Connect with us

Tech Features

New Security Brief: Millions of Messages Distribute LockBit Black Ransomware

Published

on

lockbit sample

By Sarah Sabotka, Bryan Campbell, And The Proofpoint Threat Research Team

What happened 

Beginning April 24, 2024, and continuing daily for about a week, Proofpoint observed high-volume campaigns with millions of messages facilitated by the Phorpiex botnet and delivering LockBit Black ransomware. This is the first time Proofpoint researchers have observed samples of LockBit Black ransomware (aka LockBit 3.0) being delivered via Phorpiex in such high volumes. The LockBit Black sample from this campaign was likely built from the LockBit builder that was leaked during the summer of 2023.  

Messages were from “Jenny Green” with the email address of Jenny@gsd[.]com. The emails contained an attached ZIP file with an executable (.exe). This executable was observed downloading the LockBit Black payload from Phorpiex botnet infrastructure.  

The emails targeted organizations in multiple verticals across the globe and appeared to be opportunistic versus specifically targeted. While the attack chain for this campaign was not necessarily complex in comparison to what has been observed on the cybercrime landscape so far in 2024, the high-volume nature of the messages and use of ransomware as a first-stage payload is notable.  

The attack chain requires user interaction and starts when an end user executes the compressed executable in the attached ZIP file. The .exe binary will initiate a network callout to Phorpiex botnet infrastructure. If successful, the LockBit Black sample is downloaded and detonated on the end user’s system, where it exhibits data theft behavior and seizes the system, encrypting files and terminating services. In an earlier campaign, the ransomware was directly executed, and no network activity was observed, preventing network detections or blocks. 

Attribution 

Proofpoint Threat Research has not attributed this campaign to a known threat actor. Phorpiex is a basic botnet designed to deliver malware via high-volume email campaigns. It operates as a Malware-as-a-Service and has garnered a large portfolio of threat actor customers over more than a decade of operation (earlier versions were first observed on the threat landscape circa 2011). Since 2018, the botnet has been observed conducting data exfiltration and ransomware delivery activities. Despite disruption efforts throughout the years, the botnet persists.  

Proofpoint has observed a cluster of activity using the same “Jenny Green” alias with lures related to “Your Document” delivering Phorpiex malware in email campaigns since at least January 2023.  

LockBit Black (aka LockBit 3.0) is a version of LockBit ransomware that was officially released with upgraded capabilities by the ransomware affiliates in June 2022. In September 2022, the confidential ransomware builder was leaked via Twitter. At the time, multiple parties claimed attribution, but LockBit affiliates claimed the builder was leaked by a disgruntled developer. The leak allows anyone to adopt the configuration for customized versions.  

Why it matters 

Ransomware as a first-stage payload attached to email threat campaigns is not something Proofpoint has observed in high volumes since before 2020, so the observation of a LockBit Black sample in email threat data on this global scale is highly unusual. Additionally, this campaign has been particularly notable due to the high volume of messages in the millions per day, volumes not commonly observed on the landscape. The number of messages and cadence associated with recently observed LockBit Black campaigns are at a volume not seen in malspam since Emotet campaigns

The LockBit Black builder has provided threat actors with access to proprietary and sophisticated ransomware. The combination of this with the longstanding Phorpiex botnet amplifies the scale of such threat campaigns and increases chances of successful ransomware attacks. This campaign is another good example of how the threat landscape continues to change, underscored by recurring and significant shifts and pivots in the tactics, techniques, and procedures (TTPs) used by threat actors.  

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Tech Features

How digital transformation of UAE’s industrial sector is driving ‘Net Zero 2050’ ambitions

Published

on

By Ahmad Hamad Bin Fahad, CEO of DUBAL Holding



The UAE’s growth journey is led by an unwavering focus on driving digital transformation, enhancing renewable energy capacity and promoting regulatory excellence. This is best reflected in the ‘Net Zero 2050’ strategy, which aims to create 200,000 jobs across the solar, battery and hydrogen sub-sectors, combining economic and sustainability goals. Digitalisation of the industrial sector will play an important role in realising this vision by paving the way for long-term industrial competitiveness and resilience.

Smart manufacturing, AI adoption and Industry 4.0

Across the UAE, factories are being installed with smart manufacturing systems that integrate IoT sensors, predictive analytics and real-time data environments. These optimise energy usage, reduce downtime and minimise material waste, turning sustainability into a measurable, operational outcome rather than an abstract concept.

Furthermore, digitally connected factories can track emissions at every stage of production, benchmark efficiency and automate corrective actions. This is crucial to achieving the goals of ‘Operation 300bn’ and positioning the UAE as a global hub for future industries.

According to the Ministry of Industry and Advanced Technology (MoIAT), Industry 4.0 tools can increase the nation’s industrial productivity by up to 30 per cent while reducing operational costs by nearly 20 per cent through wider structural transformations. Moreover, AI adoption is set to contribute AED 335 billion to the UAE economy by 2031, as reported by the UAE Council for AI and Blockchain.

Artificial Intelligence is also redefining how industrial assets function, from power plants and smelters to logistics centres and material processing facilities. AI-enabled algorithms can even forecast equipment failures, balance energy loads and simulate entire production cycles to identify carbon-saving interventions. AI also helps enhance transparency and enforce operational discipline, promoting both sustainability and profitability.

Role of advanced automation in redefining industrial operations

Advanced automation, from robotics to autonomous transport systems, is driving sustainability by eliminating key bottlenecks that cause higher emissions. Furthermore, automated systems ensure enhanced precision, enabling industries to streamline energy usage, optimise supply chains and accelerate circular-economy practices such as recycling, material recovery and waste-to-value processes.

However, automation does not replace human capability; it merely enhances it, enabling operators to move on to high-value digital roles. It efficiently tackles repetitive, energy-intensive tasks, creating a more resilient, low-carbon industrial ecosystem. A key enabler of this transition is the rise of strategic, government-aligned investments in digital-first industrial ventures. These investments are the backbone of the nation’s industrial future as they help build advanced manufacturing platforms, AI-driven optimisation technologies, smart mobility solutions and digital energy-management systems.

By investing in companies that integrate digital tools into core industrial operations, the UAE is accelerating technology adoption at scale. These investments further position digital transformation as a strategic imperative for fulfilling the UAE’s sustainability goals while boosting economic competitiveness.

Way Forward: Shaping a resilient industrial economy

The UAE’s wise leadership remains committed to fostering an ecosystem that rewards digital innovation and AI adoption. Moreover, by directing long-term strategic capital towards transformative technologies, the nation is building an industrial sector that is both future-ready and climate-aligned.
Amid this shift, digitalisation stands out as the most critical tool for building a sustainable, net-zero industrial economy. Aligning with this, companies must embrace forward-looking strategies that can positively shape the future of the industry.

Continue Reading

Tech Features

WOMEN LEADING THE CHARGE IN 2026

Published

on

Across the technology landscape, women continue to shape innovation with resilience, curiosity, and vision. Their diverse perspectives—shaped by unique journeys, challenges, and triumphs, remind us that progress in tech is driven not only by expertise, but by the voices that dare to redefine what’s possible. This collection of insights amplifies those voices, celebrating the power of women who lead, inspire, and transform the future of technology.

International Women’s Day Comments

Sumaiya Muhammad, Sr. Marketing Specialist at Alteryx –

“My professional journey has evolved across hardware, software, telecom, and now data automation at Alteryx. Working across these domains has strengthened my adaptability and deepened my understanding of how data drives real business value. According to Alteryx research, 48% of leaders plan to increase spending on AI infrastructure and tools, signalling how rapidly enterprise priorities are shifting and how significant it is for women to build confidence in data and AI. A challenge I have consistently faced is navigating constant change in an industry where innovation cycles move quickly. I have realised that continuous learning and investing in upskilling is crucial in this industry.

This International Women’s Day, I encourage aspiring women professionals to step forward boldly and actively shape the future of technology.”

Merhan Gaballah, Construction Technology & PropTech Consultant at PlanRadar –

Throughout my career in construction technology and PropTech, my journey has evolved from commercial roles into strategic advisory positions supporting digital transformation across the GCC.

One of the key challenges has been building credibility in traditionally male-dominated environments, where technical leadership is often predefined. Overcoming this required resilience, preparation, and consistently delivering measurable impact.

Today, I see strong momentum for women in tech. Digital transformation is redefining leadership, placing greater value on collaboration, adaptability, and data-driven thinking—areas where diverse perspectives are essential.

On International Women’s Day, I hope we move beyond recognition toward sustained inclusion, where women are not highlighted as exceptions, but empowered as equal contributors shaping the future of technology.

Alexandra Gartrell, VP and EMEA Legal Lead at Cloudera –

“This year’s International Women’s Day theme, Give to Gain, is a reminder that investing in women’s advancement at work delivers returns for everyone. Diverse teams broaden talent pipelines, improve decision-making, and build workplaces where people are more engaged and more likely to stay.

AI systems inherit the assumptions of the environments that build them. When development teams skew toward a single demographic, bias doesn’t only show up in datasets. It can also appear in which problems are prioritised, how success is defined, which edge cases are tested, and what risks are accepted. In the agentic era, autonomy raises the stakes: small weaknesses in data, design, or oversight can be amplified once decisions are made at scale.

As AI becomes embedded across core business functions, coding ability is no longer the sole marker of technical contribution. Engineers need business acumen, communication skills, and the ability to collaborate across functions because responsible AI depends on context and judgment, not just models.

True inclusion means having diverse voices shape product direction and decision rights and not just representation in organisational charts. Practically, this means auditing datasets for representation gaps, testing models for unequal outcomes, stress-testing edge cases, and involving a diverse panel of human reviewers throughout the AI lifecycle.

According to Cloudera’s WLIT 2025 report, 91% of women leaders in the Middle East remain optimistic that gender equality in AI leadership will improve within five years. When women are given resources, opportunities, and authority in AI development, organisations gain better AI systems that work for everyone. In the agentic era, diversity in leadership and oversight should be treated as part of AI risk management.

Organizations that formalize cross-functional approaches, create transition pathways, and recognize emotional intelligence as a technical capability will build better AI and advance gender equity.”

Fatma Al Naggar, Senior Relationship Manager, Saxo Bank MENA –

In times of uncertainty, women have consistently proven to be natural problem-solvers and stabilisers, leading their homes, workplaces, and communities with empathy, adaptability, and a profound sense of responsibility.
While women naturally take on the role of emotional anchors due to their deep attunement to the needs of others, it is crucial that providing this support never comes at the expense of their own well-being. Sustainable resilience requires setting boundaries, prioritizing self-care, and establishing personal rituals that help maintain a positive mindset and focus on what can be controlled amidst the external noise of today’s fast-paced digital world.

As women progress in their careers and redefine leadership across industries, they are bringing a more collaborative, empathetic, and purpose-driven approach that prioritizes transparency and inclusivity over traditional authority. In highly competitive fields, particularly male-dominated sectors like finance and technology, technical expertise may open doors, but it is the mastery of soft skills such as emotional intelligence, relationship building, and strategic thinking that sustains advancement and leadership credibility.

Furthermore, living and working in a multicultural environment like the UAE significantly amplifies this professional growth. The country’s strong emphasis on safety, opportunity, and diversity provides an unparalleled space where women from all backgrounds can pursue their ambitions with confidence, learn from diverse perspectives, and foster inclusive, globally minded innovation.

Yet, achieving true gender equity demands ongoing progress to ensure equal access to leadership roles, mentorship, and career development, while continually challenging outdated perceptions about women’s roles. An ideal workplace must actively promote equality, respect, equal pay, and flexible work options, empowering every woman to reach her full potential.

On this International Women’s Day, my message to all women, especially young girls carving their own paths, is to believe in your abilities, embrace curiosity, and never hesitate to pursue challenging opportunities. By recognizing our inherent strength, owning our expertise with authenticity, and leading with resilience, we can collectively shape a more inclusive and high-performing future for our communities and industries.”

Laura Heisman, CMO, Dynatrace –

The rise of AI isn’t just a call for women to adapt, it’s an opportunity for women to lead. With an estimated 85% of the jobs that will exist in 2030 yet to be created, AI is not only reshaping roles, but entire career journeys. Traditional paths are breaking down, opening doors for women to step into emerging opportunities – and redefining what’s possible for soon-to-be graduates and school-aged girls alike.

This is our moment to help define the future of work and pave the way for generations to come. But progress isn’t automatic. Without intentional action and human connection, women risk being sidelined in this transformation. Learning, experimenting, and getting comfortable with AI isn’t optional. It’s how we remain active participants in shaping what comes next.

The future will be shaped by what and who we invest in today. When we support women and future generations through mentorship, intentional recruiting, training, and shared learning, we don’t just advance opportunity – we build better technology, stronger businesses, and a more inclusive future. It starts with choosing to learn, experiment, and grow with AI. That is the spirit of this year’s International Women’s Day focus, where we “give to gain.”

Continue Reading

Tech Features

NETSCOUT REVEALS QUALITATIVE SHIFTS IN DDOS ATTACK SOPHISTICATION, INFRASTRUCTURE CAPACITY, AND THREAT ACTOR CAPABILITIES

Published

on

NETSCOUT® SYSTEMS, INC. (NASDAQ: NTCT), today released its second half of the year 2025 Distributed Denial-of-Service (DDoS) Threat Intelligence Report, revealing sophisticated attacker collaboration, resilient botnets, and compromised IoT infrastructure that drove more than eight million DDoS attacks worldwide – some as large as 30 terabits per second (Tbps) – marking a new era of hyper-scale, coordinated threat activity that continues to outpace global takedown efforts. Meanwhile, the accelerating growth of DDoS-for-hire services is empowering a broader range of threat actors, intensifying operational risk to digitally connected organizations and enterprises.

Implications for security professionals extend far beyond volumetric concerns and include reconnaissance and adaptive evasion which challenge traditional defense paradigms. Organizations must match adversarial innovation with intelligent, autonomous defenses, or risk operational disruption at levels previously considered theoretical.

“Threat actors identify organizations that haven’t invested in the right defenses to stay ahead of sophisticated and coordinated DDoS attacks to take down critical infrastructure,” stated Richard Hummel, director, threat intelligence, NETSCOUT. “Traditional security defenses are no longer working, and with attackers hitting new attack size and complexity ceilings, implementing automated and proactive defenses has become a business-level risk mandate – not just a technical concern for security professionals.”

Key research findings include:

  • Massive attacks on a global scale – More than eight million attacks were identified across 203 countries and territories globally.
  • Continued Use of Multi-Vector Attacks – approximately 42% of DDoS attacks employed two to five distinct attack vectors, with some adapting dynamically throughout the attack to complicate detection and mitigation.
  • Outbound Attacks Impact Broadband and Mobile Services – Extensive direct-path attacks revealed that compromised IoT and customer-premises equipment can generate outbound floods exceeding 1 Tbps, creating liability, service, and reputational risk for broadband and mobile providers.
  • Critical Infrastructure Targeted – High‑value services such as NTP and DNS continue to face sustained attack pressure, emphasizing the need for resilient, globally distributed architectures to maintain service continuity.
  • Threat actors scale up collaboration – A surge of more than 20,000 botnet-driven attacks in July 2025 exemplified how coordinated threat activity can rapidly overwhelm defenses and disrupt critical government, finance, and transportation services.
  • Threat actor persistence – Despite international law enforcement dismantling multiple DDoS-for-hire platforms, hacktivist groups and botnets remain resilient, exerting increased pressure.
  • AI integration accelerates operations and collaboration – AI has transitioned to an operational reality, with large language models (LLMs) on the dark web accelerating vulnerability exploitation and botnet expansion, and underground forums documenting a 219% increase in mentions of malicious AI tools. Groups like Keymous+ have demonstrated how partnerships between threat actors amplify attack power, with bandwidth increasing nearly fourfold.

NETSCOUT maps the DDoS landscape through passive, internet vantage points, providing unparalleled visibility into global attack trends. For more than 15 years, NETSCOUT has delivered trusted, consistent DDoS Intelligence based exclusively on directly observed, verifiable attack traffic. NETSCOUT does not aggregate multiple alerts or geographically distributed events into composite peak values, ensuring accuracy, repeatability, and true comparability across reporting periods. Peak metrics reflect single-second maximum bits-per-second (bps) and packets-per-second (pps) rates measured at defined mitigation and monitoring points.

NETSCOUT protects two-thirds of the routed IPv4 space, securing network edges that carried global peak traffic of over 800 Tbps, covering 376 industry verticals and 12,698 Autonomous System Numbers (ASNs) in the second half of 2025. It monitors tens of thousands of daily DDoS attacks by tracking multiple botnets and DDoS-for-hire services that leverage millions of abused or compromised devices.

Continue Reading

Trending

Copyright © 2023 | The Integrator