Ransomware Group intelligence
Global Secret Group
ActiveTrack Global Secret Group with 50 published victims and 1 known leak locations in a single intelligence view.
Overview
Global Secret Group is tracked by Breach House as a ransomware group with 50 published victims.
United States is currently the most targeted country in this dataset.
1 known leak locations are currently associated with this group.
Top Countries
Interactive distribution based on the currently visible victims list.
Known Leak Locations (1)
| Label | Type | Availability | Links |
|---|---|---|---|
| Leak location 1 | Onion service | Unknown | o5lsqyar7ox25z734k6zaxt2vf7bsyi4q5rturi5iyxzqo3ica7bjsad.onion |
Top Activity Sectors
No sector intelligence available.
Ransom Notes (0)
▼No ransom notes available for this group.
Tools Used
▼No tools used available.
YARA Rules (0)
▼No YARA rules available.
Indicators of Compromise (0)
▼No IoCs available for this group.
Negotiation Chats (0)
▼No negotiation chats available.
Research Sources
No external research sources linked yet.
Victims (50)
Search, filter and paginate the victim timeline for Global Secret Group. Showing 1–50 of 50.
| Type | Target | Discovered | Country | Business Category | Intel Link |
|---|---|---|---|---|---|
| Ransomware | Pro-Tuff | Decals id30930 View details | United States | Retail / E-commerce | ||
|
Protuffdecals.com is an e-commerce retailer based in the United States, operating in the retail sector. The company offers various products online. Protuffdecals.com was listed as a ransomware victim associated with Global Secret Group |
|||||
| Ransomware | Pro-Tuff | Decals id30930 View details | United States | Retail / E-commerce | ||
|
Country: Crystal Lake, US | Website: protuffdecals.com | Revenue: $9.6 million | Industry: Business Services General, Business Services | Employees: 10-20 | Properties: 412 GB (589,623 Files, 40,081 Folders) |
|||||
| Ransomware | Spergel id30933 View details | Canada | — | ||
|
Country: Canada | Website: spergel.ca | Revenue: $28.2 Million | Industry: Business Services,Project Management | Employees: 51-200 | Properties: 5.4 TB (7,830,792 Files, 902,844 Folders) |
|||||
| Ransomware | Prism Telecom id30918 View details | Finland | — | — | |
|
Prismtelecom.com operates in the telecommunications sector, providing services in Finland. The company's offerings likely include a range of telecom services. Prismtelecom.com was listed as a ransomware victim associated with Global Secret Group. |
|||||
| Ransomware | Prism Telecom id30918 View details | Finland | — | — | |
|
Backbone network traffic analysis and SS7 protocol vulnerability assessment across 3 continents. |
|||||
| Ransomware | Cipher Dynamics id30919 View details | India | IT | — | |
|
Cipherdyn.com is an IT company based in India, offering various services in the technology sector. As a company in the IT sector, Cipherdyn.com provides solutions to clients in India. Cipherdyn.com was listed as a ransomware victim associated with Global Secret Group. |
|||||
| Ransomware | Cipher Dynamics id30919 View details | India | IT | — | |
|
Zero-trust architecture review and cryptographic key management assessment. |
|||||
| Ransomware | Stratos Network id30920 View details | United Arab Emirates | IT | — | |
|
Stratosns.com is an IT company based in the United Arab Emirates, offering various services within the IT sector. The company operates within a competitive market, providing solutions to its clients. Stratosns.com was listed as a ransomware victim associated with Global Secret Group. |
|||||
| Ransomware | Stratos Network id30920 View details | United Arab Emirates | IT | — | |
|
Satellite communication relay analysis with deep-packet inspection across 14 ground stations. |
|||||
| Ransomware | OmniLink AG id30921 View details | Germany | IT | — | |
|
Omnilink software is an IT company based in Germany, providing various software solutions. The company operates in the IT sector, offering its services to clients. Omnilink software was listed as a ransomware victim associated with Global Secret Group. |
|||||
| Ransomware | OmniLink AG id30921 View details | Germany | IT | — | |
|
Full-scope penetration testing of financial transaction processing pipeline and API gateway. |
|||||
| Ransomware | Vertex Systems id30922 View details | United States | IT | — | |
|
Vertex Systems is an IT company based in the US, offering various services within the technology sector. As a US-based entity, Vertex Systems operates in a competitive market, providing IT solutions to its clients. Vertex Systems was listed as a ransomware victim associated with Global Secret Group |
|||||
| Ransomware | Vertex Systems id30922 View details | United States | IT | — | |
|
Ongoing analysis of cloud-native architecture and microservice communication protocols. |
|||||
| Ransomware | Nexon Corp. id30923 View details | Korea, Republic of | IT | — | |
|
Nexon.com is a Korean online gaming company that develops and publishes various online games. The company is part of the IT sector and is based in South Korea, offering a range of gaming services to its users. Nexon.com was listed as a ransomware victim associated with Global Secret Group |
|||||
| Ransomware | Nexon Corp. id30923 View details | Korea, Republic of | IT | — | |
|
Internal infrastructure audit revealed multiple critical entry points across distributed network segments. |
|||||
| Ransomware | Farmers Mutual Fire Insurance id30924 View details | United States | Agriculture / Food | ||
|
Farmersofmarble.com operates within the agriculture and food sector in the United States, providing services related to this industry. As an entity in this sector, it is involved in activities such as farming, food production, or distribution. Farmersofmarble.com was listed as a ransomware victim associated with Global Secret Group |
|||||
| Ransomware | Farmers Mutual Fire Insurance id30924 View details | United States | Agriculture / Food | ||
|
Country: Pennsylvania, United States | Website: farmersofmarble.com | Revenue: $5.2 Million | Industry: Insurance | Employees: 11-50 | Properties: 5.72 GB (18,699 Files, 2,631 Folders) |
|||||
| Ransomware | West Sixth Law id30925 View details | United States | — | ||
|
Country: Columbus, Indiana, United States | Website: agslawyers.com | Revenue: $5 Million | Industry: Law Firms & Legal Services | Employees: 11-50 Employees | Properties: 328 GB (708,816 Files, 47,925 Folders) |
|||||
| Ransomware | Baker Business & Tax Solutions id30926 View details | United States | — | ||
|
Country: Kentucky, United States | Website: bakerbusinessandtax.com | Revenue: $1 Million | Industry: Accounting for Legal Practices | Employees: 1-10 Employees | Properties: 213Gb (817,209 Files, 48,866 Folders) |
|||||
| Ransomware | Carpets Direct id30927 View details | United States | — | ||
|
Country: Ohio, United States | Website: carpetsdirectfindlay.com | Revenue: $5 Million | Industry: Retail,Furniture | Employees: 11-50 | Properties: 31.1 GB (1,442 Files, 788 Folders) |
|||||
| Ransomware | AnyWeather id30928 View details | United States | — | ||
|
Country: Kentucky, United States | Website: ohrestorationservices.com | Revenue: $6 Million | Industry: Construction | Employees: 30 Employees | Properties: 301 GB (33,041 Files, 4,133 Folders) |
|||||
| Ransomware | Middendorf Animal Hospital & Laser Centre id30929 View details | United States | — | ||
|
Country: Kentucky, United States | Website: middendorfanimalhospital.com | Revenue: <$5 Million | Industry: Healthcare Services,Veterinary Services | Employees: 11-50 | Properties: 28.1 GB (34,237 Files, 8,806 Folders) |
|||||
| Ransomware | Chappell Supply & Equipment id30884 View details | United States | Construction / Real Estate | ||
|
Chappell Supply is a US-based company operating in the construction and real estate sector, offering various services and products. The company is involved in providing supplies and materials for construction projects. Chappell Supply was listed as a ransomware victim associated with Global Secret Group. |
|||||
| Ransomware | Chappell Supply & Equipment id30884 View details | United States | Construction / Real Estate | ||
|
Country: Oklahoma, United States | Website: chappellsupply.com | Revenue: $9.2 Million | Industry: Consumer Services,Retail,Manufacturing,Repair Services | Employees: 11-50 | Properties: 160 GB (268,758 Files, 30,522 Folders) |
|||||
| Ransomware | La Sevillanita id30885 View details | Argentina | Hospitality / Food & Beverage / Tourism | ||
|
Lasevillanita.com is an Argentine entity operating in the hospitality, food and beverage, and tourism sector. The company likely provides services such as accommodations, dining, and travel arrangements to its customers. Lasevillanita.com was listed as a ransomware victim associated with Global Secret Group |
|||||
| Ransomware | La Sevillanita id30885 View details | Argentina | Hospitality / Food & Beverage / Tourism | ||
|
Country: Argentina | Website: lasevillanita.com | Revenue: $15 million | Industry: Freight & Logistics Services,Transportation | Employees: 11-50 | Properties: 200 GB (385,318 Files, 13,074 Folders) |
|||||
| Ransomware | One Plus Capital id30886 View details | Cyprus | Finance / Legal / Insurance | ||
|
Onepluscapital.net operates in the finance and legal sector, offering services in Cyprus. The company provides financial and legal solutions to its clients. Onepluscapital.net was listed as a ransomware victim associated with Global Secret Group. |
|||||
| Ransomware | One Plus Capital id30886 View details | Cyprus | Finance / Legal / Insurance | ||
|
Country: Cyprus | Website: onepluscapital.net | Revenue: $7 Million | Industry: Finance | Employees: 11-50 | Properties: 117 GB (285,919 Files, 32,404 Folders) |
|||||
| Ransomware | Acens | Cloud & Backup id30887 View details | Spain | IT | ||
|
Acens.com is a Spanish IT company that provides various technology services. The company operates in the IT sector, offering solutions to its clients. Acens.com was listed as a ransomware victim associated with Global Secret Group |
|||||
| Ransomware | Acens | Cloud & Backup id30887 View details | Spain | IT | ||
|
Country: Spain | Website: acens.com | Revenue: $46.3 Million | Industry: Hosting | Employees: 201-500 |
|||||
| Ransomware | West Nova Fuels & Superline Fuels id30888 View details | Canada | Transportation / Travel / Logistics | ||
|
WestNovaSuperline.ca is a transportation company based in Canada, operating in the travel and logistics sector. The company provides transportation services to various destinations. WestNovaSuperline.ca was listed as a ransomware victim associated with Global Secret Group |
|||||
| Ransomware | West Nova Fuels & Superline Fuels id30888 View details | Canada | Transportation / Travel / Logistics | ||
|
Country: Canada | Website: westnovasuperline.ca | Revenue: $18.9 Million | Industry: Convenience Stores, Gas Stations & Liquor Stores | Employees: 51-200 | Properties: 45.8 GB (114,200 Files, 2,672 Folders) |
|||||
| Ransomware | Sinop Energia id30889 View details | Brazil | Energy | ||
|
Sinopenergia.com.br is a Brazilian company operating in the energy sector, providing various services to its customers. Located in Brazil, the company is involved in energy-related activities. Sinopenergia.com.br was listed as a ransomware victim associated with Global Secret Group. |
|||||
| Ransomware | Sinop Energia id30889 View details | Brazil | Energy | ||
|
Country: Brazil | Website: sinopenergia.com.br | Revenue: $12.2 Million | Industry: Electricity, Oil & Gas | Employees: 51-200 | Properties:300 GB (43,113 Files, 5,372 Folders) |
|||||
| Ransomware | Al Hayat | Pepsi id30890 View details | Iraq | Retail / E-commerce | ||
|
Alhayatco.com is an Iraqi retail and e-commerce company operating in the retail sector. The company is based in Iraq and offers various products and services to its customers. Alhayatco.com was listed as a ransomware victim associated with Global Secret Group |
|||||
| Ransomware | Al Hayat | Pepsi id30890 View details | Iraq | Retail / E-commerce | ||
|
Country: Iraq | Website: alhayatco.com | Revenue: $100 Million | Industry: Food & Beverage | Employees: 501-1,000 | Properties: 138 GB (205,992 Files, 17,178 Folders) |
|||||
| Ransomware | SPDM id30891 View details | Brazil | NGOs / Associations | ||
|
Spdm.org.br is a Brazilian non-governmental organization operating in the country. The entity is involved in various activities related to its sector. Spdm.org.br was listed as a ransomware victim associated with Global Secret Group. |
|||||
| Ransomware | SPDM id30891 View details | Brazil | NGOs / Associations | ||
|
Country: Brazil |Website: spdm.org.br |Revenue: $197 Million |Industry: Hospitals & Clinics |Employees: 10.000 - 20.000 |Properties: 847 GB (871,912 Files, 76,047 Folders) |
|||||
| Ransomware | Nourison | Home id30892 View details | United States | Manufacturing / Engineering | ||
|
Nourison.com is a US-based company operating in the manufacturing and engineering sector, offering various products and services. The company is involved in the design, production, and distribution of its products. Nourison.com was listed as a ransomware victim associated with Global Secret Group |
|||||
| Ransomware | Nourison | Home id30892 View details | United States | Manufacturing / Engineering | ||
|
Country: New Jersey 07663, US | Website: nourison.com | Revenue: $59.4 Million | Industry: Wholesale, Furniture, Home Decor, Retail, Real Estate | Employees: 100-300 | Properties: 799 GB (93,941 Files, 13,733 Folders) |
|||||
| Ransomware | Cold Front Distribution id30893 View details | United States | Retail / E-commerce | ||
|
Coldfrontdist.com operates in the retail and e-commerce sector in the United States, providing various offerings to its customers. As a company in this sector, it is likely involved in the distribution of products to consumers. Coldfrontdist.com was listed as a ransomware victim associated with Global Secret Group |
|||||
| Ransomware | Cold Front Distribution id30893 View details | United States | Retail / E-commerce | ||
|
Country: Colorado, United States | Website: coldfrontdist.com | Revenue: $120.1 Million | Industry: Transportation | Employees: 201-500 Employees | Properties: 473 GB (890,775 Files, 51,621 Folders) |
|||||
| Ransomware | Portman Finance Group id30894 View details | United Kingdom | Finance / Legal / Insurance | ||
|
Portman Finance Group is a financial services company based in the United Kingdom, operating in the finance, legal, and insurance sector. The company provides various financial offerings to its clients. Portman Finance Group was listed as a ransomware victim associated with Global Secret Group. |
|||||
| Ransomware | Portman Finance Group id30894 View details | United Kingdom | Finance / Legal / Insurance | ||
|
Country: United Kingdom | Website: portmanfinancegroup.co.uk | Revenue: £300 Million | Industry: Finance | Employees: 1000-5000 Employees | Properties: 209 GB (255,244 Files, 34,852 Folders) |
|||||
| Ransomware | OFS id30895 View details | United States | Manufacturing / Engineering | ||
|
ofs.com is a company based in the United States, operating in the manufacturing and engineering sector. The company provides various services and products related to its sector. ofs.com was listed as a ransomware victim associated with Global Secret Group |
|||||
| Ransomware | OFS id30895 View details | United States | Manufacturing / Engineering | ||
|
Country: Indiana, United States | Website: ofs.com | Revenue: $517.1 Million | Industry: Furniture,Manufacturing,Transportation | Employees: 1K - 5K | Properties: 321 GB (322,742 Files, 18,081 Folders) |
|||||
| Ransomware | Uniview Technologies id30896 View details | China | Manufacturing / Engineering | ||
|
Uniview.com is a Chinese company operating in the manufacturing and engineering sector, providing various products and services. The company is based in China and offers a range of solutions. Uniview.com was listed as a ransomware victim associated with Global Secret Group |
|||||
| Ransomware | Uniview Technologies id30896 View details | China | Manufacturing / Engineering | ||
|
Country: China | Website: uniview.com | Revenue: $610 Million | Industry: Manufacturing, Electronics | Employees: 1000-5000 Employees | Properties: 1.5 TB (2,172,194 Files, 114,352 Folders) |
|||||
| Ransomware | Novum Energy id30897 View details | United States | Energy | ||
|
Novum Energy is an energy company based in the United States, operating in the energy sector. The company provides various energy-related services. Novum Energy was listed as a ransomware victim associated with Global Secret Group. |
|||||
| Ransomware | Novum Energy id30897 View details | United States | Energy | ||
|
Country: Texas, United States | Website: novumenergy.com | Revenue: $966 Million | Industry: Convenience Stores, Gas Stations & Liquor Stores | Employees: 51-200 | Properties: 842 GB (971,325 Files, 117,085 Folders) |
|||||