Back to Threat Groups

trisec

INACTIVE

ransomware group

Trisec is a Tunisian-origin ransomware group that emerged in February 2024, claiming affiliation with the Tunisian gover

Victims
2
records
First Discovered
Feb 19, 2024
victim
Last Discovered
Feb 19, 2024
victim
Inactive Since
999
days
Countries
2
hit
Avg Discount
—
no settlements

Group Activity

Last 12 months
Dec
2025
Jan
2026
Feb
2026
Mar
2026
Apr
2026
May
2026
Jun
2026
Jul
2026
Aug
2026
Sep
2026
Oct
2026
Nov
2026

Victims (2)

aivi.it

trisec🇮🇹 IT
Feb 19, 2024
Technology1.0Published
aivi.it

ki.se

trisec🇸🇪 SE
Feb 19, 2024
Healthcare1.0Published
ki.se

Infrastructure

leak site
OFFLINE

unreachable

http://pkk4gbz7lsbgeja6s6iwsan2ce364sqioici65swwt65uhicke65uyid.onion/victim.html

8634ms

13d ago

leak site
OFFLINE

unreachable

http://orfc3joknhrzscdbuxajypgrvlcawtuagbj7f44ugbosuvavg3dc3zid.onion/victim.html#

6311ms

13d ago

leak site
OFFLINE

unreachable

http://5qmw6mv5ucbeskd3rv6vgn5dqgsuectmtqvz4paukmvhtlazzkuxuwqd.onion/victim.html

2246ms

20d ago