Frequency
8
occurrences
First Seen
April 23, 2026
Last Seen
April 24, 2026
Related Threat Clusters
-
Trigona Ransomware Group Deploys Custom Exfiltration Tool for Data Theft
In March 2026, the Trigona ransomware group, which operates as a Ransomware-as-a-Service (RaaS), utilized a newly developed custom tool named 'uploader_client.exe' to enhance their data exfiltration capabilities. This…
9 articles · Updated April 24, 2026
Recent Intelligence Reports
- Trigona Ransomware — www.merabytes.com · April 24, 2026
- Trigona A Ransomware Wiper — www.acronis.com · April 24, 2026
- Trigona Exfiltration Custom — www.security.com · April 24, 2026
- Trigona ransomware attackers use novel tool for data exfiltration | news — Scworld · April 24, 2026
- Ransomware Hackers Develop Custom Exfiltration Tool to Steal Sensitive Data — Cybersecuritynews · April 24, 2026
- Ransomware Gang Unveils Custom Data — Gbhackers · April 24, 2026
- Trigona ransomware attacks use custom exfiltration tool to steal data — Bleepingcomputer · April 23, 2026
- Trigona Affiliates Deploy Custom Exfiltration Tool to Streamline Data Theft — Databreaches · April 23, 2026
Related Entities
Rhantus
Ransomware
CWE-269 - Improper Privilege Management
T1003 - OS Credential Dumping
T1021.001 - Remote Desktop Protocol
T1021 - Remote Services
T1041 - Exfiltration Over C2 Channel
T1046 - Network Service Discovery
T1059.003 - Windows Command Shell
T1068 - Exploitation for Privilege Escalation
T1071 - Application Layer Protocol
T1078 - Valid Accounts