TridentLocker is a ransomware group that first surfaced in late November 2025, primarily motivated by financial gain through double-extortion tactics. This group distinguishes itself by targeting organizations that manage substantial volumes of regulated or third-party data, including government services, telecommunications, and engineering firms. Its operations involve publicly posting detailed victim profiles and countdown timers on its dark web leak site to exert pressure and hasten ransom payments. TridentLocker operates as a ransomware-as-a-service (RaaS) group and has been observed identifying itself as a data broker.

Paises afectados

Sectores atacados

URLs nuevas detectadas en IntelTracker