global
Aliases: GLOBAL GROUP
- Malware type
- trojan
- Family
- Malware family
- Last IoC activity
- 2026-07-22 02:36:16
- Profile updated
- 2026-07-07 13:59:09
Targeted industries: government-and-public-sector technology-and-telecommunications
Context
Global is a cyber threat group sometimes associated with the alias GLOBAL GROUP. It is not currently used as a Ransomware-as-a-Service (RaaS).
Detection coverage
- 1 YARA rules
Used by threat actors
- Cutting Edge (campaign)
- Operation Sharpshooter (campaign)
Detection rules
- MALPEDIA_Win_Global_Auto (yara-rule)
Reports & references
- ransomlook.io — Global (report)
- blog.eclecticiq.com — Global Group Emerging Ransomware As A Service (report)
- cybersecurity-magazine.com — Ransomware Ai Chatbot Pressure (report)
- infosecurity-magazine.com — Ransomware Group Uses Ai Chatbot (report)
- Broadcom/Symantec — Global A New Blacklock Ransomware Variant (report)
- picussecurity.com — Tracking Global Group Ransomware From Mamona To Market Scale (report)
- cyware.com — Global Group Ransomware Claims Breach Of Media Giant Albavision (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Global (report)
- morado.io — Global Ransomware New Tactics Revealed (report)
- t0asts.com — Global Ransomware (report)