U.S. government agencies: Ransomware Trinity steals sensitive data from healthcare organizations and demands cryptocurrency ransom

ChainCatcher News, the U.S. Department of Health and Human Services Cybersecurity Coordination Center (HC3) recently released an overview of the Trinity ransomware targeting sensitive data. Attackers use phishing emails, malicious websites, and software vulnerabilities to trick victims into installing the ransomware on their computers. It then searches for and collects sensitive information on the computer and sends it to the hackers. The ransomware also encrypts the victim's files using algorithms, rendering them unusable.

After encrypting the files, the ransomware generates a notification informing the victim that it has extracted and encrypted their data and demands a ransom in exchange for the decryption key. The notification also tells the victim that they have 24 hours to pay in cryptocurrency, or their data will be leaked.

HC3 stated that the Trinity ransomware targets critical infrastructure, such as healthcare providers. The government agency reported that seven organizations have already fallen victim to this ransomware. "According to HC3, at least one healthcare facility in the U.S. has recently become a victim of the Trinity ransomware," HC3 reported.