Brain Cipher Ransomware Group Targets Australian Media Outlet The Adviser The Brain Cipher ransomware group has claimed responsibility for a cyberattack on The Adviser, a regional newspaper and media outlet based in Shepparton, Victoria. On May 21, the hackers posted on their darknet leak site, alleging they had exfiltrated over 350GB of data from the outlet and set a ransom deadline of June 2 for its release. No evidence of the breach such as documents or screenshots was provided, and the group did not disclose its ransom demand. The Adviser, founded in 1984, serves the Goulburn and Murray Valleys with a print and digital news platform, reaching approximately 60,000 readers. The outlet has not publicly acknowledged the incident, and its website currently lacks any security notice regarding the alleged attack. Brain Cipher, first observed in 2024, has claimed 56 victims to date, primarily in North America and Europe. The group’s tactics include exploiting the Microsoft Windows CLFS Driver Privilege Escalation Vulnerability (CVE-2023-28252) and deploying a variant of the LockBit ransomware. Ransom demands typically range from US$150,000 to US$1,000,000, payable in Monero cryptocurrency. The attack on The Adviser marks the group’s first known victim in Australia.