Trigona Ransomware Analysis
Trigona ransomware appeared on the threat landscape in late 2022 and threatens to release stolen data if the ransom is not paid.
The threat actors behind the malicious software will decrypt three files for free to prove the victims will get their sensitive data back.
The ransomware appends "._locked" to encrypted files and drops a ransom note in HTML format with instructions on how to retrieve the locked files.
Featured Resources
View More Resources
blog
Handala Hack: From Regional Disruption to Digital Destruction — Why Security Validation Matters Now
After years of battling ransomware and financially motivated threats, security teams must now increase their focus to defend against digital destruction. Iranian-backed Handala Hack highlighted the growing threat with its claimed attacks against a U.S.-based medical equipment maker, with reports of widespread deletion of data
blog
CVE-2026-26117: Hijacking Azure Arc on Windows for Local Privilege Escalation & Cloud Identity Takeover
CVE-2026-26117 lets attackers hijack Azure Arc on Windows, escalate to SYSTEM, and seize the machine’s cloud identity.
Demo
Exposure Validation Demo
Demo of automated offensive simulations validating detection, prevention, and IOC coverage