← Adversaries
File · brain cipher · Crime · ransomware.live · refreshed 2026-10-06
brain cipher
sigil · no ATT&CK coverage stated
Last 30 days
last seen 8 d agodispatches10
victims10
CVEs seen0
What changed
ledger · newest first- —23 d agoresurfacedback on the wire — nothing in the previous 30 days
Analyst brief
ransomware.livebrain cipher is an active ransomware/extortion group, tracked here from the victims it lists on its public leak site.
Take it with you
keyless · no signupReferences
1 sourceTrack brain cipher on the wire.
This dossier is already data: the keyless actor API and a STIX 2.1 bundle. Mentions on the wire reach Telegram and RSS as they land.
Check your stack
Paste what you run: the CVEs exploited in the wild against it, and who is cited as exploiting them, with the report.
Stack checkNo key. No signup.