Latest Research on INC and The Gentlemen Ransomware: Exposed AI Infrastructure
Global Group Ransomware Group
Ransomware group profile
4Victims
RussiaSource country
64Impact score
Also Known As
global ransomware
Description
Global Group is a newly emerged Ransomware-as-a-Service operation believed to be a rebranding of the BlackLock/Mamona ecosystem. They offer innovative features like AI-powered negotiation systems and an affiliate revenue share model. The group is linked to Russian infrastructure and deploys sophisticated tactics to infiltrate targets.
Key insights
- •Employs AI-driven negotiation tools for ransom discussions.
- •Utilizes a double extortion model, leveraging both data encryption and data leaks.
- •Targets various sectors, including healthcare, education, and manufacturing.
- •Relies on Initial Access Brokers for pre-compromised entry points.
- •Uses Golang, C++, and C to build cross-platform ransomware.
- •Known for aggressive negotiation tactics, including threats of public data exposure.
Threat Level & Status Breakdown
For Global Group · Based on incidents in selected period
1.6threat level
Aggressiveness1/ 10
Lethality0/ 10
Criticality4.2/ 10
Status Breakdown
Claimed100.0%4
First seenAug 2026
Last seenAug 2026
Avg ransom—
Payment rate—
Statusactive
Sophistication0
Last updatedOct 27, 2026
Recent activity
Monthly attack count for Global Group in the selected period
4Total attacks
4peak in Aug
4avg / month
Intelligence
IOCs, YARA/Sigma rules, and related families for Global Group
- c5f49c0f566a114b529138f8bd222865c9fa9fa95f96ec1ded50700764a1d4e7
- 2a0ec79f3d0d2f2996a9c5263a112197
- b4315d71fb374e4d6b12b7b3c412b027f2d5c231
- 1f6640102f6472523830d69630def669dc3433bbb1c0e6183458bd792d420f8e
- 13b82f4ac62faf87a105be355c82bacfcbdd383050860dfa93dfbb7bb2e6c9ba
- ca979fad68362cd3d9ad24424d5ac3fd
- c7b91de4b4b10c22f2e3bca1e2603160588fd8fd829fd46103cf536b6082e310
- 0fc658c1c4f3570122f29465b3e0bfa0
- 16bc5adc4f46cdf7c4852d17ebf9f499
- 2e339540ab604bb0b317fab1e61c99e44c09ce32
- 28f3de066878cb710fe5d44f7e11f65f25328beff953e00587ffeb5ac4b2faa8
- 232f86e26ced211630957baffcd36dd3bcd6a786f3d307127e1ea9a8b31c199f
- 16f43a742a66734fea50d53a2dfdcdbe2e3afc00
- 70a4afab44d6a9ecd7f42ab77972be074dec8383a47a2011eb0133a230a4fae3
- 8bf379efd813e2b19e3c0abf2dc08f05
- 74c021250ef2c027deb141d8f8b35329de082209
- 55f3a2d89485bb40ea45e5fa1f24828f71a81ef4ccc541b6657fc7a861ef3add
- 8d27d8674a0c2a7477fb09a57362c582c2b10a3c843892b7361a81bca1c97be0
- 9fb468a79f88d9a250180749bfae97d4f310c8510f1f98cae359d95c2a62b4af
- 20417846820741fa84c4571affb40e9c
- 5e4f717e10444a48aab382157882725c97555b112c41621866c723cbf2afea8d
- 89a69aa7f578090943568afe6ee684554a416903e97a7d206a6e4bf609069b83
- 64388cdbfe48dcff05eaa455892bcb3bfcaa3d43559eb7c65f6ac772810be61e
- 1e2c4cd35987ee217994149675784f9f
- 997cf28771fde81c6bfc067eed1f19d0ad3554342d63d9469d3adcdc1ca0ff31
- 5dee17e91f79be742881324bcdf139a5
- 00f70ae018e71f51060346aaa101209c24e34697bbfafec6b3612db8d8127cb2
- 9db4b94589728b68d51bf83a90211cfe
- d5004e079cb46db15a7d0b7ecebfa47bb8a1bc19e25749849a017b2a36705260
- 2abd445d3d60fd207b2c62bb0da3a42b
- bee880fc0dbaf65625bacd81140945ea41d50cb24ca46bd22a8561492a55a5f8
- 1810ff0602bdf47aedbbdaafee7a08ac62aa851f83e8e7cf37697ce3ec9ea51b
- 0a6b7d2574b2eb2bccea82c2aaec72a48c08da9c40ab5e5126d375a18f50b2a5
- 728a55194bb2c5b59a458338f6d9ddc9f4299fd9513dc979ad24a845866370d1
- 3d284d575b7840de4d5f30eef98297c847ce7380453cd103560089700dc61e6b
- 8c4ba3a8eb45d1f9fdffdc7e1ca5f8de2939ed00edac2c735b49ccc80d620baf
- 315665d064a7f36515936509f73cc36e22d5885da98efd8b95f8e70a34217db0
- 82bfd8b319dab081fbc12f472fc6b46a8fc98ce84106ddd7ace1a0a55ecec6f1
- 496bf086f6f615ba973c5a9106ac718c9c12ddc6b7fd5711292be7e0ed9a851d
- 33445d515b7c490094456913e6e6999af00e1128ff1e8e81528c2d65807c76a3
- bcb8bb2492ff34dc4250d7ee526b04f131999398fc8b59f7bb44f6e87d5b2582
- 2ed9b184af23d509fc202ba407e1604a5ef1710cfd4d3c11be2aa9b221e8d9f5
- d120de11a8ee488691e0d8830158f713a984f0e2
- 898563ad365624a96bbdb7c10c6f8fa2
- 964bc671bdae06ac9fa42810e761ca2124ead80a3b2c0d6274f65d5a6c444106
- 8ffd46cc25e7add92315606b2cb37efbb3eba64157f0675e29762dd6327324bf
- 0cfa6865bf29c0c3acb37254c3b4f1214b6f65491ef03aa56617e32cd569b106
- b68881750aaaab772feef9de9d5f4bf5fbfe128a
- 134e03076cfef74d5a7c749397074010
- f00042d828803f4f61844c3725382177f27e7439e34f2fbef6bdb64db4a082e8
- cf5579ac95bf1a99e421691d9a38d7815c798f97297d37f5bcacd77e2af54fb1
- 906b5c0063bbc0900faca9724ab7b4a843bcbf448127f30f60d3d4cfd83792d6
- 67f3a1766b97790fff475a629c03ef09adfb22ee20d8eaa02c011f8abdc4f2c4
- 5a825fb911c6c221edfe3a8f8e4b970bdcda410a64b4c5d71696d055ad2d3ab1
- 554edfe3259eec51336656c33b04a0bd8b6bf48dbb9d7f1419bb7f3418cede7d
- 539907445eb624474ef255b317c320bbf91b45ac7a745a76286aede727cb8cb3
- 51444c22a5046e34440bbe6cbe141e046333d31e5e51cd6be4d901cc0f80c622
- 041030df89d2be3e8b328df131ad02548f454735f17968373a7c8ec8efac3c93
- bbc4c3d8679ca9d63dc0de4934d54ed17d92a50c
- af8a26bffaeefe86f388b9dbd9c89233ae51df4f
- 9788906550ddd1a5f6a66a2e18d9699c2ba6612d
- 96fc5dfe7c94ed147bd30211d70397ba0acf50ae
- 72b1cf45f87219352a674b9528e023604297d096
- 4fcaea460b834ebc443522eb06b244f8292dadc8
- 3a1e87fc34efafd59db0673bcfa40530f5d2eec5
- 2fd3fa7df1114a15597211ce4664bea27cdb96f0
- 0c261f815d65afe85393bd154daadabf246ed2bf
- f5d35f64d6873bd106d2b064c96a379b
- eea6d0a5c14c91ada236cd100e5f9de7
- d00dcb3d2f4bd537bced3a44ff0fd744
- bf2bcdc323339609a565d34728bb1511
- a34e4a09019a34a307dbfde691d5aa5f
- 9b7dcdf3f997f1fb7b4409c94cb7ef36
- 883fdbe58c098d77349754b20585d43e
- 86a67884b79e646fe8615b084cf8cf5b
- 6c77a0326e91a16bd5911025935f61c4
- 5ac5021e9e0ebefff0df513aca48f63b
- 443673e49c2ac16c8b382dbe3fbb5378
- 20820736c7e4a197f1d01be103aa8198
- 0dca69453b472dd58a9f47cc688a4dec
- 0cd660540d72cee9e9431102e998a5e1
- 026d17314142c13863edfc9372d48b60
- 45e0802045d05281f12a0b29759d3ca05dec8124
- 1ee450345a1b345c3247175acd4b124a
- 8f59c91e7b18c45c5bdf5458ff6d02ef89e759ff4331cad4e16990ee3ed01055
- 04cbc7864cbc225e7ecfef66bcf17bd3204bcf076733de194afebb545bfc6c92
- 18d03307c20a010277bca1a3a2f6e095871ad12b67ec665c8bd081bd764b919f
- fde3de853e59906b25534f254afba7bcf3f302f31a6e133adc98e9d0567d359b
- f68e2481d60eb68e75c58170d60c3e0367a76742cbb679acbb8f560008d6e04c
- ed66ad87eab5cf35261e658ffa1808ca0916968da97567d61692d6a4b8b1f416
- d802c4936f0a8c092ec92a2f40d9c6746a07f0cf4affda21605fecef924888e5
- d4be589a19d4ba60c4413e840b77b7235cff5c84ea5d1b87a8b0b9f7bbf5d4ec
- afef203236e3c641f32c9705023e1f2cb42c01f799bc45cd4159b8b5c4a942ed
- 84dc0ad840b73a0af924a9f1f4ee9d894127c780f75bc5992a09b7e557f1a309
- 77640613ca5acab8aa345463d8209c7ae97deba1011da5f41a284e2241523ce5
- 6c75e547ce387464e8913d62cc5bb2773f2e1dbd2d7c2977111275c113fe86cb
- 5c54d1039226dea2c2baf816025600b87de61f508d8d376210725a20368d7e6c
- 4fd95e577a17a217baa0ed3661249e783c4a18dd2eece1152605035e5a70c765
- 41474e689befaed683aa18aabb28e6db6876bdd30a320e8a726c394788829a73
TTPs & Attack Vectors
Tools, initial access, and MITRE ATT&CK techniques for Global Group
Other
T1486
T1486
T1490
T1490
T1078
T1078
T1021
T1021
T1562
T1562
T1059
T1059
T1047
T1047
T1080
T1080
T1021.001
T1021.001
T1203
T1203
T1110
T1110
T1003
T1003
Victims(4)
| Company | Country | Status | Discovered | |
|---|---|---|---|---|
| Atcomm | China | Claimed | 2 months ago | |
| Shanghai Tunnel Engineering Co (Singapore) Pte Ltd | Singapore | Claimed | 2 months ago | |
| QIHAN BIOTECH | China | Claimed | 2 months ago | |
| Vigilia | Uruguay | Claimed | 2 months ago |
SingaporeTransportationstecs.com.sg
Claimed
2 months agoAffected countries(33)
Countries where this group has been reported to target or leak victims.
🇦🇪United Arab Emirates🇦🇷Argentina🇦🇺AustraliaAruba🇧🇪Belgium🇧🇷Brazil🇨🇦CanadaCongo, the Democratic Republic of the🇨🇬Congo🇨🇳China🇩🇪Germany🇩🇰Denmark🇪🇸Spain🇫🇷France🇬🇧United Kingdom🇬🇷Greece🇬🇹Guatemala🇭🇷Croatia🇮🇪Ireland🇮🇱Israel🇮🇹Italy🇯🇵JapanKorea, Republic of🇱🇧Lebanon🇱🇹Lithuania🇲🇽Mexico🇳🇱Netherlands🇵🇪Peru🇸🇪Sweden🇹🇭Thailand🇹🇷TurkeyTaiwan, Province of China🇺🇸United States