Bravox
Bravox is a ransomware group with a financial motive, tracked by Brandefense. It targets 11 sectors, including Government and Technology, in 10 countries, including the United States and the United Kingdom. It uses 19 MITRE ATT&CK techniques.
- Techniques
- 19
- Exploited CVEs
- No CVE data
- First seen
- Feb 11, 2026
- Last seen
- Sep 1, 2026
- Record updated
Who They Target.
Sectors · 11
Labelsbdef-qf:latest
About Bravox.
BravoX is a selective ransomware-as-a-service operation that surfaced publicly in January 2026 after advertising on the RAMP underground forum, targeting primarily US-based organizations in healthcare and retail while applying strict affiliate vetting requirements including proof of access or a financial deposit.
Last updated Sep 22, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.