Skip to content
MalwareWiki

Malware

Global

aka GLOBAL GROUP

The GLOBAL GROUP is a Ransomware-as-a-Service program which emerged in June 2025.

Global, also known as GLOBAL GROUP, is a Windows malware family.

Background

GLOBAL GROUP is a Ransomware-as-a-Service operation that appeared in June 2025. Shared code and infrastructure have led researchers to suspect links to BlackLock and Mamona. Its negotiation portal includes AI-assisted negotiation features designed to help operators interact with victims.

Source: Malpedia (Fraunhofer FKIE).