This Unit 42 blog provides insights into the ransomware attacks referred to as LockerGoga. The LockerGoga ransomware was first publicly reported in January by Bleeping Computer, which tied the malware to an attack against French engineering company Altran Technologies. Several variants have since been found in the wild, where they were used in attacks against Norwegian aluminum manufacturer Norsk Hydro and two chemical companies: Hexicon and Momentive.

https://unit42.paloaltonetworks.com/born-this-way-origins-of-lockergoga/