Back to Threat Groups

trisec

INACTIVE

ransomware group

Trisec is a Tunisian-origin ransomware group that emerged in February 2024, claiming affiliation with the Tunisian gover

Victims
2
records
First Discovered
Feb 19, 2024
victim
Last Discovered
Feb 19, 2024
victim
Inactive Since
954
days
Countries
2
hit
Avg Discount
—
no settlements

Group Activity

Last 12 months
Oct
2025
Nov
2025
Dec
2025
Jan
2026
Feb
2026
Mar
2026
Apr
2026
May
2026
Jun
2026
Jul
2026
Aug
2026
Sep
2026

Victims (2)

aivi.it

trisec🇮🇹 IT
Feb 19, 2024
Technology1.0Published
aivi.it

ki.se

trisec🇸🇪 SE
Feb 19, 2024
Healthcare1.0Published
ki.se

Infrastructure

leak site
OFFLINE

unreachable

http://pkk4gbz7lsbgeja6s6iwsan2ce364sqioici65swwt65uhicke65uyid.onion/victim.html

2728ms

1d ago

leak site
OFFLINE

unreachable

http://orfc3joknhrzscdbuxajypgrvlcawtuagbj7f44ugbosuvavg3dc3zid.onion/victim.html#

4074ms

3d ago

leak site
OFFLINE

unreachable

http://5qmw6mv5ucbeskd3rv6vgn5dqgsuectmtqvz4paukmvhtlazzkuxuwqd.onion/victim.html

8509ms

6d ago