Cybersecurity researchers have identified a new ransomware-as-a-service operation called GLOBAL GROUP, which has been active since early June 2025, targeting various sectors in Australia, Brazil, Europe, and the United States. Promoted by the threat actor known as ‘$$$’ on the Ramp4u forum, this operation has raised concerns among cybersecurity experts regarding its widespread impact.
Explain It To Me Like I’m 5: Cybersecurity researchers have identified a new ransomware-as-a-service operation named GLOBAL GROUP, which has been targeting various sectors across Australia, Brazil, Europe, and the United States since June 2025.
Want More Context? 🔎
