Buzzing on Christmas Eve: Trigona Ransomware in 3 Hours

In late December 2022, we observed threat actors exploiting a publicly exposed Remote Desktop Protocol (RDP) host, leading to data exfiltration and the deployment of Trigona ransomware.

[https://thedfirreport.com/2024/01/29/buzzing-on-christmas-eve-trigona-ransomware-in-3-hours/](https://thedfirreport.com/2024/01/29/buzzing-on-christmas-eve-trigona-ransomware-in-3-hours/)

christmas cybersecurity data data exfiltration december deployment desktop eve exfiltration exploiting exposed host protocol ransomware rdp remote desktop remote desktop protocol threat threat actors trigona trigona ransomware