BrainCipher ransomware group
Brain Cipher emerged in July 2024. Both Windows and Linux variants are available. Brain Cipher using the leaked build of LockBit Black for their operations. The group suspected to have exploited CVE-2023-28252 (Microsoft Windows CLFS Driver Privilege Escalation Vulnerability). The Ransom demand ranges from $150,000 to $1,00,0000. Demand to be paid with Monero (XMR) cryptocurrency. In 2025, they have shifted their…
- Claims in 7 days
- 1
- Claims in 30 days
- 20
- Reported techniques
- 5
Listings on leak sites are claims by criminals. They are unverified and can be false. coldbraid shows counts here, not names.
Where it claims victims
| Country | Claims in 60 days |
|---|---|
| United States | 10 |
| Germany | 2 |
| Canada | 2 |
| United Kingdom | 1 |
| Ireland | 1 |
| Argentina | 1 |
Sectors
| Sector | Claims in 60 days |
|---|---|
| Healthcare | 5 |
| Professional Services | 5 |
| Financial Services | 3 |
| Manufacturing | 1 |
| Agriculture and Food Production | 1 |
| Technology | 1 |
| Other | 1 |
Reported techniques
User ExecutionIndicator RemovalFile and Directory DiscoveryData Encrypted for ImpactDisable or Modify Tools