extortion.wiki THE RANSOMWARE DOCUMENTARY ARCHIVE
Menu

242 negotiations · 332 notes · 276 seizure banners · snapshots Jul 06, 2026 / Jun 26, 2026 / Jul 23, 2026

trinity

From extortion.wiki, the ransomware negotiation research archive

Negotiation records classified under trinity in the current Ransomchats snapshot. This page indexes the source label; it does not independently verify attribution.

Classification follows the source dataset. Metadata is useful. It is not testimony.

Actor lineage

Global lineage directory

Overview

No evidence-backed lineage profile is currently published for this source label. The absence of a record is not evidence that the actor has no aliases or relationships.

Documentary media

Neutral archive placeholder silhouette
No verified documentary image available.

Known aliases

No source-supported alias is currently recorded. Malware names and actor-group names are not assumed to be equivalent.

Historical timeline

No sourced timeline event is currently recorded for this label.

Lineage and relationships

No evidence-backed relationship is currently recorded. Similar code, language, infrastructure style, or negotiation behavior is not enough on its own.

Predecessors

None established.

Successors

None established.

Splits and mergers

None established.

Suspected affiliate relationships

None established.

MITRE ATT&CK integration

No explicit MITRE ATT&CK group mapping is published for this source label. Software entries and fuzzy name matches are not promoted to group mappings.

External intelligence references

No curated external intelligence reference is currently attached.

Confidence and evidence notes

Confidence applies to each individual alias, event, or relationship—not to the actor page as a whole. “Confirmed” requires explicit authoritative attribution or multiple strong independent sources. Moderate, low, disputed, and unknown entries retain the source's uncertainty. A malware-family name is not automatically an actor identity, and shared code or affiliates do not prove shared leadership.

Ransomware notes

Browse Trinity notes

The explicit archive alias mapping connects this Ransomchats actor label to the ThreatLabz family Trinity. Its 1 archived note is counted and searched separately from the negotiation records below.

Search within this collection

Negotiation records

Filter trinity records

Collection: 14 records · 692 messages

trinity negotiation record collection
Participants Source Archive status
Not recorded 0001 2 trinity, victim JSON Indexed
Not recorded 0002 52 trinity, victim JSON Indexed
Not recorded 0003 286 trinity, victim JSON Indexed
Not recorded 0004 166 trinity, victim JSON Indexed
Not recorded 0005 14 trinity, victim JSON Indexed
Not recorded 0006 10 trinity, victim JSON Indexed
Not recorded 0007 36 trinity, victim JSON Indexed
Not recorded 0008 13 trinity, victim JSON Indexed
Not recorded 0009 6 trinity, victim JSON Indexed
Not recorded 0010 7 trinity, victim JSON Indexed
Not recorded 0011 48 trinity, victim JSON Indexed
Not recorded 0012 15 trinity, victim JSON Indexed
Not recorded 0013 32 trinity, victim JSON Indexed
Not recorded 0014 5 trinity, victim JSON Indexed