Description
Trigona is a ransomware operation that encrypts Windows networks and pressures victims through data theft and leak site threats. Its affiliates compromise organizations through exposed services and stolen credentials, and its encryptor disables security tooling before locking files. The family surfaced in the early 2020s and joined the crowded market of brands competing for skilled intrusion affiliates.
Stats
- First seen
- February 2023
- Last seen
- October 2026
Alert name variants
| Alert Name |
|---|
| Gen:Variant.Ransom.Trigona.16 |
| Generic.Ransom.Trigona.A.077C9C67 |
| Generic.Ransom.Trigona.A.0F1A358A |
| Generic.Ransom.Trigona.A.272CC920 |
| Generic.Ransom.Trigona.A.2B20BAA8 |
| Generic.Ransom.Trigona.A.2E0EF7DF |
| Generic.Ransom.Trigona.A.3413627B |
| Generic.Ransom.Trigona.A.3439BA67 |
| Generic.Ransom.Trigona.A.36DF2EB7 |
| Generic.Ransom.Trigona.A.47C0E776 |
