Globe3 Ransomware
Aliases: Purge Ransomware
- First seen
- 2017-01-01 00:00:00
- Malware type
- ransomware
- Family
- Malware family
- Profile updated
- 2026-07-07 13:27:15
Context
It’s directed to English speaking users, therefore is able to infect worldwide. It is spread using email spam, fake updates, attachments and so on. It encrypts all your files, including: music, MS Office, Open Office, pictures, videos, shared online files etc.. Ransom is 3 bitcoins. Extesion depends on the config file. It seems Globe is a ransomware kit.
Detection coverage
- 2 YARA rules
Detection rules
- DITEKSHEN_MALWARE_Win_Purge (yara-rule)
- DITEKSHEN_INDICATOR_KB_ID_Ransomware_Purge (yara-rule)
Related threat objects
- Globe2 Ransomware (malware)
Reports & references
- id-ransomware.blogspot.co.il — Globe3 Ransomware (report)
- bleepingcomputer.com — Globe Ransomware Help And Support Purge Extension How To Restore Fileshta (report)
- bleepingcomputer.com — The Globe Ransomware Wants To Purge Your Files (report)
- decryptors.blogspot.co.il — Globe3 Decrypter (report)
- decrypter.emsisoft.com — Globe3 (report)