bravox ransomware group
BravoX is a selective ransomware-as-a-service operation that surfaced publicly in January 2026 after advertising on the RAMP underground forum, targeting primarily US-based organizations in healthcare and retail while applying strict affiliate vetting requirements including proof of access or a financial deposit.
- Claims in 7 days
- 1
- Claims in 30 days
- 5
- Reported techniques
- 0
Listings on leak sites are claims by criminals. They are unverified and can be false. coldbraid shows counts here, not names.
Where it claims victims
| Country | Claims in 60 days |
|---|---|
| Germany | 2 |
| France | 1 |
| United States | 1 |
| Malaysia | 1 |
Sectors
| Sector | Claims in 60 days |
|---|---|
| Other | 1 |
| Technology | 1 |