🏹 bravox — Ransomware
BravoX is a selective ransomware-as-a-service operation that surfaced publicly in January 2026 after advertising on the RAMP underground forum, targeting primarily US-based organizations in healthcare and retail while applying strict affiliate vetting requirements including proof of access or a financial deposit.
Classification
Ransomware
Leak-site victims
23
Ransomware.live
Associated IoCs
0
local intel
MITRE techniques
—
ATT&CK
Tracked
Yes
Ransomware.live
🔥 Leak-Site Victims (23)
| Victim | Country | Published | Domain |
|---|---|---|---|
| MITC AG | CH | 2026-08-06T14:22:07.041752+00:00 | www.mitc.ch |
| A&A Safety | US | 2026-07-25T13:21:41.147424+00:00 | aasafetyinc.com |
| PB Fiduciaire SA | CH | 2026-07-07T09:52:22.165659+00:00 | www.pbfiduciaire.ch |
| Meta | BR | 2026-06-23T23:20:59.355614+00:00 | www.metamed.com.br |
| SELECT WINES | CA | 2026-06-18T13:51:06.776180+00:00 | www.selectwines.ca |
| CCS GLOBAL TECH | US | 2026-06-12T02:50:51.204268+00:00 | ccsglobaltech.com |
| Grupo Mauá | BR | 2026-05-31T22:20:55.989247+00:00 | www.grupomaua.com.br |
| AcademyHealth | US | 2026-05-29T20:21:31.689010+00:00 | academyhealth.org |
| Emek Elektrik | TR | 2026-05-23T22:51:01.363273+00:00 | emek.com.tr |
| Salvation Army | CA | 2026-05-23T21:21:03.904298+00:00 | salvationarmy.ca |
| Rivadeneyra Treviño | MX | 2026-05-12T05:50:57.155617+00:00 | rivtrev.com |
| Soprolux | FR | 2026-05-07T21:21:01.664769+00:00 | soprolux.com |
| 1st Solution CTC | DE | 2026-04-23T15:37:33.675165+00:00 | www.1sctc.com |
| Aculab | GB | 2026-04-06T12:03:33.011714+00:00 | aculab.com |
| UMBERG TREUHAND AG | CH | 2026-03-11T14:02:28.945654+00:00 | umberg-treuhand.ch |
| Soreco | CH | 2026-03-02T19:36:34.949249+00:00 | soreco.ch |
| SPEC | US | 2026-02-11T08:21:09.622545+00:00 | spec150.com |
| FUSION HILL | US | 2026-02-11T08:20:09.434497+00:00 | www.fusionhill.com |
| John O's Foods | CA | 2026-02-11T08:18:54.445101+00:00 | www.johnofoods.com |
| OEC Bretagne | FR | 2026-02-16T00:30:20.796958+00:00 | www.bretagne.experts-comptables.fr |
| Hood River Dental | US | 2026-02-11T08:22:29.700104+00:00 | www.hoodriverdentist.com |
| WVPCA | US | 2026-02-11T08:21:52.486894+00:00 | www.wvpca.org |
| [Redacted] | FR | 2026-02-11T08:18:08.057459+00:00 | — |
Source: Ransomware.live leak-site monitoring (cached, offline-safe).
🏹 Campaigns & malware
🧩 Advanced Capabilities
Live group profile & victims via Ransomware.live; ATT&CK technique hints are a static reference for well-known groups. All network calls cached & offline-safe.
Workstation · Copilot · AI Skills · Automation · Playbooks · Lookups · Docs · Reports
🤖 AI Copilot
⚡ AI Skills
🔍 Lookup & Enrich
📚 Docs & Reports
💡 Recommendations
- Explore related tools below
- Automate recurring work via cron