Brotherhood
Brotherhood is a ransomware group that emerged in late 2025, targeting organizations in the US, Canada, and Australia across manufacturing, communications, and construction sectors, operating a Tor-based double-extortion leak site.
Victims
18
First Victim
2025-04-04
(est. attack date)
Discovery Date
2025-10-10
Last Seen
2026-01-06
Inactive Since
232
days
Avg Delay
189
days
Infostealer
38.9%
victims with domain
Countries
8
hit
Uptime
0.0% avg (30d)
Attack Velocity — Last 12 months (based on attack estimated date if available)
Known Locations (1)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | Status | |
|---|---|---|---|---|---|---|---|---|
|
BrotherHood | No | 2026-08-22T08:50:03 |
brohoodyaifh2ptccph5zfljyajjabwjjo4lg6gfp4xb6ynw5w7ml6id.onion
|
Target
Top 5 Activity Sectors
- Professional Services 7
- Manufacturing 2
- Government & Defense 2
- Technology 2
- Agriculture and Food Production 1
Top 5 Countries
-
United States
7
-
Australia
3
-
Germany
2
-
Canada
2
-
Italy
1
Heatmap
YARA Rules (1)
Victims (18)
Contains: 6 Gb Compressed Free Files, 470 Gb Compressed Paid Files, E-mails…
Contains: 1 Gb Compressed Free Files, 26 Gb Compressed Paid Files…
Contains: 4 Gb compressed Free Files + 33 Gb compressed Paid Files, Database…
[AI generated] Nina's Jewellery is a family-owned jewelry business with over 30 years of experience …
