CiphBit is a ransomware-as-a-service group active since April 2023, targeting small-to-mid-sized businesses across the UK, Europe, and North America with 38 known victims, employing a data-broker model with selective free leaks to pressure victims alongside standard double extortion.
Genera un perfil del actor con IA (defensivo) cuando lo pidas.
Este grupo no tiene TTPs curadas. Puedes generar un mapeo MITRE ESTIMADO por IA (no confirmado) a partir de su descripción/notas, solo cuando lo pidas.
# CiphBit Locker All of Your Files And Network Have Been Strongly Secured By CiphBit Locker ! ################################## ## Your Decryption ID: [snip ] ## ################################## 1) Action Required: • Install Tor Browser via [redactado] • Enter CiphBit Tor Site: [redactado] • After Logging in, set your password and wait for the response. 2) Critical Instructions: • Do Not Modify or attempt to rename the encrypted files. This may lead to permanent data loss. • Do Not Share this information or breach details with any third party. This could be illogical. • You have a strict 48-hour window to take action. Failure to do so will result in the publication of your sensitive information on our blog, which may have serious consequences. 3) Additional Links: • CiphBit Tor Data Leak Blog: [redactado] • How To Buy Bitcoin: [redactado] • Tor Browser: [redactado]
[AI generated] N/A
[AI generated] N/A
| Organización | País | Sector | Grupo | Descubierta |
|---|---|---|---|---|
| Clínica Villa Zaita | PA | Healthcare | — | 2 dic 2025 |
| Kitevuc - Equipamentos E Veiculo | BR | Manufacturing | — | 24 sept 2025 |
Las direcciones de los sitios de filtración (.onion) se conocen pero no se publican ni se enlazan. Solo se muestran metadatos públicos. ética