Friday 16 October 11:00 - 12:00, Small Talks room
Sara Eberle (Sara Eberle Consulting) & DeLynn Bettencourt Hammell (FBI)
This presentation marks the third instalment in an ongoing series at Virus Bulletin, continuing conversations that Sara Eberle began with FBI Special Agent Doug Domin at VB2023 and Special Agent Mike Bordini at VB2024 as part of the Threat Intelligence Practitioners' Summit (TIPS).
This year, we welcome DeLynn "Dee" Bettencourt Hammell, the FBI's Assistant Law Enforcement Attaché at the U.S. Embassy in Lisbon covering cyber for Portugal, Spain, Andorra, and Gibraltar, and Sara Eberle, a cybersecurity communications expert who'll equip attendees with skills for engaging law enforcement, industry partners, and the press. Ahead of the talk, Eberle will interview top cybersecurity journalists on how practitioners can better leverage media to amplify disruption efforts.
The central theme: how trust-based collaboration between the FBI, international law enforcement, and the private sector is reshaping cybercrime disruption. The talk opens where VB2024 left off – with the still-unanswered question of who "Solymr," the primary administrator of Warzone RAT, actually is. What the investigation has yielded thus far is accountability at the customer level. Matthew Akande deployed Warzone RAT to target Massachusetts tax preparation firms, using the malware to harvest client PII and file fraudulent tax returns. Arrested at Heathrow in October 2024 and extradited in March 2025, he was sentenced to eight years in federal prison.
Hammell will address the evolution of FBI Cyber's operational model, including her coordination of Portugal and Spain's participation in Operation Leak, the multinational takedown of LeakBase with Europol and 14 countries.
Additional examples include the FBI's work countering Salt Typhoon, plus evidence from Ontinue, Cyber Threat Alliance, and others in cybersecurity, including the FBI-Sophos case, Pacific Rim, which led to indicting Guan Tianfeng.
![]() |
Sara Eberle Sara Eberle is a cybersecurity and cybercrime communications strategist. She brings deep familiarity with the threat landscape, including vulnerabilities across first- and third-party ecosystems, ransomware, phishing and identity theft, dark web activity, and the evolving tactics, techniques, and procedures (TTPs) used by both cybercriminal groups and nation-state adversaries. She also tracks the role of cryptocurrency in cybercrime and the emergence of AI-driven cyberattacks and defences. Sara was Sophos’ Vice President of Global Communications from 2016 to 2025, and she is now a consultant for international cybersecurity service providers. She has worked with law enforcement and government partners including the FBI, CISA and the UK’s National Cyber Security Centre, and supports Secure by Design principles. She also served for eight years on the Cyber Threat Alliance (CTA) communications committee and regularly contributes to global cybersecurity dialogues. This includes presenting alongside FBI cyber agents at the CTA’s TIPS at Virus Bulletin conferences in London (2023) and Dublin (2024) on coordinated cybercrime takedowns through public-private collaboration.
|
|
DeLynn "Dee" Bettencourt Hammell DeLynn "Dee" Bettencourt Hammell serves as the FBI's Cyber Law Enforcement Attaché at the U.S. Embassy in Lisbon, where she works closely with partners in Portugal, Spain, Andorra and Gibraltar to coordinate international cyber operations and cross‑border information sharing. Throughout her FBI career of more than 16 years, she led and contributed to major collaborative efforts, including multi-national takedowns, cross-border disruption campaigns, and joint investigations with foreign law enforcement and intelligence services. Dee brings a strong technical foundation and a long track record of building partnerships across the cyber community. Prior to her current role based in South Europe she served as Unit Chief in the FBI's Cyber Division, a supervisory special agent at FBI's Washington Field Office, and a technical lead on high-profile intrusion investigations, including a major Silicon Valley data breach. As a former Silicon Valley Digital Signal Processing engineer, she frequently works at the intersection of technical investigation and inter-agency collaboration. |
Back to VB2026 conference page
Register your interest for VB2026