global
RansomwareAbout the group
GLOBAL GROUP is a ransomware-as-a-service operation that emerged in June 2025, reportedly launched by a known Russian-speaking threat actor, featuring AI-driven ransom negotiation and a mobile control panel for affiliates, targeting healthcare, oil and gas, industrial engineering, and automotive sectors.
Exploited vulnerabilities
No CVEs attributed to this group in public sources (MITRE ATT&CK). Absence of attribution does not mean absence of activity.
Impact and victims
The group global has 2 known ransomware victims. See the most affected sectors and countries and recent victims.
2known victims
2in Brazil
2sectors hit
Most attacked sectors
Healthcare1
Professional Services1
Most affected countries
🇧🇷 Brasil2
Recent victims
hmsaojose.com
https://www.personalservice.com.br/
global uses real techniques and exploits real flaws. TrueHacking's AI Autonomous Pentest simulates these attacks against your infrastructure and brings more security to your application.
Explore the AI Autonomous Pentest →