The group was first identified in 2016 and in 2020 attacked medical facilities with ransomware as they were dealing with the COVID-19 pandemic. The group had planned to attack 400 medical facilities.
Trickbot has ties to Russian intelligence services, according to the U.S. Treasury Department.
The sanctions against the group block its access to property in the U.S. or held by U.S. citizens.
