Description
GlobeImposter is a ransomware family that mimics the Globe ransomware and spreads through blank slate spam with ZIP attachments, exploits, malvertising, fake updates, and repacked installers. It can prevent security software from running and block system restoration, which complicates recovery for victims who do not pay.
Stats
- First seen
- April 2022
- Last seen
- September 2026
Alert name variants
| Alert Name |
|---|
| ByteCode-MSIL.Ransomware.GlobeImposter |
| Generic.Ransom.GlobeImposter.8B1BC614 |
| Generic.Ransom.GlobeImposter.B640847D |
| Generic.Ransom.GlobeImposter.B920A75A |
| Generic.Ransom.GlobeImposter.C10BAD29 |
| Generic.Ransom.GlobeImposter.F22DB984 |
| Generic.Ransom.GlobeImposter.F32BD2EA |
| Generic.Ransom.GlobeImposter.F96017CE |
| MemScan:Trojan.Ransom.GlobeImposter.V |
| Win32.Ransomware.GlobeImposter |
