Connect with us

Tech Features

New Security Brief: Millions of Messages Distribute LockBit Black Ransomware

Published

on

lockbit sample

By Sarah Sabotka, Bryan Campbell, And The Proofpoint Threat Research Team

What happened 

Beginning April 24, 2024, and continuing daily for about a week, Proofpoint observed high-volume campaigns with millions of messages facilitated by the Phorpiex botnet and delivering LockBit Black ransomware. This is the first time Proofpoint researchers have observed samples of LockBit Black ransomware (aka LockBit 3.0) being delivered via Phorpiex in such high volumes. The LockBit Black sample from this campaign was likely built from the LockBit builder that was leaked during the summer of 2023.  

Messages were from “Jenny Green” with the email address of Jenny@gsd[.]com. The emails contained an attached ZIP file with an executable (.exe). This executable was observed downloading the LockBit Black payload from Phorpiex botnet infrastructure.  

The emails targeted organizations in multiple verticals across the globe and appeared to be opportunistic versus specifically targeted. While the attack chain for this campaign was not necessarily complex in comparison to what has been observed on the cybercrime landscape so far in 2024, the high-volume nature of the messages and use of ransomware as a first-stage payload is notable.  

The attack chain requires user interaction and starts when an end user executes the compressed executable in the attached ZIP file. The .exe binary will initiate a network callout to Phorpiex botnet infrastructure. If successful, the LockBit Black sample is downloaded and detonated on the end user’s system, where it exhibits data theft behavior and seizes the system, encrypting files and terminating services. In an earlier campaign, the ransomware was directly executed, and no network activity was observed, preventing network detections or blocks. 

Attribution 

Proofpoint Threat Research has not attributed this campaign to a known threat actor. Phorpiex is a basic botnet designed to deliver malware via high-volume email campaigns. It operates as a Malware-as-a-Service and has garnered a large portfolio of threat actor customers over more than a decade of operation (earlier versions were first observed on the threat landscape circa 2011). Since 2018, the botnet has been observed conducting data exfiltration and ransomware delivery activities. Despite disruption efforts throughout the years, the botnet persists.  

Proofpoint has observed a cluster of activity using the same “Jenny Green” alias with lures related to “Your Document” delivering Phorpiex malware in email campaigns since at least January 2023.  

LockBit Black (aka LockBit 3.0) is a version of LockBit ransomware that was officially released with upgraded capabilities by the ransomware affiliates in June 2022. In September 2022, the confidential ransomware builder was leaked via Twitter. At the time, multiple parties claimed attribution, but LockBit affiliates claimed the builder was leaked by a disgruntled developer. The leak allows anyone to adopt the configuration for customized versions.  

Why it matters 

Ransomware as a first-stage payload attached to email threat campaigns is not something Proofpoint has observed in high volumes since before 2020, so the observation of a LockBit Black sample in email threat data on this global scale is highly unusual. Additionally, this campaign has been particularly notable due to the high volume of messages in the millions per day, volumes not commonly observed on the landscape. The number of messages and cadence associated with recently observed LockBit Black campaigns are at a volume not seen in malspam since Emotet campaigns

The LockBit Black builder has provided threat actors with access to proprietary and sophisticated ransomware. The combination of this with the longstanding Phorpiex botnet amplifies the scale of such threat campaigns and increases chances of successful ransomware attacks. This campaign is another good example of how the threat landscape continues to change, underscored by recurring and significant shifts and pivots in the tactics, techniques, and procedures (TTPs) used by threat actors.  

Continue Reading
Click to comment

Leave a Reply

Your email address will not be published. Required fields are marked *

Tech Features

Cybersecurity in 2025: Trends, Challenges, and Opportunities

Published

on

a wide-angle shot of a hacker in front of cutting-edge computing hardware
a portrait of Emad Fahmy, Systems Engineering Director at NETSCOUT
Emad Fahmy, Systems Engineering Director at NETSCOUT

As technology evolves, so do the challenges businesses face in keeping their digital assets secure. Cyber threats are becoming more sophisticated, and companies must adopt smarter strategies to stay ahead. Looking ahead to 2025, several key trends are set to shape the cybersecurity landscape. These trends highlight the need for proactive measures, collaboration, and innovation.

1. The Growing Threat of Persistent Cyberattacks

Cyberattacks are no longer quick strikes. Today’s attackers aim to exhaust their targets with prolonged campaigns that evolve over time. A key example is Distributed Denial of Service (DDoS) attacks, where hackers continuously adapt their tactics, overwhelming organisations’ defences over days or even weeks.

Businesses must prepare by investing in systems that can adapt to changing threats and ensuring their teams are equipped to handle extended attacks without burnout.

2. Securing the Supply Chain

The supply chain remains a critical weak link in cybersecurity. High-profile breaches have shown how vulnerabilities in third-party systems can ripple across entire industries. Many organisations are now testing updates in phases rather than applying them broadly to minimise risks.

Building stronger relationships with suppliers and industry peers and implementing stricter controls can help prevent supply chain disruptions.

3. Unified Cybersecurity Platforms

Organisations are moving towards integrated cybersecurity platforms, where tools work together seamlessly. This approach simplifies operations, reduces costs, and ensures better protection.

However, businesses must ensure these platforms are compatible with their existing systems. The challenge lies in finding solutions that not only meet their needs but also enhance the effectiveness of the overall security framework.

4. Artificial Intelligence: Friend and Foe

AI is transforming cybersecurity on both sides of the equation. For defenders, AI-powered tools can analyse threats faster and predict potential risks. For example, AI can help identify unusual activity on a network and forecast future attacks.

However, attackers are also using AI to automate their methods, making their attacks more effective and harder to counter. Businesses must stay ahead by adopting AI tools that can detect and counter these advanced threats.

5. Cloud Security: A Growing Concern

Cloud computing offers flexibility, but it also introduces risks. Many businesses rely on cloud services without fully understanding the potential vulnerabilities. A failure in a major cloud service could disrupt operations for countless businesses, even those not hosted on the cloud directly.

To minimise risks, organisations should diversify their cloud providers, improve visibility into their cloud environments, and ensure critical systems have backups.

6. Preparing for State-Sponsored Cyberattacks

Geopolitical tensions are driving an increase in state-sponsored cyberattacks. These attacks often target critical infrastructure, creating significant disruptions.

Organisations should work closely with government bodies and security organisations to stay informed and coordinated. Sharing information and best practices across industries will be vital for defence.

7. Bridging the Cybersecurity Skills Gap

The cybersecurity skills gap continues to widen, with a shortage of experienced professionals. Many new hires focus on surface-level tasks without fully understanding the underlying systems they are protecting.

Companies must prioritise training programmes that give employees a deeper understanding of cybersecurity fundamentals. Investing in tools that simplify complex processes can also help make the most of limited resources.

8. The Risks of Over-Reliance on Technology

Many organisations rely heavily on technology without considering what happens if it fails. For instance, a disruption in a commonly used service, like cloud-based analytics tools, could create widespread problems.

To avoid such risks, businesses should plan for contingencies, such as using multiple service providers and ensuring their systems can operate independently if needed.

The Path Forward

Cybersecurity in 2025 will require businesses to think strategically and act proactively. Here’s how companies can prepare:

  • Invest in Adaptability: Develop systems that can respond to evolving threats.
  • Strengthen Collaboration: Work with industry peers and regulatory bodies to share insights and resources.
  • Focus on Fundamentals: Train teams to understand and address root causes, not just surface-level issues.
  • Diversify and Secure Infrastructure: Avoid over-reliance on single solutions and ensure redundancy where possible.

The future of cybersecurity is challenging, but it also offers opportunities for innovation. By staying informed and adaptable, businesses can protect their assets and thrive in an increasingly digital world.

Continue Reading

Tech Features

Breaking Boundaries and Driving Inclusive Innovation in Tech

Published

on

Globant

Laura Hernandez Gonzalez, Managing Director for MENA at Globant opens up about her mission to foster diversity, inclusivity, and innovation in the tech world. She shares her approach to leading projects that prioritize the integration of emerging technologies like AI, while ensuring that these advancements benefit underserved communities and drive positive societal change.

What inspired your journey into technology and business strategy, and how did you transition into leadership roles in the industry?

From the start, my path into technology and business strategy has been shaped by curiosity, adaptability, and a deep belief in transformation through innovation. With a background in chemical engineering, I started my career in the Oil & Gas sector, where I was exposed very quickly to large-scale transformation projects and the power of digitalization. Working on pioneering technology-driven initiatives sparked my passion for strategic problem-solving and business evolution, eventually leading me to transition into business consulting. There, I found the opportunity to help organizations rethink their models and unlock new avenues for growth through technology and innovation.

Throughout my career, I’ve also embraced an entrepreneurial mindset, taking on initiatives that required me to navigate uncertainty, build solutions from the ground up, and drive meaningful impact beyond traditional corporate structures. This experience reinforced my ability to spot opportunities, adapt quickly, and lead with a results-driven approach—qualities that have shaped my leadership style over the years.

Working across multiple industries, countries, and cultural landscapes, has helped me gain a global perspective that has been instrumental in shaping my strategic thinking. Understanding different market dynamics, leadership styles, and business environments has only strengthened my belief that adaptability and innovation are key to long-term success. The defining moments in my journey have always been those that challenged me to step outside my comfort zone, embrace change, and take bold action.

What ultimately drew me to the tech industry was its boundless potential to reshape entire sectors. Technology is no longer a supporting function—it is the driving force behind transformation in finance, healthcare, entertainment, and beyond. Being part of Globant, a company that partners with the world’s most influential brands, has allowed me to contribute to high-impact projects while continuously evolving as a leader.

Today, leadership in technology is not about authority—it’s about empowerment. At Globant, we embrace a leadership model that fosters autonomy, collaboration, and continuous learning. My role is not to dictate every decision but to create an environment where brilliant minds can thrive, innovate, and challenge the status quo.

Having worked across multiple continents, how have these diverse experiences shaped your leadership style and strategic approach to business?

One of the most powerful lessons I’ve learned is that leadership is rooted in adaptability and empathy. Working across multiple continents—from Europe and the Americas to the Middle East—has reinforced the importance of understanding diverse perspectives, adapting to different business dynamics, and fostering inclusive environments where teams can thrive.

At Globant, with operations in 35 countries across five continents, we have built a culture of collaboration, agility, and innovation. Our Agile Pods model—autonomous, multidisciplinary teams that experiment and innovate continuously—has shown me firsthand that true innovation happens when different perspectives and expertise come together. This approach not only enhances efficiency and creativity but also empowers teams to take ownership of their goals and drive meaningful impact.

My global exposure has shaped my leadership philosophy—I’ve seen that success isn’t just about expertise; it’s about embracing diversity of thought, culture, and experience. Inclusion isn’t just a moral imperative—it’s a competitive advantage, and in a world where technology is bridging gaps and redefining industries, leaders who cultivate diverse, adaptable teams will be the ones who shape the future.

Can you walk us through your daily routine and also share some positive habits you’ve developed to continually improve and adapt in your leadership role at Globant?

Balance is essential. My daily routine revolves around three key pillars: connection, continuous learning, and well-being. No matter how fast-paced our industry is, I prioritize meaningful interactions with my team and clients—because people are at the heart of every successful company. Staying engaged fosters trust, collaboration, and innovation.

The rapid pace of technological change means stagnation is not an option. To stay ahead, I make continuous learning a priority, whether through executive education—like my experience at Stanford GSB—or by engaging with leading voices in the industry. One key takeaway? Technology’s true power is unlocked through human ingenuity and creativity.

Equally important is well-being, because high performance is not sustainable without balance. I ensure that self-care remains a priority, whether through sports, reading, or moments of reflection. Maintaining mental sharpness and energy is essential, not just for personal resilience but for making better, more strategic decisions as a leader.

Great leadership is about inspiring, empowering, and driving meaningful impact. I believe that staying curious, agile, and engaged is what makes this journey fulfilling.

As a woman leader in technology, how do you see AI-driven personalized banking solutions advancing financial inclusion, particularly for women and underserved communities?

AI is reshaping financial services, making them more accessible than ever. Traditional banking models often rely on rigid credit requirements, leaving many individuals—including those in emerging markets—without access to essential financial tools. We are now seeing AI-driven solutions democratizing access to banking, credit, and investment opportunities, reaching populations that were previously underserved.

In regions like the Middle East, where financial ecosystems are evolving rapidly, AI has the potential to expand access to personalized financial services at a larger scale. By leveraging alternative data and intelligent credit scoring, financial institutions can move beyond traditional eligibility criteria and offer more inclusive, tailored financial solutions.

At Globant, we believe in technology for good. AI shouldn’t just drive efficiency; it should empower people. If leveraged correctly, it can help millions gain financial independence and control over their economic futures. The key is to ensure that these technologies are designed with inclusivity, transparency, and ethical considerations at their core.

What’s one important leadership lesson you’ve learned that every woman in leadership roles should embrace?

One of the most important lessons I’ve learned is to embrace challenges, take risks and step out of comfort zones. Growth happens when we push ourselves beyond what feels familiar—whether that means leading a new initiative, transitioning into a different industry, or taking on a bigger role. The key is to say yes to opportunities, even before feeling fully ready—because that’s where real development happens.

Having spent many years in the Middle East, I’ve witnessed firsthand the significant progress in women’s inclusion and leadership across industries. More women are stepping into technology, entrepreneurship, and executive roles, actively shaping the region’s innovation landscape. This transformation highlights the impact of opportunity, mentorship, and education—key drivers of meaningful and lasting change.

Another key lesson is the power of community and mentorship. No one succeeds alone, and building strong networks of support, collaboration, and knowledge-sharing is essential for any leader. At Globant, we encourage a mindset of boldness and continuous learning, providing the tools and support for people to develop professionally and thrive. We actively promote STEM education and initiatives that encourage young women to pursue careers in technology and leadership.

To anyone looking to thrive in tech, my advice is simple:

  •  Keep learning and evolving—curiosity fuels growth
  •  Build a network of people who challenge, support, and inspire you
  •  Own your journey—confidence comes from action, not just certainty

The future of technology is diverse, and we all have a role in shaping it.

Continue Reading

Tech Features

How Women Are Shaping Tech

Published

on

Women in Tech

By Nezha Alaoui

The tech industry has long enough been a space defined by innovation and progress, yet when it comes to gender diversity, the sector still has a bit of a ground to cover. Despite increased awareness, women remain underrepresented in leadership roles, funding opportunities, and technical positions. For Nezha Alaoui, Founder and CEO of Women Choice, the conversation is not just about bridging gaps but it is about ensuring women play a central role in shaping the future of technology.

Being a social impact entrepreneur and global thought leader, Alaoui has worked extensively on initiatives aimed at empowering women in professional spaces. She emphasizes that while talent is equally distributed, opportunities are not. “The challenge is not a lack of skill or ambition, it is the absence of access, mentorship, and representation,” she says.

Through Women Choice, Nezha has collaborated with fortune 500 companies and institutions to implement mentorship programs, leadership training, and inclusive hiring strategies to help women navigate and advance in the tech industry. In the last twelve months, Nezha and her team gathered 550+ women in tech in a series of monthly events held in Dubai in partnership with a tech leader. She is creating spaces where women can connect, learn, and step into leadership roles. She acknowledges that real progress requires a shift beyond policies, it demands a cultural change within organizations and the industry at large.

She also highlights the importance of visibility in driving change. “When women see leaders who look like them, it creates a ripple effect. It signals that there’s space for them at the table,” Alaoui notes. Her work is focused on fostering real connections, creating professional pathways, and ensuring that inclusion is not just a buzzword, but a business imperative.

As technology continues to shape every aspect of modern life, ensuring diverse perspectives in its development at a grassroot level is crucial. Nezha believes that tech companies must go beyond performative gestures and commit to real structural changes. From funding more women-led startups to building diverse and dynamic leadership teams, the industry stands to benefit from making inclusivity a core part of its growth.

While the road ahead remains challenging, Alaoui remains optimistic. “The future of tech is being written today, let’s make sure women are co-authors of that story.

Continue Reading

Trending

Please enable JavaScript in your browser to complete this form.

Copyright © 2023 | The Integrator