GLOBAL GROUP, operated by threat actor “$$$”, has claimed 17 victims across multiple countries since its June 2025 launch, demonstrating rapid operational scaling through automated systems and strategic partnerships with Initial Access Brokers. The group also utilizes brute-force tools targeting Microsoft Outlook Web Access and RDWeb portals, enabling rapid deployment while bypassing traditional endpoint detection systems. Partnerships with Initial Access Brokers and brute-force tools targeting VPN/Outlook systems accelerate deployment while bypassing EDR detection. GLOBAL GROUP launched in June 2025 as a rebranded Black Lock RaaS operation, claiming 17 victims across the US, UK, Australia, and Brazil.
This Cyber News was published on cybersecuritynews.com. Publication date: Tue, 15 Jul 2025 13:35:13 +0000