Group profile
bravox
BravoX is a selective ransomware-as-a-service operation that surfaced publicly in January 2026 after advertising on the RAMP underground forum, targeting primarily US-based organizations in healthcare and retail while applying strict affiliate vetting requirements including proof of access or a financial deposit.
Sectors hit
- Technology
- Other
- Healthcare
- Retail & E-Commerce
- Unspecified
- Manufacturing
- Financial Services
- Energy & Utilities
Countries hit