Back to Threat Groups

trisec

INACTIVE

ransomware group

Trisec is a Tunisian-origin ransomware group that emerged in February 2024, claiming affiliation with the Tunisian gover

Victims
2
records
First Discovered
Feb 19, 2024
victim
Last Discovered
Feb 19, 2024
victim
Inactive Since
909
days
Countries
2
hit
Avg Discount
—
no settlements

Group Activity

Last 12 months
Sep
2025
Oct
2025
Nov
2025
Dec
2025
Jan
2026
Feb
2026
Mar
2026
Apr
2026
May
2026
Jun
2026
Jul
2026
Aug
2026

Victims (2)

aivi.it

trisec🇮🇹 IT
Feb 19, 2024
Technology1.0Published
aivi.it

ki.se

trisec🇸🇪 SE
Feb 19, 2024
Healthcare1.0Published
ki.se

Infrastructure

leak site
OFFLINE

unreachable

http://5qmw6mv5ucbeskd3rv6vgn5dqgsuectmtqvz4paukmvhtlazzkuxuwqd.onion/

5027ms

5d ago

leak site
OFFLINE

unreachable

http://orfc3joknhrzscdbuxajypgrvlcawtuagbj7f44ugbosuvavg3dc3zid.onion/

8777ms

5d ago

leak site
OFFLINE

unreachable

http://pkk4gbz7lsbgeja6s6iwsan2ce364sqioici65swwt65uhicke65uyid.onion/

2825ms

10d ago

leak site
OFFLINE
http://orfc3joknhrzscdbuxajypgrvlcawtuagbj7f44ugbosuvavg3dc3zid.onion/victim.html#

never crawled

leak site
OFFLINE
http://5qmw6mv5ucbeskd3rv6vgn5dqgsuectmtqvz4paukmvhtlazzkuxuwqd.onion/victim.html

never crawled

leak site
OFFLINE
http://pkk4gbz7lsbgeja6s6iwsan2ce364sqioici65swwt65uhicke65uyid.onion/victim.html

never crawled