Ransomware Group intelligence
BrainCipher
ActiveTrack BrainCipher with 111 published victims and 54 known leak locations in a single intelligence view.
BREACH HOUSE ALERTS
Want an alert every time a new ransomware post is published?
Choose the feeds and the countries you care about — we email you when they move.
Overview
BrainCipher is tracked by Breach House as a ransomware group with 111 published victims.
United States is currently the most targeted country in this dataset.
54 known leak locations are currently associated with this group.
Leak Status Distribution
111
- Leaked 53 47.7%
- Pending 55 49.5%
- Deleted 3 2.7%
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (54)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Up checked 1h ago | vkvsgl7lhipjirmz6j5ubp3w3bwvxgcdbpi3fsbqngfynetqtw4w5hyd.onion |
| Leak location 54 | Onion service | Down checked 1h ago | s27k4va5sqe2h2sbw4wmbikibaz6lnwdjngl4v3qptcffsvtrdxx7yyd.onion |
| Leak location 53 | Onion service | Down checked 1h ago | qvfgzg2yukem4ldat2zk6umidqbzydhf7au5ecfybp7d65av6q3jyjad.onion |
| Leak location 51 | Onion service | Down checked 1h ago | 7dfw4p3pzo3zlcy5hzm7y43z3kfke2rhd3eudncmvknwhsqqvseadkad.onion |
| Leak location 52 | Onion service | Down checked 1h ago | ea52lfk4w6dza6hmmb4o6ndef7ep45wkkjxuo7sfzkyqt7rplyph3zyd.onion |
| Leak location 50 | Onion service | Down checked 1h ago | 3jbhn5gsv7yd22n7yasftjab2aystm7mw2x3cvonzipsrnxpjqufmgyd.onion |
| Leak location 48 | Onion service | Down checked 1h ago | tbspzruwy3qhjg3p3pyl2f6zqa5x4tcn6gpask4rvb672hgjzlkrnpyd.onion |
| Leak location 49 | Onion service | Down checked 1h ago | zztabnlnggxpbeiyvpievqtxl6te4amttfobwusmgo2l3hcabfpcgyad.onion |
| Leak location 47 | Onion service | Down checked 1h ago | sjyd42k47guvygfiyfdv5dmllytpgdzr3ioiqsuytz726is6ss67imid.onion |
| Leak location 46 | Onion service | Down checked 1h ago | pcmhzcqprvp3zyiez5tphrjzjqiydaod76idk6k66usmdyvdcb72l4id.onion |
| Leak location 45 | Onion service | Down checked 1h ago | ovw7qnv4pfmah7lae42rynehsrr2v2cvrq6g3uf2nhhpasbr2u3xrwid.onion |
| Leak location 43 | Onion service | Down checked 1h ago | mwf23uiaoiyyg3jgh3diwpmcn2qgg6i7kadivsbyncycz2mw2nyuwtqd.onion |
| Leak location 44 | Onion service | Down checked 1h ago | n2yygycbmyeguft4n6tfokfkbvgkyzchlyn4jbpg7har6goel4eskfqd.onion |
| Leak location 42 | Onion service | Down checked 1h ago | ljex7r7uv7j6lek6jef7o2pqw23ojauom5q7nhgyxjhoebwilbc3eqqd.onion |
| Leak location 41 | Onion service | Down checked 1h ago | keoz3i32ljvnfrsxo3cwolzv2mhkvbi5y5wlwtn5ngbswu4qzdnjvrqd.onion |
| Leak location 40 | Onion service | Down checked 1h ago | jxyphr6ipbeeusnf64sbqubpl57n7cvao3ef3zi5p64lqaggs6nydgid.onion |
| Leak location 39 | Onion service | Down checked 1h ago | ipkxv2cccgrklc2tktzpqe6nm76mikdmvqqgauklvqvv5rl4ib3nmryd.onion |
| Leak location 38 | Onion service | Down checked 1h ago | h4zmek6bf3lebauy7dtyxmui67n6ro5t4zdrooddpw3kyfktg2nmhgid.onion |
| Leak location 37 | Onion service | Down checked 1h ago | gkwqyosd75hpu72jfalfo7xepdebl5p5rhorbxzfwswyg53jckg7wxad.onion |
| Leak location 36 | Onion service | Down checked 1h ago | cjuogz6kvmozrapbw6cgf3ovfxgxe2fy3ajlgxm53w3xjve5x5sichyd.onion |
| Leak location 35 | Onion service | Down checked 1h ago | bosgzz4d53h6tqoaidjogoiq4jaxszll6q2puiepchxhxxop6dxoozqd.onion |
| Leak location 34 | Onion service | Down checked 1h ago | ao63qafejccvb2fdfn5vb7dxaeptxnyroktllnxhzh4ru3df26wivoid.onion |
| Leak location 33 | Onion service | Down checked 1h ago | 7ept6u4u3bczpq5sagycyd2mapv47ctkehzzc3ybugs7vtjl23i52gid.onion |
| Leak location 31 | Onion service | Down checked 1h ago | zfpcqpp6kfe5wl72b2cfb5qbp4kkzi4oj6if4r226idr3efvtocgd6id.onion |
| Leak location 32 | Onion service | Down checked 1h ago | zijgmuqjzb6dc7pofxhtaiz36qqyg35lhutybmzaz6whzgei2casjgid.onion |
| Leak location 29 | Onion service | Down checked 1h ago | urvvoj7wlkh476p2tgntzez3nuke2ylfdkekpnkajxfz43o7jqkokeyd.onion |
| Leak location 30 | Onion service | Down checked 1h ago | x3nb7qcygpem2j5xzstyzdtgzofzkwkx4eko3ug4r73i6uhcgvyffjyd.onion |
| Leak location 28 | Onion service | Down checked 1h ago | upiqcdsgvh6v5owteasjzyxbj2xug574dj4fctthehd7zjq7wmuxbwqd.onion |
| Leak location 27 | Onion service | Down checked 1h ago | rpoeu7zimfpwxbwmjmjyprqaprtvkj3ykfczhbc4x3voydopffn337id.onion |
| Leak location 26 | Onion service | Down checked 1h ago | psv5ejeysrncs6ltu4pkjyazswcmw3atmxi4eg44a6luudin5ufchcqd.onion |
| Leak location 23 | Onion service | Down checked 1h ago | ltxnzpfvmr3c3rcbw5x4q2ejy6fmbp7kc35oql3gooyydg7belfmnyad.onion |
| Leak location 25 | Onion service | Down checked 1h ago | nxetaioe4eelwhdwagi3ikv6ee6tttwvnqikalgkrslz7bwvuwqzdeqd.onion |
| Leak location 24 | Onion service | Down checked 1h ago | mejouwrwja4iou7myj34rqi7cixyhn7vsa42e2n2dhxzc5mmkiaki3yd.onion |
| Leak location 22 | Onion service | Down checked 1h ago | lhsxojxowgtwdqlryl72d2v5cpgqv3sll4d47yyqdisersigvfbl5uid.onion |
| Leak location 20 | Onion service | Down checked 1h ago | inzk64xcf3sm6qzkehmio7piwhkslhnab3rlviniyg7alcgsxvy7kcyd.onion |
| Leak location 21 | Onion service | Down checked 1h ago | kxlw35vctxgbmwtz6474xwtkm2kywifg4efs6ixmvgdgbgi2uaurenid.onion |
| Leak location 19 | Onion service | Down checked 1h ago | hv5on6i3k3g24qtu3ac6vtbrcgl2imz3sasakhfslhbnbqbcri73mqad.onion |
| Leak location 17 | Onion service | Down checked 1h ago | emdnfl2fv32jhssxcbxlo6dzg2at4d7qbw2md6inz63qzdfgyln5cwyd.onion |
| Leak location 18 | Onion service | Down checked 1h ago | guonv3yxlb5t7mptz2cwxsqrsnmsocrufkz3z3nvuv45h66submxe4yd.onion |
| Leak location 16 | Onion service | Down checked 1h ago | dkeqrg3fxrijolpgpbsmk6eacare4bg5awrracxdiestki2onyz5bnyd.onion |
| Leak location 14 | Onion service | Down checked 1h ago | aj3ocrawf43r6u5miezvmzh5sjtuv2rx6na3tm26fao3laobu5unfhyd.onion |
| Leak location 15 | Onion service | Down checked 1h ago | alkkq3vhb7epl3jh6qzutj2vyyfdgvs2nukw5hwdsijl5la3jrinrryd.onion |
| Leak location 13 | Onion service | Down checked 1h ago | a4vbe7yp4kluped6khuhpr5nmzshiimx2jt5j22ozriiq6ngsm3fcpyd.onion |
| Leak location 12 | Onion service | Down checked 1h ago | 7n4vqiaqxenaqy4t47ayqvurbmg6vfg2ir7iobwjazwizjncwyt7jhad.onion |
| Leak location 11 | Onion service | Down checked 1h ago | 6ft2dfh26wm3w44orpjcgviutvfp25ez2iyh5ego5egvfmifrws7vvqd.onion |
| Leak location 10 | Onion service | Down checked 1h ago | 3frnhzcnlkjnw5q3tm6elzizinm2k3bmrtf2xwqjzpcxzeqwn2tv6wyd.onion |
| Leak location 8 | Onion service | Down checked 1h ago | p6wmotxzvg34tdmpwm4beqgrcyp5iys43snkccsahnw74la3k3xx6pad.onion |
| Leak location 9 | Onion service | Down checked 1h ago | 3fg2gfwrdks46drwvejpgpak5klrflclsjjo35dxtqfk3poeez6oezad.onion |
| Leak location 7 | Onion service | Down checked 1h ago | cuuhrxbg52c5agytmtjpwfu7mrs4xtaitc4mukkiy2kqdxeqbcmuhaid.onion |
| Leak location 6 | Onion service | Down checked 1h ago | 77nrxelcwh47yikvpaz2rvtsten4sen2elybo5r5st6wlxsbitv255qd.onion |
| Leak location 5 | Onion service | Down checked 1h ago | 4ldgw2wuidqu5ef3rzx4byonf3y7rdnh43jiw2z4sbtjiwic6gkov7yd.onion |
| Leak location 3 | Onion service | Down checked 1h ago | brain4zoadgr6clxecixffvxjsw43cflyprnpfeak72nfh664kqqriyd.onion |
| Leak location 4 | Onion service | Down checked 1h ago | zktnif5vckhmz5tyrukp5bamatbfhkxjnb23rspsanyzywcrx3bvtqad.onion |
| Leak location 2 | Onion service | Down checked 1h ago | mybmtbgd7aprdnw2ekxht5qap5daam2wch25coqerrq2zdioanob34ad.onion |
Top Activity Sectors (13)
- Services 20
- Not identified 16
- IT 16
- Manufacturing / Engineering 15
- Finance / Legal / Insurance 13
- Healthcare / Pharma 9
- Communication / Marketing 7
- Retail / E-commerce 3
- Construction / Real Estate 3
- Public Sector 2
- Hospitality / Food & Beverage / Tourism 2
- Transportation / Travel / Logistics 2
- Agriculture / Food 1
Typical Attacks (10)
▼MITRE ATT&CK does not currently catalogue BrainCipher, so this is our assessment of the techniques it uses, drawn from public reporting. The techniques themselves, and every "what that means" definition below, come from MITRE ATT&CK v20.0. Confidence: medium. Treat it as orientation, not attribution.
-
T1059.001 PowerShell Execution
What they do: BrainCipher executes PowerShell scripts to stage payloads, disable defenses, and propagate across compromised systems.
What that means: Adversaries may abuse PowerShell commands and scripts for execution.
-
What they do: BrainCipher leverages registry run keys and startup folders to maintain persistence after reboots.
What that means: Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key.
-
T1685 Disable or Modify Tools Defense Impairment
What they do: BrainCipher disables antivirus tools and security processes to prevent detection and ensure encryption completes successfully.
What that means: Adversaries may disable, degrade, or tamper with security tools or applications (e.g., endpoint detection and response (EDR) tools, intrusion detection systems (IDS), antivirus, logging agents, sensors, etc.) to impair or reduce visibility of defensive capabilities.
-
T1027.016 Junk Code Insertion Stealth
What they do: BrainCipher inserts junk code into its malware binaries to evade static analysis and signature-based detection.
What that means: Adversaries may use junk code / dead code to obfuscate a malware’s functionality.
-
T1070.004 File Deletion Stealth
What they do: BrainCipher deletes Volume Shadow Copies and backup files via system commands to eliminate recovery options.
What that means: Adversaries may delete files left behind by the actions of their intrusion activity.
-
T1135 Network Share Discovery Discovery
What they do: BrainCipher uses network share discovery to locate victim file shares and identify high-value directories for encryption.
What that means: Adversaries may look for folders and drives shared on remote systems as a means of identifying sources of information to gather as a precursor for Collection and to identify potential systems of interest for Lateral Movement.
-
T1021.002 SMB/Windows Admin Shares Lateral Movement
What they do: BrainCipher moves laterally through SMB/Windows Admin Shares to compromise additional hosts within the network.
What that means: Adversaries may use Valid Accounts to interact with a remote network share using Server Message Block (SMB).
-
T1567.002 Exfiltration to Cloud Storage Exfiltration
What they do: BrainCipher exfiltrates stolen data over C2 channels before deployment to enable double extortion.
What that means: Adversaries may exfiltrate data to a cloud storage service rather than over their primary command and control channel.
-
T1486 Data Encrypted for Impact Impact
What they do: BrainCipher encrypts victim files using its ransomware payload, targeting business documents and backups to maximize impact.
What that means: Adversaries may encrypt data on target systems or on large numbers of systems in a network to interrupt availability to system and network resources.
-
T1490 Inhibit System Recovery Impact
What they do: BrainCipher calls system recovery inhibitors to block restore processes and harden its impact phase.
What that means: Adversaries may delete or remove built-in data and turn off services designed to aid in the recovery of a corrupted system to prevent recovery.
Ransom Notes (3)
▼The note this group leaves on a compromised machine. Click a filename to read it.
[id].README_2.txt
ATTENTION: YOUR DATA HAS BEEN LOCKED! Dear representatives of the company, We are compelled to inform you that your information system has been successfully breached by our group. All your data, including financial reports, customer databases, internal documentation, correspondence, and even backup files, have been encrypted using state-of-the-art cryptographic algorithms. Without our unique decryption key, restoring access to this data is impossible. We strongly advise against attempting to resolve this issue independently, as any such attempts may result in irreversible data loss. Your company is now in an extremely vulnerable position. Disclosure or destruction of the data may lead to serious consequences, including: Financial losses: Leakage of confidential information can result in lawsuits, fines, and compensation claims. Moreover, your competitors may exploit this data to gain an unfair advantage in the market. Reputational damage: Loss of trust from clients and partners may negatively impact your business. News of the cyberattack will spread quickly, and your brand may become associated with unreliability and an inability to protect data. Legal consequences: Violation of data protection laws (e.g., GDPR, CCPA, or other regional regulations) may lead to significant fines and audits by regulatory authorities. This may also necessitate a mandatory restructuring of your data processing procedures. Operational issues: Lack of access to critical systems may lead to a complete halt in your company�s operations. This could affect not only you but also your customers, partners, and suppliers. ADDITIONAL RISKS AND THREATS: Legal consequences for company leadership: If we decide to disclose the data, it may lead to criminal charges against your company�s management for negligence and violation of data protection rules. You personally may be held accountable, and your career could be at risk. Media and public opinion: We collaborate with various media outlets and are ready to provide them with part of your data for public exposure. Information about your inability to protect data will become public knowledge, leading to further reputational damage. Mass lawsuits from clients and partners: We have prepared anonymous instructions for your clients and partners affected by the leak. These instructions will help them file class-action lawsuits against your company. We understand the importance of the stolen information for your organization. Currently, all data is in our possession. We are ready to discuss the terms of transferring the decryption key and guarantee the complete deletion of all copied data after receiving payment. We also offer an alternative: ignoring this message will either lead to the public leakage of data through our special portal on the Dark Web or result in its complete destruction. *** Brain Cipher Leaks: http://vkvsgl7lhipjirmz6j5ubp3w3bwvxgcdbpi3fsbqngfynetqtw4w5hyd.onion/ *** PLEASE NOTE: Any contact with law enforcement agencies or data recovery companies will be considered a violation of our agreement. If we discover that you are collaborating with third parties, this will immediately lead to the following actions: Key deletion: all decryption keys will be irrevocably deleted. Public leak: We will release part of the data on public resources to ensure maximum reputational damage. Increased recovery cost: The price for decryption will double, and the timeframe for providing the key will be extended. Legal consequences for leadership: We will pass information about your collaboration with law enforcement to the media and regulatory bodies, leading to additional legal and reputational problems. We understand that this is a difficult situation and would like to offer you a way to resolve it. For this purpose, we provide clear instructions for data recovery. Please note that time is limited. If we do not receive a response within 72 hours, the cost of recovery will increase, and the likelihood of data preservation will significantly decrease. WHY YOU SHOULD CONTACT US DIRECTLY? Guaranteed security: We guarantee the complete deletion of all data copies after receiving payment. Professional approach: We use cutting-edge technologies to ensure reliable encryption and decryption of data. Confidentiality: Our communication channels are fully anonymous, and we do not share information with third parties. Flexibility: We are ready to discuss payment terms and provide additional time for decision-making. No risks: Cooperation with us is the only way to avoid a public data leak and irreversible data loss. Protection from legal consequences: We will ensure that information about your company does not fall into the hands of law enforcement or the media if you meet our requirements. ======================================== To contact us, follow these instructions: 1.Download and install Tor Browser (https://www.torproject.org/download/) 2.Go to our support page: http://braincgksuixxkpkme7zlpkh7u47oryxx574d74ws4eal4t2mxyahbqd.onion (This page can take up to 30 minutes to load.) 3.Enter your encryption ID: [snip] We will provide further instructions on payment and data recovery. After confirming payment, we will transfer a unique decryption key that will allow you to restore access to all your files. We strongly recommend acting quickly and professionally! Any delays or attempts to ignore this message may lead to irreversible consequences. We are ready to cooperate and ensure a secure resolution to this issue. Email to support: [email protected] Welcome to BrainCipher!
How To Restore Your Files.txt
\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ \\\\\\Welcome to Brain Cipher Ransomware!\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ \\\\\\\\\Dear managers!\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ \\\\\\\\\\If you're reading this, it means your systems have been hacked and encrypted and your data stolen.\\\\\\\\\\\\\\\\\\\\\\\\\ \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ \\\\\\\\\\\\The most proper way to safely recover your data is through our support. We can recover your systems within 4-6 hours.\\\\\\ \\\\\\\\\\\\\In order for it to be successful, you must follow a few points:\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ \\\\\\\\\\\\\\\1.Don't go to the police, etc.\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ \\\\\\\\\\\\\\\\2.Do not attempt to recover data on your own.\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ \\\\\\\\\\\\\\\\\3.Do not take the help of third-party data recovery companies.\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ \\\\\\\\\\\\\\\\\\\\\\\In most cases, they are scammers who will pay us a ransom and take a % for themselves.\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ \\\\\\\\\\\\\\\\\\\\If you violate any 1 of these points, we will refuse to cooperate with you!!!\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ \\ \\ ATTENTION!!! If you do not contact us within 48 hours, we will post the record on our website: \\ \\ \\ http://vkvsgl7lhipjirmz6j5ubp3w3bwvxgcdbpi3fsbqngfynetqtw4w5hyd.onion/ \\ \\ \\ \\ 3 steps to data recovery: \\ \\ \\ 1. Download and install Tor Browser (https://www.torproject.org/download/) \\ \\ 2. Go to our support page: http://mybmtbgd7aprdnw2ekxht5qap5daam2wch25coqerrq2zdioanob34ad.onion \\ ******* This page can take up to 30 minutes to load. \\ \\ 3. Enter your encryption ID: [snip] \\ \\ \\ Email to support: [email protected] \\ \\ \\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\ _ _ | | (_) | |__ _ __ __ _ _ _ __ | '_ \| '__/ _` | | '_ \ | |_) | | | (_| | | | | | |_.__/|_| \__,_|_|_| |_| ,--""-. (_,=- ) `---#{ `}
[id].README.txt
***
Welcome to Brain Cipher Ransomware!
***
Dear managers!
If you're reading this, it means your systems have been hacked and encrypted and your data stolen.
***
The most proper way to safely recover your data is through our support. We can recover your systems within 4-6 hours.
In order for it to be successful, you must follow a few points:
1.Don't go to the police, etc.
2.Do not attempt to recover data on your own.
3.Do not take the help of third-party data recovery companies.
In most cases, they are scammers who will pay us a ransom and take a for themselves.
***
If you violate any 1 of these points, we will refuse to cooperate with you!!!
3 steps to data recovery:
1. Download and install Tor Browser (https://www.torproject.org/download/)
2. Go to our support page: http://mybmtbgd7aprdnw2ekxht5qap5daam2wch25coqerrq2zdioanob34ad.onion
3. Enter your encryption ID: [snip]
Email to support: [email protected]
Ransom-note text from RansomLook, licensed CC BY 4.0.
Victims (111)
Search, filter and paginate the victim timeline for BrainCipher. Showing 101–111 of 111.
| Type | Target | Discovered | Country | Business Category | Intel Link | Leak status |
|---|---|---|---|---|---|---|
| Ransomware | ghanare.com id14043 View details | Ghana | Communication / Marketing | pending | ||
|
Ghanare.com is an online platform dedicated to providing comprehensive real estate services in Ghana. It connects buyers, sellers, and renters with property listings, including residential, commercial, and land options. The platform aims to simplify the property search process, offering detailed property information, images, and contact details to facilitate seamless transactions. |
||||||
| Ransomware | beinlaw.co.il - Prof. Bein & Co. id13934 View details | Israel | Finance / Legal / Insurance | pending | ||
|
Prof. Bein & Co., accessible via beinlaw.co.il, is a reputable law firm based in Israel. It specializes in various legal fields, offering expert services in commercial law, real estate, litigation, and intellectual property. The firm is known for its professional approach, experienced team, and commitment to providing tailored legal solutions to meet the unique needs of its clients. |
||||||
| Ransomware | tiendasmacuto.com id13869 View details | Venezuela, Bolivarian Republic of | Retail / E-commerce | pending | ||
|
Tiendasmacuto.com is an online retail store specializing in outdoor and adventure gear. They offer a wide range of products including backpacks, tents, sleeping bags, and hiking accessories. The company focuses on high-quality, durable items suitable for camping, trekking, and other outdoor activities. Customer service and satisfaction are key priorities, ensuring a reliable shopping experience. |
||||||
| Ransomware | fabamaq.com id13794 View details | Argentina | Other | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | cyceron.fr id13793 View details | France | Other | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | Sherbrooke Metals id13464 View details | United States | Manufacturing / Engineering | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | Apex Global | Big leak outlooks - 2tb. id13463 View details | Netherlands | Services | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | Cole Technologies Group id13462 View details | United States | IT | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | Family Wealth Advisors Ltd. id13461 View details | Israel | Services | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | Mars 2 LLC id13460 View details | United States | Services | pending | ||
|
No additional victim description available. |
||||||
| Ransomware | Indonesia Terkoneksi id13220 View details | Indonesia | Other | pending | ||
|
More important than money, only honor. |
||||||