Trigona ransomware spotted in increasing attacks worldwide

Trigona ransomware spotted in increasing attacks worldwide

A previously unnamed ransomware has rebranded under the name ‘Trigona,’ launching a new Tor negotiation site where they accept Monero as ransom payments.

Trigona has been active for some time, with samples seen at the beginning of the year. However, those samples utilized email for negotiations and were not branded under a specific name.

As discovered by MalwareHunterTeam, starting in late October 2022, the ransomware operation launched a new Tor negotiation site where they officially named themselves ‘Trigona.’

As Trigona is the name of a family of large stingless bees, the ransomware operation has adopted a logo showing a person in a cyber bee-like costume, shown below.

Trigona ransomware spotted in increasing attacks worldwide

Trigona ransomware operation’s logo Source: BleepingComputer

BleepingComputer is aware of numerous victims of the new ransomware operation, including a real estate company and what appears to be a village in Germany.

The Trigona Ransomware

BleepingComputer analyzed a recent sample of Trigona and found it supports various command line arguments that determine whether local or network files are encrypted, if a Windows autorun key is added, and whether a test victim ID (VID) or campaign ID (CID) should be used.

The command line arguments are listed below:

/full  /!autorun  /test_cid  /test_vid  /path  /!local  /!lan  /autorun_only

When encrypting files, Trigona will encrypt all files on a device except those in specific folders, such as the Windows and Program Files folders. In addition, the ransomware will rename encrypted files to use the ._locked extension.

For example, the file 1.doc would be encrypted and renamed to 1.doc._locked, as shown below.

Trigona ransomware spotted in increasing attacks worldwide

Files encrypted by Trigona Source: BleepingComputer

The ransomware will also embed the encrypted decryption key, the campaign ID, and the victim ID (company name) in the encrypted files.

Trigona ransomware spotted in increasing attacks worldwide

Encrypted file with file markers Source: BleepingComputer

A ransom note named how_to_decrypt.hta will be created in each scanned folder. This note displays information about the attack, a link to the Tor negotiation site, and a link that copies an authorization key into the Windows clipboard needed to log in to the Tor negotiation site.

Trigona ransomware spotted in increasing attacks worldwide

Trigona ransom note Source: BleepingComputer

After logging into the Tor site, the victim will be shown information on how to buy Monero to pay a ransom and a support chat that they can use to negotiate with the threat actors. The site also offers the ability to decrypt five files, up to 5MB each, for free.

BleepingComputer has not seen any active negotiations, and it is not known how much money the threat actors are demanding from victims.

Trigona ransomware spotted in increasing attacks worldwide

Trigona Tor negotiation site Source: BleepingComputer

When a ransom is paid, the victims will receive a link to a decryptor and a keys.dat file, which contains the private decryption key.

The decryptor allows you to decrypt individual files or folders on the local device and network shares.

Trigona ransomware spotted in increasing attacks worldwide

Scan and decrypt screens of the Trigona decryptor Source: BleepingComputer

It is unclear how the operation breaches networks or deploy ransomware. Furthermore, while their ransom notes claim they steal data during attacks, BleepingComputer has not seen any proof of this.

However, their attacks have been increasing worldwide, and with the investment into a dedicated Tor platform, they will likely continue to expand their operations.

News Related


Moment great white shark attacks fishermen’s boat after stalking them for an hour and a half

THIS is the terrifying moment a great white shark launched an attack on a fishermen’s boat after it had circled for 90 minutes. Peter Galea and his pal Joseph were ... Read more »

Serving member of British Army, 21, to appear in court charged with terror offences including ‘bomb threat’

A SERVING member of the British Army has been charged with terror offences. Daniel Abed Khalife, 21, is accused of leaving an item that had the appearance of a bomb ... Read more »

Horrifying moment British boy, 8, struck by lightning while swimming on Australia beach sending him into cardiac arrest

THIS is the horrifying moment a Brit boy was struck by lightning moments after strolling into the sea with his family. The eight-year-old was swimming at a beach in Australia ... Read more »

It’s a welcome change to hear the Chancellor talking up Britain’s prospects – but voters want immediate action

Hunt’s punt IT is certainly a welcome change to hear the Chancellor bullishly talking up ­Britain’s prospects. Few are currently brave enough to do that. Jeremy Hunt even said that ... Read more »

Conor McGregor hit by car while out riding his bike as driver dazzled by sun ploughs into him from behind

CONOR McGregor has revealed he was hit by a car while riding his bike after the driver was dazzled by the sun. The former two-division champion says that his knowledge of ... Read more »

Cops give major update in search for missing Brit actor Julian Sands

HIGH winds have again grounded helicopters searching mountains for British actor Julian Sands — and delayed a high-tech bid to pinpoint him. Sands, 65, went missing two weeks ago while ... Read more »

British woman, in her 40s, and Swedish man found dead inside Portuguese holiday apartment

A BRITISH woman has been found dead inside a holiday apartment in Portugal along with a Swedish man. The pair, reportedly from London, are understood to have arrived at the ... Read more »

Inside Pique’s surprising car collection from £140k Aston Martin to £9k Twingo snubbed by Shakira in latest revenge song

SPANISH footie ace Gerard Pique has a love for luxury cars – but his latest purchase added a real wild card to his collection. As he continues to feud with ... Read more »

Most bosses want staff back in the office rather than working from home, says business chief

MOST bosses want staff back in the office rather than working from home, a business chief says. Companies have put up with workers only going in on Tuesday, Wednesday and ... Read more »

I met Prince Andrew – he looked me up & down like I was at cattle market. He thought he was god, says Ulrika Jonsson

DON’T think I heard the word “narcissist” until a few years ago. And if I did, I probably didn’t pay it much ­attention. Prince Andrew is another narcissist, denying the ... Read more »

Oregon pins hopes on mass timber to boost housing, jobs

Oregon pins hopes on mass timber to boost housing, jobs In Oregon, mass timber is increasingly being viewed as a construction material that could help the state build more affordable ... Read more »

Third child dies in case of Massachusetts mom already accused of fatally strangling two children, DA says

The third child of a Massachusetts mother already accused of fatally strangling two of her children has died, authorities said Friday. Lindsay Clancy’s youngest child, 7-month-old Callan, was pronounced dead ... Read more »

Jay Leno broke multiple bones in motorcycle accident weeks after burning his face

Jay Leno broke several bones in a motorcycle accident last week, just two months after setting his face on fire while working on a different vehicle. “I’ve got a broken ... Read more »

Hamilton, Ont. chef facing deportation gets extension to stay in Canada, says attorney

A Hamilton-based chef who says he’s been repeatedly denied protected refugee status in Canada will not be deported this weekend as per an order from the federal government. Attorney Joshua ... Read more »

Indicators of the Week: tips, eggs and whisky

LAS VEGAS, NEVADA – MARCH 23: Miniature bottles of Fireball Whisky on display during the 2022 Bar & Restaurant Expo and World Tea Conference + Expo at the Las Vegas ... Read more »

Biden, other politicians condemn horrific Tyre Nichols beating video

Tyre Nichols, 29, died three days after being savagely beaten by five Memphis cops during a traffic stop. Family of Tyre Nichols President Biden led a chorus of outrage over ... Read more »

Atlanta Falcons hire Ryan Nielsen as defensive coordinator

Atlanta Falcons hire Ryan Nielsen as defensive coordinator LAS VEGAS — The Atlanta Falcons hired Ryan Nielsen as defensive coordinator Friday, taking him from their biggest rival after he spent ... Read more »

Alex Pereira to defend title vs. Israel Adesanya at UFC 287

Alex Pereira to defend title vs. Israel Adesanya at UFC 287 Israel Adesanya will attempt to get his title back in a fourth fight against rival Alex Pereira this spring. ... Read more »

DOJ charges 3 in 'murder for hire' plot against Iranian journalist

DOJ charges 3 in 'murder for hire' plot against Iranian journalist Two men hired another man to kill a journalist critical of Iran, feds say. Six months after a man ... Read more »

Tyre Nichols: Video released of confrontation with Memphis police

Body camera video was released Friday showing the confrontation between Memphis police officers and 29-year-old Tyre Nichols after he was pulled over at a traffic stop on Jan. 7. Nichols ... Read more »

Alex Murdaugh murder timeline not accurate, video at trial suggests

Alex Murdaugh’s comments to police about his whereabouts around the time his wife and son were fatally shot may not have been accurate, according to video evidence presented by prosecutors ... Read more »

Jan. 6 Capitol attacker who bear-sprayed late Officer Brian Sicknick sentenced to 80 months

The Jan. 6 attacker responsible for bear-spraying Capitol Hill police officer Brian Sicknick — who later collapsed and died — was sentenced to 80 months behind bars. U.S. District Judge ... Read more »

The city of Memphis releases videos of Tyre Nichols' arrest and beating

Police officers, who were seen on camera beating and kicking Tyre Nichols, stand by where Nichols is slumped over on the ground. This image is a screenshot of one of ... Read more »

Don't Worry Last Of Us Fans, Scientists Promise That Cordyceps Infections Are Completely Fictional

Liane Hentscher/HBO HBO has a new smash hit on its hands with “The Last of Us,” an adaptation of the classic PlayStation game of the same title. Starring Pedro Pascal alongside ... Read more »

From actor to AFC championship: SoCal’s Trenton Irwin on big stage with Bengals

Trenton Irwin sat at the end of the dining room table — but not for long. The teen watched for nearly 30 seconds as others tasted their food, and then ... Read more »

Fallece el popular salsero Héctor Rey

A través de un comunicado de Musical Productions MP, nos enteramos de la muerte inesperada de Héctor Rey, quien nos deja a los 54 años de edad. Su deceso se ... Read more »

NYC protests of Tyre Nichols death draw more than 100 in Times Square, Union Square; Mayor Adams asks for peaceful protest

More than hundred people showed up at two protests in Manhattan on Friday night as Memphis police released video showing its officers fatally beating Tyre Nichols, a Black man. “It’s ... Read more »

Gregory Allen Howard Dies: Screenwriter On ‘Remember The Titans’ And Producer Was 70

Gregory Allen Howard, the first African American screenwriter for a $100 million drama with Remember The Titans, died today in Miami, Florida following a brief illness. He was 70 and ... Read more »

NTUC Health opens new nursing home in Jurong, offers flexible eldercare options

SINGAPORE – A new nursing home opened in Jurong on Friday, with operator NTUC Health announcing flexible care options for seniors. The options include a daycare service on Sundays, when ... Read more »

Was your latest natural gas bill more expensive than usual? Share it with us

The Los Angeles Times is looking into natural gas bills across California. The Golden State’s utility providers have warned that natural gas bills will be much higher than usual this ... Read more »

Leonard Greene: Black cops who abuse the public don’t get a pass for being Black

We didn’t need to see the video to know how bad it was. And, if you’re shocked that five Black police officers, in Memphis, Tenn. — the city where Martin ... Read more »

How The Mean Girls Musical Finally Happened

Dia Dipasupil/Getty Images “Mean Girls” remains a perennial favorite amongst those who came of age in the early 2000s. While the movie took a larger-than-life scope to high school politics, it ... Read more »

Commentary: How Julia Bullock became an essential soprano for our times

On the first 20 seconds of her first solo recording, “Walking in the Dark,” Julia Bullock sings: “When out of men’s hearts, hate is hurled / Maybe, baby, you’ll live ... Read more »

Charts Suggest Investors Should Bet on ‘Work Horses' in the Dow Jones Industrial Average, Jim Cramer Says

CNBC’s Jim Cramer on Friday told investors to steer clear of stocks in the Nasdaq Composite and instead place their bets on names listed in the Dow Jones Industrial Average. ... Read more »

B.C. resident enjoying ‘dream coaching job’ with U.S. ski team

After an amazing run as head coach of Freestyle B.C.’s moguls team, Josh Kober of Penticton has landed the job of his dreams. The 28-year-old alumnus of the Apex Freestyle ... Read more »

Tyre Nichols arrest video shows vicious beating on street corner

Memphis police officers punched, kicked and battered Tyre Nichols after pulling him over in a traffic stop, according to videos released Friday night by the City of Memphis. Nichols, a ... Read more »

‘Proud to say I am a fat person’: Calgary actors draw attention to weight bias

People with larger bodies are often discriminated against in the workplace, in their relationships and in health care settings, according to research from the University of Calgary. Now two actors ... Read more »

‘Tomb Raider’ TV-Film Universe From Phoebe Waller-Bridge In Works At Amazon Studios

Alicia Vikander in 2018’s “Tomb Raider” Everett Amazon Studios has tapped Phoebe Waller-Bridge to shepherd a potential Tomb Raider universe that would span television and film. According to source, both ... Read more »

Peacock Axes ‘Dead Day’ From Julie Plec & Kevin Williamson

Peacock Peacock will not be moving forward with Julie Plec and Kevin Williamson’s comic book adaptation Dead Day despite a straight-to-series order, Deadline has confirmed. The streamer ordered the series, ... Read more »

'Chicho' Arango y Colombia tienen la mira en el 'futuro'; van contra un EEUU sumido en una crisis interna

Cristian ‘Chicho’ Arango (der.) y miembros de la Selección Colombia entrenaron en el Dignity Health Sports Park previo a su encuentro amistoso ante Estados Unidos del 28 de enero del ... Read more »
Kênh kiến thức kỹ năng, phát triển bản thân, hướng nghiệp, blog nhân sự