Frequency
5
occurrences
First Seen
March 19, 2026
Last Seen
April 24, 2026
Related Threat Clusters
-
Exploitation of Bomgar RMM Vulnerability Triggers LockBit Ransomware Surge
A critical remote code execution vulnerability (CVE-2026-1731) in Bomgar's remote monitoring and management (RMM) tool has led to a significant increase in cyberattacks, particularly involving LockBit ransomware. The…
2 articles · Updated April 22, 2026 -
Trigona Ransomware Group Deploys Custom Exfiltration Tool for Data Theft
In March 2026, the Trigona ransomware group, which operates as a Ransomware-as-a-Service (RaaS), utilized a newly developed custom tool named 'uploader_client.exe' to enhance their data exfiltration capabilities. This…
9 articles · Updated April 24, 2026 -
Ransomware Tactics Evolve: EDR Killers Expand Beyond Vulnerable Drivers
Recent research from ESET reveals that ransomware attackers are increasingly using EDR killers to disable endpoint detection and response (EDR) systems before launching their encryptors. These tools have become standard…
18 articles · Updated March 19, 2026
Recent Intelligence Reports
- Trigona Exfiltration Custom — www.security.com · April 24, 2026
- Trigona ransomware attackers use novel tool for data exfiltration | news — Scworld · April 24, 2026
- Trigona ransomware attacks use custom exfiltration tool to steal data — Bleepingcomputer · April 23, 2026
- Bomgar RMM Exploitation Fuels LockBit Attacks — Socprime · April 22, 2026
- EDR killers explained: Beyond the drivers — Welivesecurity · March 19, 2026