \
| |_) | | | (_| | | | | |
|_.__/|_| \__,_|_|_| |_|
,--""-.
(_,=- )
`---#{
`} [AI generated] N/A I don't have verified, reliable information about a specific company at "huntcompanies.com" to describe accurately. Providing fabricated details about a company's operations, industry, or location would risk spreading misinformation in a threat intelligence context, where factual accuracy is critical. If you can share additional context or verified source material about this company, I can help analyze or summarize that information instead.
[AI generated] N/A
| Organización | País | Sector | Grupo | Descubierta |
|---|---|---|---|---|
| huntcompanies.com | US | Not Found | — | 11 oct 2026 |
| latitudesubro.com | BR | Manufacturing | — | 29 sept 2026 |
| trailerbridge.com | US | Transportation | — | 29 sept 2026 |
| mccordclaims.com | US | Financial Services | — | 29 sept 2026 |
| goriteway.com | US | Not Found | — | 29 sept 2026 |
| mulholland.com | US | Not Found | — | 29 sept 2026 |
| wildmanbg.com | BG | Other | — | 29 sept 2026 |
| maxwell-group.com | GB | Other | — | 29 sept 2026 |
| goldstarfinancial.com | US | Financial Services | — | 23 sept 2026 |
| hoyletanner.com | GB | Professional Services | — | 17 sept 2026 |
| aecom.com | US | Professional Services | — | 17 sept 2026 |
| xpera.ca | CA | Technology | — | 17 sept 2026 |
| icot.es | ES | Technology | — | 31 ago 2026 |
| aeiconsultants.com | US | Professional Services | — | 31 ago 2026 |
| syc.es | ES | Technology | — | 31 ago 2026 |
| Adviesbureau De Beuckelaer BV | NL | Professional Services | — | 31 ago 2026 |
| ahadandco.com | AE | Other | — | 31 ago 2026 |
| sago.com | Technology | — | 31 ago 2026 | |
| crmeyer.com | DE | Professional Services | — | 31 ago 2026 |
| ccsperfusion.com | US | Healthcare | — | 31 ago 2026 |
| windiam.com | BE | Technology | — | 22 jul 2026 |
| robroy.com | US | Manufacturing | — | 9 jul 2026 |
| iac-intl.com | US | Business Services | — | 9 jul 2026 |
| digitaldynamics.com | US | Technology | — | 1 jul 2026 |
| goldenstateortho.com | US | Healthcare | — | 1 jul 2026 |
| printronix.com | US | Manufacturing | — | 1 jul 2026 |
| paipharma.com | BR | Healthcare | — | 30 jun 2026 |
| eggetttax.ca | CA | Agriculture and Food Production | — | 22 jun 2026 |
| sterlinggloballtd.com | GB | Business Services | — | 22 jun 2026 |
| themintgaming.com | Consumer Services | — | 19 jun 2026 | |
| alu-rex.com | AT | Manufacturing | — | 15 jun 2026 |
| anglomoil.com | GB | Energy | — | 15 jun 2026 |
| squamish.net | CA | Not Found | — | 1 jun 2026 |
| iycsa.com.co | CO | Other | — | 5 may 2025 |
| Estar Seguros, S.A. | MX | Financial Services | — | 12 dic 2024 |
| Cristal y Lavisa S.A. de C.V. | MX | Manufacturing | — | 12 dic 2024 |
| G-ONE AUTO PARTS DE MÉXICO, S.A. DE C.V. | MX | Manufacturing | — | 2 dic 2024 |
| COOPERATIVA TELEFONICA DE CALAFATE LTD. | AR | Professional Services | — | 13 nov 2024 |
| G-One Auto Parts de México S.A. de C.V. | MX | Manufacturing | — | 13 nov 2024 |
| Basilio Advogados | BR | Professional Services | — | 28 oct 2024 |
| tiendasmacuto.com | VE | Professional Services | — | 17 ago 2024 |
| fabamaq.com | AR | Manufacturing | — | 12 ago 2024 |
Las direcciones de los sitios de filtración (.onion) se conocen pero no se publican ni se enlazan. Solo se muestran metadatos públicos. ética
[AI generated] Trailer Bridge is a U.S.-based transportation and logistics company headquartered in Jacksonville, Florida. It operates in the maritime shipping industry, providing container and trailer-on-barge ocean freight services, primarily between the continental United States and Puerto Rico. The company offers intermodal trucking, warehousing, and logistics solutions, serving commercial and government customers across domestic and Caribbean trade routes.
[AI generated] N/A I don't have verified information about a company operating at "mccordclaims.com." Rather than speculate about its industry, services, or country of operation, I should note that this appears to be a claims-related domain name (possibly insurance claims adjusting, legal claims, or similar), but I cannot confirm details without reliable, verifiable data about this specific entity.
[AI generated] N/A
[AI generated] N/A