Trigona operator

The Trigona ransomware gang is known for several ransom operations, in which the Trigona malware encrypts all files on victims' devices except those in specific folders, including the Windows and Program Files directories. Before encryption, the gang also claims to steal sensitive documents that will get added to its dark web leak site.