Cofense iconCofenseSep 22, 2026

From Payment Plan to Ransomware - Inside a Global Group Attack

Center (PDC) team has recently investigated a newly emerged Ransomware-as-a-Service (RaaS) operation organized by the Global Group, a financially motivated cybercriminal group running a Ransomware-as-a-Service (RaaS) platform. Targeting high-value, large-scale enterprises across different industries, escalating threats to the global digital economy.

From Payment Plan to Ransomware - Inside a Global Group Attack

Share this story

Send the public story page.

Useful takeaways from this story.

Center (PDC) team has recently investigated a newly emerged Ransomware-as-a-Service (RaaS) operation organized by the Global Group, a financially motivated cybercriminal group running a...

Targeting high-value, large-scale enterprises across different industries, escalating threats to the global digital economy.

Global Group is a rebranding of the legacy Black Lock and Mamona ransomware families by inheriting an established backend infrastructure, reusing core code artifacts, and launching an immediately scalable...

Building the complete brief

The page is ready to read now. The fuller skim-friendly version will appear here automatically.

The useful part

Center (PDC) team has recently investigated a newly emerged Ransomware-as-a-Service (RaaS) operation organized by the Global Group, a financially motivated cybercriminal group running a Ransomware-as-a-Service (RaaS) platform. Targeting high-value, large-scale enterprises across different industries, escalating threats to the global digital economy. Global Group is a rebranding of the legacy Black Lock and Mamona ransomware families by inheriting an established backend infrastructure, reusing core code artifacts, and launching an immediately scalable extortion enterprise.

Keep reading in the app

Open the app view to save this story, compare related coverage, and continue from the same source.

Open in app