Signalis
sign in--:--:--UTC
Threat actors

Global secret group

☆ pin
Also known as Global Secret Group
Reports
28
First seen
Jul 26, 2026
Last seen
Jul 27, 2026
Motivation
Financial

Targeting

Sectors
Retail & E-commerce ×5Manufacturing ×4Financial Services ×4Professional Services ×4Transport & Logistics ×2Technology ×2Healthcare ×1Telecommunications ×1
Victim regions
×1
×8
United States×8
Canada×2
China×1
United Kingdom×1
Brazil×1
Spain×1
Cyprus×1
Argentina×1

Victim country, only when stated. Corpus is predominantly English-language reporting, so US/EU coverage is overweighted relative to true victim distribution.

Indicators

domain ×92ip_v4 ×35hash_md5 ×4hash_sha256 ×4hash_sha1 ×3

Indicator values are available on Pro and via the API.

Recent reports

High

Global Secret Group Claims Park Manufacturing Corp. Victim

ransomware.liveHigh

Global Secret Group Claims Hinduja Tech Breach; BMW Group & Škoda Auto Connection

ransomware.liveHigh

Global secret group publishes Pro-Tuff Decals as ransomware victim

ransomware.liveHigh

Global secret group claims new victim: Spergel

ransomware.liveHigh

Global secret group publishes Prism Telecom as ransomware victim

ransomware.liveHigh

Global secret group publishes Cipher Dynamics as ransomware victim

ransomware.liveMedium

Global secret group publishes Stratos Network as ransomware victim

ransomware.liveHigh

Global secret group publishes OmniLink AG as ransomware victim

ransomware.liveMedium

Global secret group publishes Vertex Systems as ransomware victim

ransomware.liveHigh

Global secret group publishes Nexon Corp as ransomware victim

ransomware.liveHigh

Farmers Mutual Fire Insurance victim of ransomware extortion claim

ransomware.liveHigh

Global secret group publishes West Sixth Law as ransomware victim

ransomware.liveHigh

Global secret group publishes Baker Business & Tax Solutions as ransomware victim

ransomware.liveMedium

Global secret group publishes Carpets Direct as ransomware victim

ransomware.liveHigh

Global secret group publishes AnyWeather as new ransomware victim

ransomware.liveHigh

Global secret group publishes Chappell Supply & Equipment as ransomware victim

ransomware.liveHigh

Global secret group publishes La Sevillanita as ransomware victim

ransomware.liveHigh

Global secret group publishes One Plus Capital as ransomware victim

ransomware.liveHigh

Global secret group publishes Acens (Cloud & Backup) as victim

ransomware.liveMedium

Global Secret Group Claims West Nova Fuels & Superline Fuels Breach

ransomware.liveHigh

Global secret group publishes Al Hayat | Pepsi as ransomware victim

ransomware.liveHigh

Global Secret Group Claims SPDM Healthcare (Brazil) in Ransomware Extortion Post

ransomware.liveHigh

Global secret group has published Nourison as new victim

ransomware.liveHigh

Global Secret Group Claims Cold Front Distribution Victim

ransomware.liveHigh

Global Secret Group Claims Portman Finance Group Victim on Ransomware.live

ransomware.liveHigh

Global secret group claims new victim: OFS

ransomware.liveHigh

Global Secret Group Claims Uniview Technologies Breach on Ransomware.live

ransomware.liveHigh

Global secret group claims Novum Energy breach on ransomware.live

ransomware.live

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Sign upSee plans