Related Threat Clusters
-
Trigona Ransomware Group Deploys Custom Exfiltration Tool for Data Theft
In March 2026, the Trigona ransomware group, which operates as a Ransomware-as-a-Service (RaaS), utilized a newly developed custom tool named 'uploader_client.exe' to enhance their data exfiltration capabilities. This…
9 articles · Updated April 24, 2026 -
Ransomware Tactics Evolve: EDR Killers Expand Beyond Vulnerable Drivers
Recent research from ESET reveals that ransomware attackers are increasingly using EDR killers to disable endpoint detection and response (EDR) systems before launching their encryptors. These tools have become standard…
18 articles · Updated March 19, 2026 -
Ransomware Fuels Surge in Global Cyberattacks
As of February 12, 2026, organizations worldwide are experiencing an average of 2,090 cyber-attacks per week, largely driven by ransomware incidents. This increase highlights the ongoing challenges faced by businesses…
1909 articles · Updated February 12, 2026 -
ATT&CK v19 Release Introduces Major Changes in Defense Evasion Tactics
The ATT&CK framework has released version 19, which includes significant updates to its structure and coverage. Notably, the Defense Evasion Tactic has been split into two distinct categories: Stealth and Defense…
7 articles · Updated April 28, 2026
Recent Intelligence Reports
- GodDamn Ransomware: Latest Beast Rebrand Uses Malicious Driver to Disable Defenses — Security · July 9, 2026
- T1685: Disable or Modify Tools — attack.mitre.org · April 28, 2026
- Trigona Exfiltration Custom — www.security.com · April 24, 2026
- Trigona ransomware attackers use novel tool for data exfiltration | news — Scworld · April 24, 2026
- Trigona ransomware attacks use custom exfiltration tool to steal data — Bleepingcomputer · April 23, 2026
- EDR killers explained: Beyond the drivers — Welivesecurity · March 19, 2026