Skip to content
The Nexus
Group profile9 claimed in last 30d11 total tracked

BrainCipher

Forward this

Brain Cipher emerged in July 2024. Both Windows and Linux variants are available. Brain Cipher using the leaked build of LockBit Black for their operations. The group suspected to have exploited CVE-2023-28252 (Microsoft Windows CLFS Driver Privilege Escalation Vulnerability). The Ransom demand ranges from $150, 000 to $1, 00, 0000. Demand to be paid with Monero (XMR) cryptocurrency. In 2025, they have shifted their new Negotiation portal to new server with vanity TOR Domain starting with 'brain'.

First seen: May 21 · 15:50 UTCLast seen: Jul 1 · 15:51 UTCTracked since: 2024-07-01
Sectors hit
  • Manufacturing2
  • Healthcare2
  • Business Services2
  • Technology1
  • Unspecified1
  • Energy1
  • Consumer Services1
  • Agriculture and Food Production1
Countries hit
  • United States3
  • United Kingdom2
  • Canada2
  • Brazil1
  • Australia1
  • Austria1
MITRE ATT&CK · observed TTPs4 tactics

Tactics and techniques attributed to BRAINCIPHER by ransomware.live's curated TTP catalog. Identifiers link to the canonical MITRE ATT&CK reference for each tactic or sub-technique.

  • TA0002Execution
    • T1204.002User Execution

      Executes a malicious file on the victim's system.

  • TA0005Defense Evasion
    • T1070.004Indicator Removal: File Deletion

      The ransomware self-deletes after execution.

    • T1562.001Impair Defenses: Disable or Modify Tools

      Disables Windows Defender (if it is running).

  • TA0007Discovery
    • T1083File and Directory Discovery

      Enumerates directories to encrypt files.

  • TA0040Impact
    • T1486Data Encrypted for Impact

      Uses data encryption as a means of extorting the victim.

Recent claimed victims
TechnologyUnited StatesJul 1 · 15:51 UTC

digitaldynamics.com

digitaldynamics.com
HealthcareUnited StatesJul 1 · 15:51 UTC

goldenstateortho.com

goldenstateortho.com

Golden State Ortho appears to be an orthopedic medical practice or orthopedic supply company based in the United States, likely California given the "Golden State" reference. It operates in the healthcare industry, potentially offering orthopedic surgical services, prosthetics, orthotics, or related medical products and patient care. Specific verified details about this company are limited, so full operational details cannot be confirmed with certainty.

ManufacturingUnited StatesJul 1 · 15:50 UTC

printronix.com

printronix.com

Printronix is a US-based company specializing in industrial printing solutions. Founded in 1974 and headquartered in Irvine, California, it manufactures line matrix printers, thermal printers, and related accessories primarily for enterprise and industrial environments. Its products serve industries such as manufacturing, logistics, and supply chain management, offering high-volume, mission-critical printing capabilities used in warehouses and distribution centers worldwide.

HealthcareBrazilJun 30 · 16:50 UTC

paipharma.com

paipharma.com
Agriculture and Food ProductionCanadaJun 22 · 19:50 UTC

eggetttax.ca

eggetttax.ca
Business ServicesUnited KingdomJun 22 · 19:20 UTC

sterlinggloballtd.com

sterlinggloballtd.com
Consumer ServicesJun 19 · 21:20 UTC

themintgaming.com

themintgaming.com
ManufacturingAustriaJun 15 · 18:20 UTC

alu-rex.com

alu-rex.com

Alu-Rex is a Canadian company specializing in the manufacturing of gutter protection systems and accessories. Based in Quebec, Canada, the company produces aluminum-based products designed to prevent debris from clogging eavestroughs. Their product lines include continuous hanger systems and gutter guards primarily marketed to roofing and eavestrough installation professionals across North America.

EnergyUnited KingdomJun 15 · 17:50 UTC

anglomoil.com

anglomoil.com

Anglomoil is an Australian company specialising in the manufacture and supply of lubricants and associated products. Operating in the industrial and automotive lubricant sector, it serves mining, transport, agriculture, and general industry markets. Headquartered in Australia, the company produces engine oils, greases, hydraulic fluids, and specialty lubricants, distributing products nationally and to select international markets.

CanadaJun 1 · 15:20 UTC

squamish.net

squamish.net

squamish.net appears to be an internet service provider and telecommunications company operating in Squamish, British Columbia, Canada. It offers broadband internet connectivity and related services to residential and business customers in the Squamish region. The company serves as a local ISP, providing connectivity solutions to the Sea-to-Sky Corridor area of British Columbia, positioning itself within the Canadian telecommunications and internet services industry.

Business ServicesAustraliaMay 21 · 15:50 UTC

sheppadviser.com.au

sheppadviser.com.au
BRAINCIPHER · Underground group profile · The Nexus