US institutions warn against cryptocurrency ransomware Trinity

According to Cointelegraph, on October 4th, the US Department of Health's Cyber Security Coordination Center (HC3) issued an alert revealing a new type of ransomware targeting sensitive data - Trinity. According to HC3, attackers use phishing emails, malicious websites, and software vulnerabilities to lure victims into installing the ransomware on their computers. Once installed, the software searches and collects sensitive information from the computer to send to hackers, while using complex algorithms to encrypt victim files, making them inaccessible. Subsequently, the Trinity ransomware will generate a ransom letter threatening the victim that their data has been extracted and encrypted, demanding payment of ransom in exchange for decryption keys, and limiting the victim to 24 hours to pay with cryptocurrency, otherwise they will face the risk of data leakage. HC3 warns that Trinity ransomware mainly targets critical infrastructure, especially healthcare providers, and reveals that at least seven organizations have been attacked, with at least one US healthcare entity being a victim.