Global Group ransomware hides behind a legit WinMerge.exe to fetch its encryptor. https://intel.threadlinqs.com/threat/TL-2026-3028 #ThreatIntel #Global #mamona #GlobalGroup

Global Group ransomware hides behind a legit WinMerge.exe to fetch its encryptor. https://intel.threadlinqs.com/threat/TL-2026-3028 #ThreatIntel #Global #mamona #GlobalGroup
⚠️📢 Global Group ransomware is abusing the legitimate WinMerge application to retrieve its encryptor after victims are lured through payment-themed phishing emails and malicious ISO files.
Listen/Read: hackread.com/global-group...
📢 Global Group : nouveau RaaS issu du rebranding de Black Lock et Mamona ransomware
Le Cofense Phishing Defense Center (PDC) a publié le 23 septembre 2026 une analyse portant sur une nouvelle opération Ransomware-as-a-Service…
🟡 vérification factuelle moyenne
#BlackLock #GlobalGroup #Cyberveille
Global Group is a new ransomware-as-a-service operation using phishing PDFs, ISO files, and loaders to deploy encryptors plus double extortion against enterprises. #GlobalGroup #BlackLock #Mamona