ZeroHour

tridentlocker

ransomware group · aka Trident Locker · unknown · active since 2026-09-04 (first tracked leak-site post per this dashboard; earlier activity, if any, unknown)

Victims · 7d
0▼1
Victims · 30d
1active targets
Victims · 90d
1
All-time (tracked)
17since 2025-11-29
Last post
09-04 16:48UTC
Estimated earnings
public reporting
Profile · glm-5.3-flash · updated

TridentLocker is a ransomware/data-extortion group tracked primarily through its leak-site postings, where it names victim organizations. This dashboard recorded its first tracked victim on 2026-09-04 (Southern Carlson), with only a single listing since tracking began, indicating a very new or low-volume operation. Public vendor research on the group's origin country, operators, affiliate model, and initial access techniques is limited, and no widely reported attribution has been established. Earnings figures and infrastructure details are likewise not publicly documented as of this profile. Defenders should treat the group as an emerging actor and monitor leak-site activity for additional claims.

Tactics & tooling
  • Maintains a leak site listing victim organizations (observed)
  • Data-theft extortion naming victims to pressure ransom payment (typical of leak-site operations; details unconfirmed)
  • Targets private-sector enterprises (observed via listed victim)
  • Initial access vector: unknown
  • Encryption/deployment tooling: unknown
  • Affiliate or closed-group model: unknown
Targeted sectors
Construction products distribution (based on single listed victim; broader targeting unknown)
Notable public victims

Southern Carlson (US-based construction products/tools distributor; listed on group leak site 2026-09-04)

Estimated earnings

No public figure.

Leak-site victims

VictimDiscoveredDetails
SouthernCarlson · 11d ago
RT Software · Apr 26, 2026
Jameson Pepple Cantu PLLC · Mar 5, 2026
TMPartner · Feb 6, 2026
Eco Green Group · Jan 12, 2026
Sedgwick Government Solutions · Dec 31, 2025
allenprinting · Dec 19, 2025
noment · Dec 2, 2025
bpost · Dec 1, 2025
GuestTek · Nov 29, 2025
Advantage 360 · Nov 29, 2025
iqs · Nov 29, 2025
LMG Holdings · Nov 29, 2025
EnQuest · Nov 29, 2025
Calmec · Nov 29, 2025
typecaseinc · Nov 29, 2025
asiawba · Nov 29, 2025

In the newsAll →

No articles mention this group yet.

Victim posts come from the group's leak site via RansomLook and are claims, not confirmations. The profile is written by the model from public reporting and refreshed monthly; earnings figures cite their source and year. First tracked .