The Adviser: Exclusive: Victorian regional newspaper allegedly hacked ransomware group

Brain Cipher Ransomware Group Targets Australian Media Outlet The Adviser

The Brain Cipher ransomware group has claimed responsibility for a cyberattack on The Adviser, a regional newspaper and media outlet based in Shepparton, Victoria. On May 21, the hackers posted on their darknet leak site, alleging they had exfiltrated over 350GB of data from the outlet and set a ransom deadline of June 2 for its release. No evidence of the breach such as documents or screenshots was provided, and the group did not disclose its ransom demand.

The Adviser, founded in 1984, serves the Goulburn and Murray Valleys with a print and digital news platform, reaching approximately 60,000 readers. The outlet has not publicly acknowledged the incident, and its website currently lacks any security notice regarding the alleged attack.

Brain Cipher, first observed in 2024, has claimed 56 victims to date, primarily in North America and Europe. The group’s tactics include exploiting the Microsoft Windows CLFS Driver Privilege Escalation Vulnerability (CVE-2023-28252) and deploying a variant of the LockBit ransomware. Ransom demands typically range from US$150,000 to US$1,000,000, payable in Monero cryptocurrency. The attack on The Adviser marks the group’s first known victim in Australia.

Source: https://www.cyberdaily.au/security/13640-exclusive-victorian-regional-newspaper-alleged-hacked-ransomware-group

The Adviser Magazine cybersecurity rating report: https://www.rankiteo.com/company/the-adviser-magazine

"id": "THE1779675839",
"linkid": "the-adviser-magazine",
"type": "Ransomware",
"date": "5/2026",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"

{'affected_entities': [{'customers_affected': 'Approximately 60,000 readers',
                        'industry': 'Media/News',
                        'location': 'Shepparton, Victoria, Australia',
                        'name': 'The Adviser',
                        'type': 'Media Outlet'}],
 'attack_vector': 'Exploitation of Microsoft Windows CLFS Driver Privilege '
                  'Escalation Vulnerability (CVE-2023-28252)',
 'data_breach': {'data_exfiltration': '350GB of data allegedly exfiltrated'},
 'date_publicly_disclosed': '2024-05-21',
 'description': 'The Brain Cipher ransomware group claimed responsibility for '
                'a cyberattack on *The Adviser*, a regional newspaper and '
                'media outlet based in Shepparton, Victoria. The hackers '
                'alleged they exfiltrated over 350GB of data and set a ransom '
                'deadline of June 2 for its release. No evidence of the breach '
                'was provided, and the ransom demand was not disclosed.',
 'impact': {'data_compromised': '350GB of data allegedly exfiltrated'},
 'ransomware': {'data_exfiltration': '350GB of data allegedly exfiltrated',
                'ransomware_strain': 'LockBit variant'},
 'references': [{'date_accessed': '2024-05-21',
                 'source': 'Brain Cipher darknet leak site'}],
 'threat_actor': 'Brain Cipher ransomware group',
 'title': 'Brain Cipher Ransomware Attack on The Adviser',
 'type': 'Ransomware',
 'vulnerability_exploited': 'CVE-2023-28252'}