GLOBAL GROUP: Emerging Ransomware-as-a-Service, Supporting AI Driven Negotiation and Mobile Control Panel for Their Affiliates

A rebranded ransomware-as-a-service operation called GLOBAL GROUP—run by the same actor behind Black Lock and Mamona—has rapidly targeted multiple sectors across the US, UK, Australia, and Brazil using AI-powered negotiation, aggressive affiliate recruitment, and access broker partnerships to scale high-impact extortion campaigns.