Omniglobe Business Solutions listed on malas leak site

• Ransomware group: malas
• Country: Philippines
• Sector: Professional Services
• Announcement date: April 9, 2023

Omniglobe Business Solutions has been listed on the leak site of the threat actor known as malas. According to an announcement published on April 9, 2023, the group claims to have targeted the organization, marking a new entry on the group's public platform.

The claimed attack and methodology

The malas group released an announcement on April 9, 2023, claiming they had successfully targeted Omniglobe Business Solutions. In their communication, the threat actor suggests that they gained access to the organization's systems by exploiting a vulnerability within the Zimbra software. This method of entry highlights a common tactic used by cybercriminals, where unpatched or known vulnerabilities in widely used communication tools are leveraged to breach corporate perimeters.

Following the claimed intrusion, the group has issued threats to the organization. The threat actor has stated that they will either publish the organization's data or demand a ransom. This approach is characteristic of modern ransomware operations, often referred to as double extortion, where attackers not only encrypt systems but also threaten to leak sensitive information to increase the pressure on the victim to pay.

Details regarding the data involved

Regarding the specific nature of the information involved in this incident, the group has not provided any details. The listing does not specify the types of data that have been compromised or are being threatened for release. The available screenshot provided by the threat actor contains only the name of the organization, with no further information regarding the scope of the breach.

• No data types were specified in the listing.

About Omniglobe Business Solutions

Omniglobe Business Solutions is a business process outsourcing (BPO) company based in the Philippines. The organization provides various professional services to its clients, which include customer support, technical support, and back-office operations. As a BPO provider, the company plays a role in managing various operational tasks for its client base.

Impact and industry implications

This incident may negatively impact the organization's operational continuity and reputation. Because the attack appears to be Zimbra-based, it suggests that the organization's email and communication infrastructure may have been compromised. When communication tools are targeted, it poses a significant risk to the integrity of internal and external messaging.

If a data breach has indeed occurred, there is a potential for identity theft or targeted phishing attacks against customers and employees. Furthermore, depending on the specific region where the organization operates, legal sanctions may arise under GDPR or other local data protection regulations. Such regulatory consequences often follow incidents involving the potential exposure of personal or professional information.

For organizations operating in the professional services and BPO sectors, maintaining robust security postures is critical. Common defensive steps include regular patching of all software, particularly communication and email servers like Zimbra, to mitigate the risk of vulnerability exploitation. Additionally, implementing strong access controls and monitoring for unusual activity can help detect unauthorized access attempts early. Information regarding the malas group remains limited in the public domain.