🚨New ransom group blog post!🚨
Group name: BrainCipher
Post title: BeforeRemovingNewthings_19052025.bak
#ransomware #cti #threatintelligence #cybersecurity #infosec
Group name: BrainCipher
Post title: BeforeRemovingNewthings_19052025.bak
#ransomware #cti #threatintelligence #cybersecurity #infosec
September 22, 2026 at 1:09 AM
🚨New ransom group blog post!🚨
Group name: BrainCipher
Post title: BeforeRemovingNewthings_19052025.bak
#ransomware #cti #threatintelligence #cybersecurity #infosec
Group name: BrainCipher
Post title: BeforeRemovingNewthings_19052025.bak
#ransomware #cti #threatintelligence #cybersecurity #infosec
🔴 Goldstarfinancial.com found on Braincipher's leak site
📍 United States · Financial Services · 23 Sep 2026
🏴 Braincipher has listed 77 victims since July 2024.
https://cyberthreatintelligence.net/ransomware-victim/goldstarfinancial-com-braincipher-2026
#ransomware #threatintel #leaksite
📍 United States · Financial Services · 23 Sep 2026
🏴 Braincipher has listed 77 victims since July 2024.
https://cyberthreatintelligence.net/ransomware-victim/goldstarfinancial-com-braincipher-2026
#ransomware #threatintel #leaksite
goldstarfinancial.com — Ransomware Attack by Braincipher
Based in United States. Financial Services sector. Disclosed 23 Sep 2026. Incident profile, threat group background and sector analysis.
cyberthreatintelligence.net
September 23, 2026 at 7:01 PM
🔴 Goldstarfinancial.com found on Braincipher's leak site
📍 United States · Financial Services · 23 Sep 2026
🏴 Braincipher has listed 77 victims since July 2024.
https://cyberthreatintelligence.net/ransomware-victim/goldstarfinancial-com-braincipher-2026
#ransomware #threatintel #leaksite
📍 United States · Financial Services · 23 Sep 2026
🏴 Braincipher has listed 77 victims since July 2024.
https://cyberthreatintelligence.net/ransomware-victim/goldstarfinancial-com-braincipher-2026
#ransomware #threatintel #leaksite
According to Ransomware.live, BrainCipher ransomware group has added goldstarfinancial.com (🇺🇸) to its victims.
September 23, 2026 at 6:20 PM
According to Ransomware.live, BrainCipher ransomware group has added goldstarfinancial.com (🇺🇸) to its victims.
🧭 How Braincipher is documented to operate
· User Execution
· Indicator Removal: File Deletion
· Impair Defenses: Disable or Modify Tools
· File and Directory Discovery
MITRE ATT&CK techniques attributed to Braincipher overall — not a finding about how this organisation was reached.
· User Execution
· Indicator Removal: File Deletion
· Impair Defenses: Disable or Modify Tools
· File and Directory Discovery
MITRE ATT&CK techniques attributed to Braincipher overall — not a finding about how this organisation was reached.
September 23, 2026 at 7:01 PM
🧭 How Braincipher is documented to operate
· User Execution
· Indicator Removal: File Deletion
· Impair Defenses: Disable or Modify Tools
· File and Directory Discovery
MITRE ATT&CK techniques attributed to Braincipher overall — not a finding about how this organisation was reached.
· User Execution
· Indicator Removal: File Deletion
· Impair Defenses: Disable or Modify Tools
· File and Directory Discovery
MITRE ATT&CK techniques attributed to Braincipher overall — not a finding about how this organisation was reached.
🚨New ransom group blog post!🚨
Group name: braincipher
Post title: cdom.org
#ransomware#cti#threatintelligence#cybersecurity#infosec
Group name: braincipher
Post title: cdom.org
#ransomware#cti#threatintelligence#cybersecurity#infosec
October 20, 2025 at 6:46 PM
🚨New ransom group blog post!🚨
Group name: braincipher
Post title: cdom.org
#ransomware#cti#threatintelligence#cybersecurity#infosec
Group name: braincipher
Post title: cdom.org
#ransomware#cti#threatintelligence#cybersecurity#infosec
BrainCipher Drops a Ransom Note While Bureaucracy Still Searches for the Fax
PANIC 72% | Lag 0.17h | GrayZone is reporting a BrainCipher ransom note tied to WINDIAM_COM_ON_backup_2026_07_18_220022_3321
#AfterShockIndex
READ MORE
PANIC 72% | Lag 0.17h | GrayZone is reporting a BrainCipher ransom note tied to WINDIAM_COM_ON_backup_2026_07_18_220022_3321
#AfterShockIndex
READ MORE
September 22, 2026 at 7:48 AM
BrainCipher Drops a Ransom Note While Bureaucracy Still Searches for the Fax
PANIC 72% | Lag 0.17h | GrayZone is reporting a BrainCipher ransom note tied to WINDIAM_COM_ON_backup_2026_07_18_220022_3321
#AfterShockIndex
READ MORE
PANIC 72% | Lag 0.17h | GrayZone is reporting a BrainCipher ransom note tied to WINDIAM_COM_ON_backup_2026_07_18_220022_3321
#AfterShockIndex
READ MORE
BrainCipher reportedly hit Goldstarfinancial.com in a ransomware incident, disrupting a US financial services victim and raising data and availability risks. #UnitedStates #Ransomware #FinancialServices
One moment, please...
www.hendryadrian.com
September 23, 2026 at 10:00 PM
BrainCipher reportedly hit Goldstarfinancial.com in a ransomware incident, disrupting a US financial services victim and raising data and availability risks. #UnitedStates #Ransomware #FinancialServices
New claim on the shame-site for #ransomware / #datatheft group #BrainCipher.
Organization: Gold Star Mortgage Financial Group, Corp.
Location: #UnitedStates
Industry: #Banking
Staff: 501-1,000 employees
Learn more: https://ecrime.ch/
Organization: Gold Star Mortgage Financial Group, Corp.
Location: #UnitedStates
Industry: #Banking
Staff: 501-1,000 employees
Learn more: https://ecrime.ch/
September 23, 2026 at 7:00 PM
New claim on the shame-site for #ransomware / #datatheft group #BrainCipher.
Organization: Gold Star Mortgage Financial Group, Corp.
Location: #UnitedStates
Industry: #Banking
Staff: 501-1,000 employees
Learn more: https://ecrime.ch/
Organization: Gold Star Mortgage Financial Group, Corp.
Location: #UnitedStates
Industry: #Banking
Staff: 501-1,000 employees
Learn more: https://ecrime.ch/
Rhode Island Governor Dan McKee said the BrainCipher ransomware, which hacked state systems last November, had actually breached the state five months earlier in July, silently rummaging around and stealing its data for months
governor.ri.gov/press-releas...
governor.ri.gov/press-releas...
May 17, 2025 at 9:25 AM
Rhode Island Governor Dan McKee said the BrainCipher ransomware, which hacked state systems last November, had actually breached the state five months earlier in July, silently rummaging around and stealing its data for months
governor.ri.gov/press-releas...
governor.ri.gov/press-releas...
🚨New ransom group blog post!🚨
Group name: BrainCipher
Post title: windiam_net_ON_OpenStock.BAK
#ransomware #cti #threatintelligence #cybersecurity #infosec
Group name: BrainCipher
Post title: windiam_net_ON_OpenStock.BAK
#ransomware #cti #threatintelligence #cybersecurity #infosec
September 22, 2026 at 1:09 AM
🚨New ransom group blog post!🚨
Group name: BrainCipher
Post title: windiam_net_ON_OpenStock.BAK
#ransomware #cti #threatintelligence #cybersecurity #infosec
Group name: BrainCipher
Post title: windiam_net_ON_OpenStock.BAK
#ransomware #cti #threatintelligence #cybersecurity #infosec
🚨New ransom group blog post!🚨
Group name: BrainCipher
Post title: FANTASY_SRV.zip
#ransomware #cti #threatintelligence #cybersecurity #infosec
Group name: BrainCipher
Post title: FANTASY_SRV.zip
#ransomware #cti #threatintelligence #cybersecurity #infosec
September 22, 2026 at 1:09 AM
🚨New ransom group blog post!🚨
Group name: BrainCipher
Post title: FANTASY_SRV.zip
#ransomware #cti #threatintelligence #cybersecurity #infosec
Group name: BrainCipher
Post title: FANTASY_SRV.zip
#ransomware #cti #threatintelligence #cybersecurity #infosec
🚨New ransom group blog post!🚨
Group name: BrainCipher
Post title: Desktop.david.zip
#ransomware #cti #threatintelligence #cybersecurity #infosec
Group name: BrainCipher
Post title: Desktop.david.zip
#ransomware #cti #threatintelligence #cybersecurity #infosec
September 22, 2026 at 1:09 AM
🚨New ransom group blog post!🚨
Group name: BrainCipher
Post title: Desktop.david.zip
#ransomware #cti #threatintelligence #cybersecurity #infosec
Group name: BrainCipher
Post title: Desktop.david.zip
#ransomware #cti #threatintelligence #cybersecurity #infosec
🚨New ransom group blog post!🚨
Group name: BrainCipher
Post title: Com_ON_20052025BF4Restore.BAK
#ransomware #cti #threatintelligence #cybersecurity #infosec
Group name: BrainCipher
Post title: Com_ON_20052025BF4Restore.BAK
#ransomware #cti #threatintelligence #cybersecurity #infosec
September 22, 2026 at 1:09 AM
🚨New ransom group blog post!🚨
Group name: BrainCipher
Post title: Com_ON_20052025BF4Restore.BAK
#ransomware #cti #threatintelligence #cybersecurity #infosec
Group name: BrainCipher
Post title: Com_ON_20052025BF4Restore.BAK
#ransomware #cti #threatintelligence #cybersecurity #infosec
🚨New ransom group blog post!🚨
Group name: BrainCipher
Post title: COMPANY.zip
#ransomware #cti #threatintelligence #cybersecurity #infosec
Group name: BrainCipher
Post title: COMPANY.zip
#ransomware #cti #threatintelligence #cybersecurity #infosec
September 22, 2026 at 1:09 AM
🚨New ransom group blog post!🚨
Group name: BrainCipher
Post title: COMPANY.zip
#ransomware #cti #threatintelligence #cybersecurity #infosec
Group name: BrainCipher
Post title: COMPANY.zip
#ransomware #cti #threatintelligence #cybersecurity #infosec
🚨New ransom group blog post!🚨
Group name: BrainCipher
Post title: BeforeDocSync.BAK
#ransomware #cti #threatintelligence #cybersecurity #infosec
Group name: BrainCipher
Post title: BeforeDocSync.BAK
#ransomware #cti #threatintelligence #cybersecurity #infosec
September 22, 2026 at 1:09 AM
🚨New ransom group blog post!🚨
Group name: BrainCipher
Post title: BeforeDocSync.BAK
#ransomware #cti #threatintelligence #cybersecurity #infosec
Group name: BrainCipher
Post title: BeforeDocSync.BAK
#ransomware #cti #threatintelligence #cybersecurity #infosec
New claim on the shame-site for #ransomware / #datatheft group #BrainCipher.
Organization: FSB Group Ltd.
Location: #Canada
Industry: #Insurance
Staff: 51-200 employees
Learn more: https://ecrime.ch/
Organization: FSB Group Ltd.
Location: #Canada
Industry: #Insurance
Staff: 51-200 employees
Learn more: https://ecrime.ch/
October 30, 2025 at 6:40 AM
New claim on the shame-site for #ransomware / #datatheft group #BrainCipher.
Organization: FSB Group Ltd.
Location: #Canada
Industry: #Insurance
Staff: 51-200 employees
Learn more: https://ecrime.ch/
Organization: FSB Group Ltd.
Location: #Canada
Industry: #Insurance
Staff: 51-200 employees
Learn more: https://ecrime.ch/
🚨New ransom group blog post!🚨
Group name: BrainCipher
Post title: rst.zip
#ransomware #cti #threatintelligence #cybersecurity #infosec
Group name: BrainCipher
Post title: rst.zip
#ransomware #cti #threatintelligence #cybersecurity #infosec
September 22, 2026 at 1:09 AM
🚨New ransom group blog post!🚨
Group name: BrainCipher
Post title: rst.zip
#ransomware #cti #threatintelligence #cybersecurity #infosec
Group name: BrainCipher
Post title: rst.zip
#ransomware #cti #threatintelligence #cybersecurity #infosec
🚨New ransom group blog post!🚨
Group name: BrainCipher
Post title: WEX.zip
#ransomware #cti #threatintelligence #cybersecurity #infosec
Group name: BrainCipher
Post title: WEX.zip
#ransomware #cti #threatintelligence #cybersecurity #infosec
September 22, 2026 at 1:09 AM
🚨New ransom group blog post!🚨
Group name: BrainCipher
Post title: WEX.zip
#ransomware #cti #threatintelligence #cybersecurity #infosec
Group name: BrainCipher
Post title: WEX.zip
#ransomware #cti #threatintelligence #cybersecurity #infosec
🚨New ransom group blog post!🚨
Group name: BrainCipher
Post title: Windiam_ACC_OFF_backup_2019_05_02_220006_8273415.bak
#ransomware #cti #threatintelligence #cybersecurity #infosec
Group name: BrainCipher
Post title: Windiam_ACC_OFF_backup_2019_05_02_220006_8273415.bak
#ransomware #cti #threatintelligence #cybersecurity #infosec
September 22, 2026 at 1:09 AM
🚨New ransom group blog post!🚨
Group name: BrainCipher
Post title: Windiam_ACC_OFF_backup_2019_05_02_220006_8273415.bak
#ransomware #cti #threatintelligence #cybersecurity #infosec
Group name: BrainCipher
Post title: Windiam_ACC_OFF_backup_2019_05_02_220006_8273415.bak
#ransomware #cti #threatintelligence #cybersecurity #infosec
🚨New ransom group blog post!🚨
Group name: BrainCipher
Post title: WINDIAM_COM_ON_backup_2026_07_18_220022_3321457.bak
#ransomware #cti #threatintelligence #cybersecurity #infosec
Group name: BrainCipher
Post title: WINDIAM_COM_ON_backup_2026_07_18_220022_3321457.bak
#ransomware #cti #threatintelligence #cybersecurity #infosec
September 22, 2026 at 1:09 AM
🚨New ransom group blog post!🚨
Group name: BrainCipher
Post title: WINDIAM_COM_ON_backup_2026_07_18_220022_3321457.bak
#ransomware #cti #threatintelligence #cybersecurity #infosec
Group name: BrainCipher
Post title: WINDIAM_COM_ON_backup_2026_07_18_220022_3321457.bak
#ransomware #cti #threatintelligence #cybersecurity #infosec
🚨New ransom group blog post!🚨
Group name: BrainCipher
Post title: Windiam_to_clean.BAK
#ransomware #cti #threatintelligence #cybersecurity #infosec
Group name: BrainCipher
Post title: Windiam_to_clean.BAK
#ransomware #cti #threatintelligence #cybersecurity #infosec
September 22, 2026 at 1:09 AM
🚨New ransom group blog post!🚨
Group name: BrainCipher
Post title: Windiam_to_clean.BAK
#ransomware #cti #threatintelligence #cybersecurity #infosec
Group name: BrainCipher
Post title: Windiam_to_clean.BAK
#ransomware #cti #threatintelligence #cybersecurity #infosec
🚨New ransom group blog post!🚨
Group name: BrainCipher
Post title: Windiam_ACC_OFF.BAK
#ransomware #cti #threatintelligence #cybersecurity #infosec
Group name: BrainCipher
Post title: Windiam_ACC_OFF.BAK
#ransomware #cti #threatintelligence #cybersecurity #infosec
September 22, 2026 at 1:09 AM
🚨New ransom group blog post!🚨
Group name: BrainCipher
Post title: Windiam_ACC_OFF.BAK
#ransomware #cti #threatintelligence #cybersecurity #infosec
Group name: BrainCipher
Post title: Windiam_ACC_OFF.BAK
#ransomware #cti #threatintelligence #cybersecurity #infosec
🚨New ransom group blog post!🚨
Group name: BrainCipher
Post title: IGI_Lab_Results.BAK
#ransomware #cti #threatintelligence #cybersecurity #infosec
Group name: BrainCipher
Post title: IGI_Lab_Results.BAK
#ransomware #cti #threatintelligence #cybersecurity #infosec
September 22, 2026 at 1:09 AM
🚨New ransom group blog post!🚨
Group name: BrainCipher
Post title: IGI_Lab_Results.BAK
#ransomware #cti #threatintelligence #cybersecurity #infosec
Group name: BrainCipher
Post title: IGI_Lab_Results.BAK
#ransomware #cti #threatintelligence #cybersecurity #infosec
🚨New ransom group blog post!🚨
Group name: BrainCipher
Post title: HRD_Lab_Results.BAK
#ransomware #cti #threatintelligence #cybersecurity #infosec
Group name: BrainCipher
Post title: HRD_Lab_Results.BAK
#ransomware #cti #threatintelligence #cybersecurity #infosec
September 22, 2026 at 1:09 AM
🚨New ransom group blog post!🚨
Group name: BrainCipher
Post title: HRD_Lab_Results.BAK
#ransomware #cti #threatintelligence #cybersecurity #infosec
Group name: BrainCipher
Post title: HRD_Lab_Results.BAK
#ransomware #cti #threatintelligence #cybersecurity #infosec
🚨New ransom group blog post!🚨
Group name: BrainCipher
Post title: DATA.zip
#ransomware #cti #threatintelligence #cybersecurity #infosec
Group name: BrainCipher
Post title: DATA.zip
#ransomware #cti #threatintelligence #cybersecurity #infosec
September 22, 2026 at 1:09 AM
🚨New ransom group blog post!🚨
Group name: BrainCipher
Post title: DATA.zip
#ransomware #cti #threatintelligence #cybersecurity #infosec
Group name: BrainCipher
Post title: DATA.zip
#ransomware #cti #threatintelligence #cybersecurity #infosec