HackerFeeds
All ransomware groups

braincipher

109 tracked victims
·first seen 2024-07-01·last activity 2026-10-21

Activity analysis

HackerFeeds has tracked 109 victims claimed by braincipher since July 2024, most recently in November 2026 — ranking #70 of 332 groups (0.3% of all tracked ransomware victims). It posted 41 victims in the last 90 days, up 173% on the previous 90 days (15). Its most-targeted sector is Business Services (18 victims), followed by Technology (15). The United States accounts for 39 victims (38% of those with a known location); 5 victims did not disclose a location.

Victims per year

  • 202426
  • 202518
  • 202666

Top sectors

  • Business Services18
  • Technology15
  • Manufacturing12
  • Healthcare12
  • Professional Services10
  • Financial Services9

Computed from victims claimed on the group's leak site as collected by HackerFeeds; claims are not independently verified. Monthly reports · Methodology

Group profile

Brain Cipher emerged in July 2024. Both Windows and Linux variants are available. Brain Cipher using the leaked build of LockBit Black for their operations. The group suspected to have exploited CVE-2023-28252 (Microsoft Windows CLFS Driver Privilege Escalation Vulnerability). The Ransom demand ranges from $150,000 to $1,00,0000. Demand to be paid with Monero (XMR) cryptocurrency. In 2025, they have shifted their new Negotiation portal to new server with vanity TOR Domain starting with 'brain'.

MITRE ATT&CK TTPs

TA0002

Execution

  • T1204.002User Execution

    Executes a malicious file on the victim's system.

TA0005

Defense Evasion

  • T1070.004Indicator Removal: File Deletion

    The ransomware self-deletes after execution.

  • T1562.001Impair Defenses: Disable or Modify Tools

    Disables Windows Defender (if it is running).

TA0007

Discovery

  • T1083File and Directory Discovery

    Enumerates directories to encrypt files.

TA0040

Impact

  • T1486Data Encrypted for Impact

    Uses data encryption as a means of extorting the victim.

Recent victims

showing 50 of 110
DateWebsite / victimSectorCountry
2026-11-06
mutares.com
Mutares.comMutares.com
ManufacturingDE
2026-11-04
fbc.ca
fbc.cafbc.ca
Financial ServicesCA
2026-11-04
hamiltonhealthcenter.com
hamiltonhealthcenter.comhamiltonhealthcenter.com
HealthcareCA
2026-11-04
hhjcpa.com
hhjcpa.comhhjcpa.com
Professional ServicesUS
2026-11-04
prairieridge.net
prairieridge.netprairieridge.net
Agriculture and Food ProductionUS
2026-11-04
ciscocems.com
ciscocems.comciscocems.com
TechnologyUS
2026-11-04
parkell.com
parkell.comparkell.com
HealthcareUS
2026-11-04
tritonclaims.com
tritonclaims.comtritonclaims.com
Financial ServicesUS
2026-11-04
cadorath.com
cadorath.comcadorath.com
Not FoundDE
2026-11-04
spearcenter.com
spearcenter.comspearcenter.com
Professional ServicesUS
2026-11-04
myronl.com
myronl.commyronl.com
Not Found
2026-11-04
megastarfinancial.com
megastarfinancial.commegastarfinancial.com
Financial Services
2026-10-21
novagroupgbc.com
novagroupgbc.comnovagroupgbc.com
OtherGB
2026-10-21
oflaherty-law.com
oflaherty-law.comoflaherty-law.com
Professional ServicesIE
2026-10-21
clinicaromero.com
clinicaromero.comclinicaromero.com
HealthcareAR
2026-10-21
sodali.com
sodali.comsodali.com
Professional ServicesUS
2026-10-21
srsnodgrass.com
srsnodgrass.comsrsnodgrass.com
Professional ServicesUS
2026-10-21
prosomnus.com
prosomnus.comprosomnus.com
HealthcareUS
2026-10-21
olyortho.com
olyortho.comolyortho.com
HealthcareUS
2026-10-21
mvjllp.com
mvjllp.commvjllp.com
Not Found
2026-10-11
huntcompanies.com
huntcompanies.comhuntcompanies.com
Not FoundUS
2026-09-29
latitudesubro.com
latitudesubro.comlatitudesubro.com
ManufacturingBR
2026-09-29
trailerbridge.com
trailerbridge.comtrailerbridge.com
TransportationUS
2026-09-29
mccordclaims.com
mccordclaims.commccordclaims.com
Financial ServicesUS
2026-09-29
goriteway.com
goriteway.comgoriteway.com
Not FoundUS
2026-09-29
northeastrehab.com
northeastrehab.comnortheastrehab.com
HealthcareUS
2026-09-29
mulholland.com
mulholland.commulholland.com
Not FoundUS
2026-09-29
wildmanbg.com
wildmanbg.comwildmanbg.com
OtherBG
2026-09-29
maxwell-group.com
maxwell-group.commaxwell-group.com
OtherGB
2026-09-23
goldstarfinancial.com
goldstarfinancial.comgoldstarfinancial.com
Financial ServicesUS
2026-09-17
hoyletanner.com
hoyletanner.comhoyletanner.com
Professional ServicesGB
2026-09-17
aecom.com
aecom.comaecom.com
Professional ServicesUS
2026-09-17
xpera.ca
xpera.caxpera.ca
TechnologyCA
2026-08-31
icot.es
icot.esicot.es
TechnologyES
2026-08-31
aeiconsultants.com
aeiconsultants.comaeiconsultants.com
Professional ServicesUS
2026-08-31
syc.es
syc.essyc.es
TechnologyES
2026-08-31
A
Adviesbureau De Beuckelaer BV
Professional ServicesNL
2026-08-31
ahadandco.com
ahadandco.comahadandco.com
OtherAE
2026-08-31
sago.com
sago.comsago.com
Technology
2026-08-31
crmeyer.com
crmeyer.comcrmeyer.com
Professional ServicesDE
2026-08-31
ccsperfusion.com
ccsperfusion.comccsperfusion.com
HealthcareUS
2026-07-20
windiam.com
windiam.comwindiam.com
TechnologyBE
2026-07-09
robroy.com
robroy.comrobroy.com
ManufacturingUS
2026-07-09
iac-intl.com
iac-intl.comiac-intl.com
Professional ServicesUS
2026-07-01
digitaldynamics.com
digitaldynamics.comdigitaldynamics.com
TechnologyUS
2026-07-01
goldenstateortho.com
goldenstateortho.comgoldenstateortho.com
HealthcareUS
2026-07-01
printronix.com
printronix.comprintronix.com
ManufacturingUS
2026-06-13
paipharma.com
paipharma.compaipharma.com
HealthcareBR
2026-06-22
eggetttax.ca
eggetttax.caeggetttax.ca
Agriculture and Food ProductionCA
2026-06-22
sterlinggloballtd.com
sterlinggloballtd.comsterlinggloballtd.com
Professional ServicesGB