Skip to content
RansomwareFinancialLow sophistication · Unknown

CiphBit

CiphBit is a ransomware group with a financial motive, tracked by Brandefense. It targets 12 sectors, including Technology and Manufacturing, in 16 countries, including the United States and the United Kingdom.

Techniques
0
Exploited CVEs
No CVE data
First seen
Apr 1, 2023
Last seen
Oct 28, 2025
Record updated

Who They Target.

Labelsciphbitdouble-extortionneeds-source-validationransomware

About CiphBit.

CiphBit is a ransomware-as-a-service group active since April 2023, targeting small-to-mid-sized businesses across the UK, Europe, and North America with 38 known victims, employing a data-broker model with selective free leaks to pressure victims alongside standard double extortion.

Last updated Oct 1, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.