About
Aggregated threat-intel descriptionAccording to PCrisk, Trigona is ransomware that encrypts files and appends the ._locked extension to filenames. Also, it drops the how_to_decrypt.hta file that opens a ransom note. An example of how Trigona renames files: it renames 1.jpg to 1.jpg._locked, 2.png to 2.png._locked, and so forth.It embeds the encrypted decryption key, the campaign ID, and the victim ID in the encrypted files.
Sectors: Business Services, Manufacturing, Technology · Countries: US, MX, ID
Recent victims
View all →| Victim | Sector | Country | Posted | Status |
|---|---|---|---|---|
| Claro | Business Services | MX | Mar 30, 2024 | |
| South Star Electronics | Technology | CN | Mar 20, 2024 | |
| Indoarsip | Business Services | ID | Mar 16, 2024 | |
| Bwizer | Healthcare | PT | Mar 16, 2024 | |
| Topa Partners | Not Found | NZ | Mar 16, 2024 | |
| ATMCo | Technology | US | Mar 15, 2024 | |
| Dinamic Oil | Manufacturing | IT | Feb 28, 2024 | |
| Hotel Avenida, Hostal Espoz y Mina, Hostal Arriazu, Pension Alemana | Hospitality and Tourism | ES | Feb 28, 2024 | |
| America Movil | Business Services | MX | Feb 14, 2024 | |
| FALCO Electronics | Technology | MX | Feb 14, 2024 | |
| Ausa | Manufacturing | ES | Jan 31, 2024 | |
| Genesis Motors | Manufacturing | AU | Jan 31, 2024 | |
| CMG Drainage Engineering | Business Services | US | Jan 31, 2024 | |
| Daher Contracting | Business Services | US | Jan 31, 2024 | |
| Lomma Crane & Rigging | Business Services | US | Jan 29, 2024 | |
| Samuel Sekuritas Indonesia & Samuel Aset Manajemen | Financial | ID | Jan 18, 2024 | |
| Premier Facility Management | Business Services | US | Jan 18, 2024 | |
| Fertility North | Healthcare | AU | Jan 18, 2024 | |
| Vision Plast | Manufacturing | FR | Jan 18, 2024 |