Trisec is a Tunisian-origin ransomware group claiming both financial motivation and state-sponsored affiliation.
Analyst brief
Trisec is a Tunisian-origin ransomware group that emerged in February 2024, presenting itself as both a financially motivated criminal and state-sponsored mercenary entity. The group exclusively recruits Tunisian nationals and reported targeting nine victims in the first half of 2024. Their key TTPs involve ransomware operations, though specific tools and C2 infrastructure are not detailed in the provided data. Defenders should monitor for suspicious activity linked to Tunisian-affiliated entities, particularly ransomware attacks.
trisec
crime
Trisec is a Tunisian-origin ransomware group that emerged in February 2024, claiming affiliation with the Tunisian government and operating as both a financially motivated and state-sponsored mercenary group, exclusively recruiting Tunisian members and reporting nine victims in the first half of 2024.