Global
Parent: blacklock| RaaS
GLOBAL GROUP is a ransomware-as-a-service operation that emerged in June 2025, reportedly launched by a known Russian-speaking threat actor, featuring AI-driven ransom negotiation and a mobile control panel for affiliates, targeting healthcare, oil and gas, industrial engineering, and automotive sectors.
Victims
32
First Discovered
2025-06-04
victim
Last Discovered
2025-08-20
victim
Inactive Since
271
days
Avg Delay
4.3
days
Infostealer
7.4%
victims with domain
Countries
17
hit
Attack Velocity — Last 12 months
Known Locations (2)
| Favicon | Title | Type | Available | Last Visit | Server Info | FQDN | |
|---|---|---|---|---|---|---|---|
|
GLOBAL | Blog | No | 2026-04-28T07:23:58 |
vg6xwkmfyirv3l6qtqus7jykcuvgx6imegb73hqny2avxccnmqt5m2id.onion
|
|||
|
GLOBAL | Client Portal | No | 2026-04-28T07:26:34 |
gdbkvfe6g3whrzkdlbytksygk45zwgmnzh5i2xmqyo3mrpipysjagqyd.onion
|
Target
Top 5 Activity Sectors
- Healthcare 9
- Manufacturing 5
- Technology 3
- Telecommunication 2
- Business Services 2
Top 5 Countries
-
United States
5
-
Australia
4
-
Brazil
2
-
Mexico
2
-
Italy
2
Heatmap
Ransom Notes (1)
YARA Rules (1)
Indicators of Compromise (IoCs) (1)
session
1
| Type | IOC |
|---|---|
session
|
0532b290d16a48f8f81dc1a41c0840145aede477af674c56e6599507aa7f27933c
|
Victims (32)
AW Medical Village
A lot of private information about patients. Diagnoses, addresses, phone numbers…
Hospital Maternidade São José
1TB of private patient information. Personal details and more.…
RUKU Tore + Türen GmbH Ein junges, modernes Unternehmen mit langer Tradition Unser Name RUKU steht s…
Albavisión is a major Latin American media company founded by Remigio Ángel González. Headquartered …
CYM Servicios Médicos - a Mexican‑based medical services clinic, offering general and specialist con…
The travel agency formerly known as Diethelm Travel, now operating as DTH Travel, is a destination m…
Geomatics (also stylized Geomaticks) is a Greek company headquartered in Athens with over 20 years o…
a healthcare facility offering a range of aesthetic and wellness treatments, such as facial procedur…
Rete Toscana Classica (RTC) is an Italian classical music radio station broadcasting 24/7 across Tus…
An Italian company specializing in maintenance, optimization, and eco-efficient upgrades of kilns an…
Rosewood Farm, located in Sugar Grove, Illinois, was established in 2019 by Julie, who is dedicated …
Morpeth Pharmacy, officially known as Wellway Pharmacy Limited, is located at The Surgery, Wellway, …
Skyline Dubuque, also known as Skyline Salt Solutions, is a family-owned business based in Dubuque, …
With our 20 years of knowledge and expertise; We promise not only a quality product, but more..
We o…
Established since 2014, Financial Services, Business Tax Preparation, Nationwide Services, Articles …
ERSONAL SERVICE is one of the leading service providers in Brazil, operating in the areas of Facilit…
Deakin Medical Centre is a family-centered medical practice dedicated to providing high-quality heal…
AD Engineering is a leading provider of innovative solutions for the packaging industry, specializin…
Ascot Vale Health Group is a comprehensive healthcare provider located in Ascot Vale, Victoria, Aust…
L&S Proline is a Texas-based company providing turnkey equipment and fabrication solutions for the o…
Epworth HealthCare is a leading not-for-profit private hospital group in Victoria, Australia, known …
Motor World ARC is a UK-based company specializing in vehicle repairs and automotive services, offer…