The United States Health Sector Cybersecurity Coordination Center (HC3) has raised alarms about the rising threat of the Trinity ransomware, which targets sensitive data and demands cryptocurrency payments. According to HC3, at least one US healthcare entity has fallen victim to this emerging ransomware.
Trinity ransomware targets critical infrastructure
On October 4, HC3 published an in-depth profile on the Trinity ransomware. The agency explained that this malicious software targets critical infrastructure, with healthcare providers being among the primary victims. The attackers exploit various methods, including phishing emails, malicious websites, and vulnerabilities in software systems, to access their victims’ computers.
Once the ransomware is installed, it searches for sensitive data, encrypts it, and sends the information to the hackers. Victims receive a ransom note demanding payment in cryptocurrency in exchange for a decryption key, which is required to regain access to their files. The note warns victims that failure to comply within 24 hours will result in the stolen data being leaked or sold.
No decryption tools available for victims
The HC3 revealed that, currently, no decryption tools exist for the Trinity ransomware, leaving victims with very limited options. At least seven organisations have fallen prey to this ransomware, with one confirmed healthcare entity in the US.
Surge in ransomware crypto payments
The warning follows Chainalysis’ 2024 Crypto Crime Report, which highlighted a significant increase in ransomware activity in 2023. The report revealed that high-profile organisations and critical infrastructure had paid approximately $1.1 billion in cryptocurrency to ransomware attackers last year. The surge in ransomware attacks involved 538 new variants, with notable companies such as the BBC and British Airways being targeted.
The HC3 is urging organisations, particularly those in healthcare, to remain vigilant and strengthen their cybersecurity defences to avoid falling victim to this growing threat.
