Trigona Ransomware Analysis

Trigona ransomware appeared on the threat landscape in late 2022 and threatens to release stolen data if the ransom is not paid. The threat actors behind the malicious software will decrypt three files for free to prove the victims will get their sensitive data back. The ransomware appends "._locked" to encrypted files and drops a ransom note in HTML format with instructions on how to retrieve the locked files.