Group profile
bravox
BravoX is a selective ransomware-as-a-service operation that surfaced publicly in January 2026 after advertising on the RAMP underground forum, targeting primarily US-based organizations in healthcare and retail while applying strict affiliate vetting requirements including proof of access or a financial deposit.
Sectors hit
- Technology
- Manufacturing
- Healthcare
- Financial Services
- Energy
- Consumer Services
- Agriculture and Food Production
Countries hit