malware family

Fake Globe Ransomware

unknownentity:malware_familyransomware · 1 source

It’s directed to English speaking users, therefore is able to infect worldwide. It is spread using email spam, fake updates, attachments and so on. It encrypts all your files, including: music, MS Office, Open Office, pictures, videos, shared online files etc… The ransom is 1bitcoin.

Curated · btcintel

claims we make, each with its source and citation · sources may contradict; we show the set, never a score

Facts

id: fake-globe-ransomware
kind: malware family
status: unknown
aliases: Globe Imposter · GlobeImposter
jurisdictions: —
claims naming it: 107 · 0 attributions · 0 relations · 0 events

Identifiers

misp-galaxy a4631cef-dc51-4bee-a51f-3f1ea75ff201via misp-galaxy-ransomware
misp-galaxy e03873ef-9e3d-4d07-85d8-e22a55f60c19via misp-galaxy-ransomware

Relations

computedno relations recorded for this entity

Events

computedno dated events recorded for this entity

Claims naming this entitynewest first · 20 of 107

GlobeImposterransomwarepayment
subjecttransaction92e6ea5436…dce00ec453
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1GvgRRnLpUP7KsLZLE23ridD45MUxHoAJ4 · 277,685,216 sat · time 2014-11-23 11:05 UTC · url https://ransomwhe.re/#address/1GvgRRnLpUP7KsLZLE23ridD45MUxHoAJ4
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_23829btcintel:annotations:23829@v3 sha256:387b999f1ae5dae8
confidencetrusted provider · 50
GlobeImposterransomwarepayment
subjecttransaction525880ac6b…5ac0cf35c4
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1GvgRRnLpUP7KsLZLE23ridD45MUxHoAJ4 · 266,063,477 sat · time 2014-11-26 14:37 UTC · url https://ransomwhe.re/#address/1GvgRRnLpUP7KsLZLE23ridD45MUxHoAJ4
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_23828btcintel:annotations:23828@v3 sha256:73d38eb8d25ab313
confidencetrusted provider · 50
GlobeImposterransomwarepayment
subjecttransactiond0a1e07e56…0c2206cc3f
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1GvgRRnLpUP7KsLZLE23ridD45MUxHoAJ4 · 963,477 sat · time 2014-11-26 14:37 UTC · url https://ransomwhe.re/#address/1GvgRRnLpUP7KsLZLE23ridD45MUxHoAJ4
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_23827btcintel:annotations:23827@v3 sha256:a5c2619d0121c3f2
confidencetrusted provider · 50
GlobeImposterransomwarepayment
subjecttransactionb380e066f2…79c65e8754
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1GvgRRnLpUP7KsLZLE23ridD45MUxHoAJ4 · 6,700,000,000 sat · time 2015-05-28 14:17 UTC · url https://ransomwhe.re/#address/1GvgRRnLpUP7KsLZLE23ridD45MUxHoAJ4
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_23826btcintel:annotations:23826@v3 sha256:fdf53a77f446b636
confidencetrusted provider · 50
GlobeImposterransomwarepayment
subjecttransaction81e6f96119…559633e191
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1GvgRRnLpUP7KsLZLE23ridD45MUxHoAJ4 · 5,049,900,000 sat · time 2015-06-02 07:16 UTC · url https://ransomwhe.re/#address/1GvgRRnLpUP7KsLZLE23ridD45MUxHoAJ4
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_23825btcintel:annotations:23825@v3 sha256:0d4fe7b2967550d2
confidencetrusted provider · 50
GlobeImposterransomwarepayment
subjecttransactionb0150ba77b…989aa6a3d5
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1GvgRRnLpUP7KsLZLE23ridD45MUxHoAJ4 · 2,549,800,000 sat · time 2015-06-04 07:15 UTC · url https://ransomwhe.re/#address/1GvgRRnLpUP7KsLZLE23ridD45MUxHoAJ4
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_23824btcintel:annotations:23824@v3 sha256:883417a350abd954
confidencetrusted provider · 50
GlobeImposterransomwarepayment
subjecttransactione748e473f1…3eb38a86c1
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1GvgRRnLpUP7KsLZLE23ridD45MUxHoAJ4 · 221,600,000 sat · time 2015-06-04 18:42 UTC · url https://ransomwhe.re/#address/1GvgRRnLpUP7KsLZLE23ridD45MUxHoAJ4
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_23823btcintel:annotations:23823@v3 sha256:e91169f7525583b9
confidencetrusted provider · 50
GlobeImposterransomwarepayment
subjecttransaction441137f71e…be9e881dd9
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1GvgRRnLpUP7KsLZLE23ridD45MUxHoAJ4 · 2,449,700,000 sat · time 2015-06-05 11:21 UTC · url https://ransomwhe.re/#address/1GvgRRnLpUP7KsLZLE23ridD45MUxHoAJ4
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_23822btcintel:annotations:23822@v3 sha256:024bf97e218dfd3f
confidencetrusted provider · 50
GlobeImposterransomwarepayment
subjecttransaction068a353c00…fa2349eea5
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1GvgRRnLpUP7KsLZLE23ridD45MUxHoAJ4 · 1,450,600,000 sat · time 2015-06-05 16:09 UTC · url https://ransomwhe.re/#address/1GvgRRnLpUP7KsLZLE23ridD45MUxHoAJ4
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_23821btcintel:annotations:23821@v3 sha256:728b207f61d631f8
confidencetrusted provider · 50
GlobeImposterransomwarepayment
subjecttransaction9aaa1d7d21…964b99e78e
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1GvgRRnLpUP7KsLZLE23ridD45MUxHoAJ4 · 173,063,477 sat · time 2015-06-08 07:31 UTC · url https://ransomwhe.re/#address/1GvgRRnLpUP7KsLZLE23ridD45MUxHoAJ4
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_23820btcintel:annotations:23820@v3 sha256:fd98074bca13414d
confidencetrusted provider · 50
GlobeImposterransomwarepayment
subjecttransaction2e18e14cdc…97ca9d6c65
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1GvgRRnLpUP7KsLZLE23ridD45MUxHoAJ4 · 2,963,477 sat · time 2015-06-29 17:16 UTC · url https://ransomwhe.re/#address/1GvgRRnLpUP7KsLZLE23ridD45MUxHoAJ4
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_23819btcintel:annotations:23819@v3 sha256:d688188d76312f56
confidencetrusted provider · 50
GlobeImposterransomwarepayment
subjecttransactionbce63f70a5…b46d8db334
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1GvgRRnLpUP7KsLZLE23ridD45MUxHoAJ4 · 2,300,000,000 sat · time 2015-07-12 09:19 UTC · url https://ransomwhe.re/#address/1GvgRRnLpUP7KsLZLE23ridD45MUxHoAJ4
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_23818btcintel:annotations:23818@v3 sha256:8e3c66c16d418261
confidencetrusted provider · 50
GlobeImposterransomwarepayment
subjecttransaction15a3de06f9…0b3343b441
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1GvgRRnLpUP7KsLZLE23ridD45MUxHoAJ4 · 4,000,000,000 sat · time 2015-07-12 12:39 UTC · url https://ransomwhe.re/#address/1GvgRRnLpUP7KsLZLE23ridD45MUxHoAJ4
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_23817btcintel:annotations:23817@v3 sha256:9bf5c06e6f64d284
confidencetrusted provider · 50
GlobeImposterransomwarepayment
subjecttransactionb055f2ad3e…cb3b66c5ab
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1GvgRRnLpUP7KsLZLE23ridD45MUxHoAJ4 · 1,099,900,000 sat · time 2015-07-20 09:15 UTC · url https://ransomwhe.re/#address/1GvgRRnLpUP7KsLZLE23ridD45MUxHoAJ4
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_23816btcintel:annotations:23816@v3 sha256:cb420f5850bf5e1b
confidencetrusted provider · 50
GlobeImposterransomwarepayment
subjecttransaction4d7c79e002…33169ebc72
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1GvgRRnLpUP7KsLZLE23ridD45MUxHoAJ4 · 3,899,900,000 sat · time 2015-07-21 19:53 UTC · url https://ransomwhe.re/#address/1GvgRRnLpUP7KsLZLE23ridD45MUxHoAJ4
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_23815btcintel:annotations:23815@v3 sha256:d80c32132b931e52
confidencetrusted provider · 50
GlobeImposterransomwarepayment
subjecttransaction29153d5d26…3b335c56ac
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1GvgRRnLpUP7KsLZLE23ridD45MUxHoAJ4 · 599,800,000 sat · time 2015-08-04 07:28 UTC · url https://ransomwhe.re/#address/1GvgRRnLpUP7KsLZLE23ridD45MUxHoAJ4
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_23814btcintel:annotations:23814@v3 sha256:9c0b5c648886061b
confidencetrusted provider · 50
GlobeImposterransomwarepayment
subjecttransaction7b9f554aa0…6fcd6d1d95
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1GvgRRnLpUP7KsLZLE23ridD45MUxHoAJ4 · 3,399,800,000 sat · time 2015-08-07 08:42 UTC · url https://ransomwhe.re/#address/1GvgRRnLpUP7KsLZLE23ridD45MUxHoAJ4
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_23813btcintel:annotations:23813@v3 sha256:11299ee860c9dc5d
confidencetrusted provider · 50
GlobeImposterransomwarepayment
subjecttransaction6997fa03d3…752bea4097
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1GvgRRnLpUP7KsLZLE23ridD45MUxHoAJ4 · 2,699,700,000 sat · time 2015-08-22 09:06 UTC · url https://ransomwhe.re/#address/1GvgRRnLpUP7KsLZLE23ridD45MUxHoAJ4
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_23812btcintel:annotations:23812@v3 sha256:7f6ac0d191a2ac4c
confidencetrusted provider · 50
GlobeImposterransomwarepayment
subjecttransactionde91f42318…ed551df58a
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1GvgRRnLpUP7KsLZLE23ridD45MUxHoAJ4 · 99,700,000 sat · time 2015-09-01 09:43 UTC · url https://ransomwhe.re/#address/1GvgRRnLpUP7KsLZLE23ridD45MUxHoAJ4
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_23811btcintel:annotations:23811@v3 sha256:cd4f026d2a7e8207
confidencetrusted provider · 50
GlobeImposterransomwarepayment
subjecttransactiond15f802a20…646ebbf607
sourceRansomwhereRansomwhere (ransomwhe.re), CC BY 4.0
evidencepayment 1GvgRRnLpUP7KsLZLE23ridD45MUxHoAJ4 · 2,199,600,000 sat · time 2015-09-03 08:50 UTC · url https://ransomwhe.re/#address/1GvgRRnLpUP7KsLZLE23ridD45MUxHoAJ4
fetch 2026-10-06 18:49 UTCsha256 182ef70144fde9bfvalid from 2026-09-22version 3
ann_23810btcintel:annotations:23810@v3 sha256:2da2fe841a56861c
confidencetrusted provider · 50

Subjects107 subjects carry a claim naming this entity · a sample

Community

notes from Nostr labelers · never merged with the bands above · not endorsed

Community content is indexed from Nostr and not endorsed by btcintel.

not computed yetNot indexed yet: the community index has not looked at this subject.