Ransomware
Trigona Ransomware
Attribution
Financially motivated (unattributed; links to CryLock/ALPHV-affiliated activity reported)
Motivation
Financially motivated (ransomware)
Attribution confidence
medium
Sectors
Luxury goods/perfumery
Sourced from leak-site trackers — reflects the group's claim of a victim, not a confirmed breach.
Why it mattersRansomware actor, medium confidence, documented targeting Oman (Luxury goods/perfumery sector).
What's nextNo pipeline reports reference this actor yet — Radar mentions may still surface early signal.
No open hunts or recent alerts tracked against this actor right now.