Trigona ransomware has been known for quite a while, but previously it wasn't branded and used email for ransom payment negotiations instead of the standalone TOR site as they do now.
The known victims are a real estate company and what appears to be a village in Germany.
After the rebranding, the attack rate of the Trigona ransomware seems to increase.
