Frequency
3
occurrences
First Seen
April 23, 2026
Last Seen
April 24, 2026
Related Threat Clusters
-
Trigona Ransomware Group Deploys Custom Exfiltration Tool for Data Theft
In March 2026, the Trigona ransomware group, which operates as a Ransomware-as-a-Service (RaaS), utilized a newly developed custom tool named 'uploader_client.exe' to enhance their data exfiltration capabilities. This…
9 articles · Updated April 24, 2026
Recent Intelligence Reports
- Trigona Exfiltration Custom — www.security.com · April 24, 2026
- Trigona ransomware attackers use novel tool for data exfiltration | news — Scworld · April 24, 2026
- Trigona ransomware attacks use custom exfiltration tool to steal data — Bleepingcomputer · April 23, 2026
Related Entities
Rhantus
Ransomware
CWE-269 - Improper Privilege Management
T1003 - OS Credential Dumping
T1021 - Remote Services
T1041 - Exfiltration Over C2 Channel
T1068 - Exploitation for Privilege Escalation
T1071 - Application Layer Protocol
T1486 - Data Encrypted for Impact
T1543.003 - Windows Service
Linux
Windows