Ransomware Rumble: GLOBAL GROUP Joins the Cybercrime Circus with AI-Powered Negotiations!
GLOBAL GROUP is the latest ransomware-as-a-service operation making headlines, targeting sectors worldwide since June 2025. It’s a rebrand of BlackLock, using AI-driven chatbots to negotiate ransoms. With a lucrative revenue-sharing model, this operation is all about modernizing crime with tech-savvy finesse, proving that even ransomware needs a fresh coat of paint.
Hot Take:
Ah, ransomware-as-a-service: the gig economy’s evil twin. Just when you thought Uber was the only one offering ride-sharing, here comes GLOBAL GROUP with a new way to share your life’s work with a group of hackers. Maybe we can all just agree that this revenue-sharing model has gone a bit too far? It’s like a bad sequel nobody wanted, yet here we are, starring in “Ransomware 3: The Rebrand Strikes Back.”
Key Points:
- GLOBAL GROUP is a new RaaS operation targeting multiple sectors globally since June 2025.
- GLOBAL GROUP is believed to be a rebranding of BlackLock, which itself was a rebrand of Eldorado.
- The group uses initial access brokers to infiltrate networks, focusing on payload delivery and extortion.
- It boasts an AI-powered negotiation portal and offers up to 85% revenue sharing to affiliates.
- The ransomware targets sectors like healthcare, oil-and-gas, and business process outsourcing.