A new ransomware-as-a-service (RaaS), GLOBAL, emerged in June 2025 which features an innovative negotiation feature
of proving affiliates with an AI-driven chatbot to assist in communications with victims, likely with the intention of making
extortion chats more persuasive and efficient for attackers. The presence of AI chatbots during the negotiation phase of
cyber-attacks is likely to increase attack volume, increase psychological pressure on victim organisations, and reduce
intelligence-gathering opportunities. If operational as advertised, GLOBAL’s AI chatbot represents a significant evolution
in the ransomware ecosystem.






