Bravox
| Active | RaaS
BravoX is a selective ransomware-as-a-service operation that surfaced publicly in January 2026 after advertising on the RAMP underground forum, targeting primarily US-based organizations in healthcare and retail while applying strict affiliate vetting requirements including proof of access or a financial deposit.
Victims
13
First Discovered
2026-02-11
victim
Last Discovered
2026-05-12
victim
Inactive Since
1
day
Avg Delay
164.5
days
Infostealer
0.0%
victims with domain
Countries
7
hit
Attack Velocity — Last 12 months
Stable vs last month
Known Locations (2)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | |
|---|---|---|---|---|---|---|---|
|
Verification Required | Yes | 2026-05-13T12:11:39 |
bravoxxtrmqeeevhl7gdh2yzvlrjxajr66d33c7ozosrccx4cz7cepad.onion
|
|||
|
Verification Required | Yes | 2026-05-13T12:12:13 |
bravoxxwcfz5qk43ychgveprpd5mw5hvxfs4a2uz2okx7mumiht4fzyd.onion
|
Target
Top 5 Activity Sectors
- Business Services 4
- Healthcare 3
- Financial Services 2
- Technology 1
- Agriculture and Food Production 1
Top 5 Countries
-
United States
4
-
France
3
-
Switzerland
2
-
Mexico
1
-
Germany
1
Heatmap
YARA Rules (1)
Victims (13)
Rivadeneyra Treviño provides expert corporate legal advice, specializing in regulatory law, contract…
The company provides training and audits to improve quality and ensure compliance with standards.…
The company provides tax optimization consulting for individuals, businesses, and public organizatio…
Professional organization representing and regulating the activities of chartered accountants.…
An international law firm providing comprehensive legal services to corporate and private clients in…