[Trigona Ransomware] Custom Exfiltration Tool Speeds Up Data Theft
Imagine a thief who doesn't just grab your wallet—he's got a custom vacuum sucking out your entire safe in parallel streams, dodging every alarm. That's Trigona ransomware's latest move with a bespoke exfiltration tool.
⚡ Key Takeaways
- Trigona uses custom 'uploader_client.exe' for faster, stealthier data exfiltration with parallel connections and TCP rotation. 𝕏
- Post-2023 disruption, the gang's back with kernel exploits and privilege escalation via PowerRun. 𝕏
- Symantec provides IoCs; attackers mimic nation-state custom malware tactics for lower detection. 𝕏
Worth sharing?
Get the best Cybersecurity stories of the week in your inbox — no noise, no spam.
Originally reported by Bleeping Computer
Related Stories
Ransomware & Malware
Ransomware's New Trick: Stealing Data with Your Own Tools
Cloud Security
ChatGPT's Secret Backdoor: Your Private Chats Are Leaking Out
Vulnerabilities & CVEs
Adobe Reader Zero-Day Powers Sneaky PDF Attacks on Oil Pros Since Late 2025
Vulnerabilities & CVEs