{
  "slug": "global",
  "group": "global",
  "name": "global",
  "note": null,
  "attck": [],
  "activity": {
    "postings": 6,
    "first": "2026-08-28",
    "last": "2026-09-12",
    "countries": {
      "US": 2,
      "UY": 1,
      "CN": 2,
      "SG": 1
    },
    "sectors": {
      "education": 1,
      "government": 1,
      "technology": 2,
      "healthcare": 1,
      "transportation": 1
    },
    "recent": [
      {
        "date": "2026-09-12",
        "name": "Sutton Public Schools",
        "country": "US",
        "sectors": [
          "education"
        ],
        "url": "https://www.ransomware.live/id/U3V0dG9uIFB1YmxpYyBTY2hvb2xzQGdsb2JhbA=="
      },
      {
        "date": "2026-09-12",
        "name": "TOWN OF SUTTON | MASSACHUSETTS",
        "country": "US",
        "sectors": [
          "government"
        ],
        "url": "https://www.ransomware.live/id/VE9XTiBPRiBTVVRUT04gfCBNQVNTQUNIVVNFVFRTQGdsb2JhbA=="
      },
      {
        "date": "2026-08-28",
        "name": "Vigilia",
        "country": "UY",
        "sectors": [
          "technology"
        ],
        "url": "https://www.ransomware.live/id/VmlnaWxpYUBnbG9iYWw="
      },
      {
        "date": "2026-08-28",
        "name": "Hangzhou Qihan Biotech Co., Ltd.",
        "country": "CN",
        "sectors": [
          "healthcare"
        ],
        "url": "https://www.ransomware.live/id/SGFuZ3pob3UgUWloYW4gQmlvdGVjaCBDby4sIEx0ZC5AZ2xvYmFs"
      },
      {
        "date": "2026-08-28",
        "name": "Shanghai Tunnel Engineering Co Ltd",
        "country": "SG",
        "sectors": [
          "transportation"
        ],
        "url": "https://www.ransomware.live/id/U2hhbmdoYWkgVHVubmVsIEVuZ2luZWVyaW5nIENvIEx0ZEBnbG9iYWw="
      },
      {
        "date": "2026-08-28",
        "name": "Atcomm",
        "country": "CN",
        "sectors": [
          "technology"
        ],
        "url": "https://www.ransomware.live/id/QXRjb21tQGdsb2JhbA=="
      }
    ]
  },
  "convergences": [],
  "reports": [
    {
      "url": "https://cofense.com/blog/from-payment-plan-to-ransomware-inside-a-global-group-attack",
      "publisher": "Cofense",
      "published": "2026-09-22",
      "title": "From Payment Plan to Ransomware - Inside a Global Group Attack",
      "origin": "feed",
      "primary": false
    }
  ],
  "techniques": [],
  "cves": [],
  "indicators": {
    "list": [],
    "withheld": 0
  },
  "rules": [],
  "coverage": {
    "techniques": 0,
    "defendable": 0,
    "covered": 0,
    "uncovered": []
  }
}