Global Secret Group is a ransomware/extortion group known for double extortion tactics targeting multiple sectors worldwide.
Global Secret Group (GSG) is a cybercriminal organization operating as a ransomware/extortion group. They target a wide range of sectors including Technology, Manufacturing, Retail & E-Commerce, Financial Services, Energy & Utilities, and Healthcare, with victims spanning the United States, India, Canada, Brazil, UAE, Germany, South Korea, and others. Their primary TTP involves double extortion via a public leak site where they list victims; no specific toolset was provided. Defenders should focus on preventive monitoring, network segmentation, and backup strategies against data exfiltration and encryption methods typical of this group.
Global Secret Group is an active ransomware/extortion group tracked on ransomware.live from the victims it lists on its public leak site.
GSG uses a double extortion tactic by publishing a list of its victims on a public leak site.
Every claim on this page is drawn from the cited source (MISP Galaxy, MITRE ATT&CK, ransomware.live) — no attribution is invented.