Hunt / global
global
6victims, 90d
Sep 12last post
0reports about them
-techniques with a rule
0indicators
Nothing published that we can read says how global gets in or what it runs once inside. This page is who they hit, and that is all we have. If you know of a public write-up, it belongs here.
Who they hit
| Posted | Victim | Country |
|---|---|---|
| 2026-09-12 | Sutton Public Schools | US |
| 2026-09-12 | TOWN OF SUTTON | MASSACHUSETTS | US |
| 2026-08-28 | Vigilia | UY |
| 2026-08-28 | Hangzhou Qihan Biotech Co., Ltd. | CN |
| 2026-08-28 | Shanghai Tunnel Engineering Co Ltd | SG |
| 2026-08-28 | Atcomm | CN |
Latest 6 of 6, from ransomware.live. These are the group's claims.
Sweep
No indicators. Either nobody has published any for global, or the reports cite values without marking them as IOCs. package.json