All Threat Groups ID: conti
Monitored (Active Archive) 351 Victims Disclosed Wizard Spider Gold Ulrick Trickbot Group Conti Ransomware RSS Feed

Conti Syndicate Dossier

First Intercepted
2020-07-31
Latest Disclosure
2022-06-07
Victim Velocity
1.0 / claim

Threat Profile & Operational Narrative

Emerging in May 2020 as the successor to Ryuk from the Russia-nexus Wizard Spider cybercrime syndicate, Conti was one of the most prolific and aggressive Ransomware-as-a-Service operations in history until its dissolution in mid-2022. The malware featured an advanced multithreaded C/C++ architecture utilizing Windows I/O Completion Ports (IOCP) for rapid concurrent encryption using AES-256 and RSA-4096 across Windows and Linux/ESXi hypervisors. Conti gained initial access through TrickBot and BazarLoader botnets, BazarCall social engineering, and public-facing vulnerabilities (such as Log4Shell and ProxyShell), executing ruthless double extortion against healthcare, government, and commercial sectors globally.

Tactics, Techniques & Procedures (MITRE ATT&CK)

T1566.001: Spearphishing Attachment T1190: Exploit Public-Facing Application T1078: Valid Accounts T1059.001: PowerShell T1059.003: Windows Command Shell T1047: Windows Management Instrumentation T1021.001: Remote Desktop Protocol T1021.002: SMB/Windows Admin Shares T1003.001: LSASS Memory T1486: Data Encrypted for Impact T1490: Inhibit System Recovery T1562.001: Disable or Modify Tools

Known Dark Web Infrastructure & Mirrors

continewsnv5otx5kaoje7krkto2qbu3gtqef22mnr7eaxw3y6ncz3ad.onion
OFFLINE
continews.click
OFFLINE
continews.bz
OFFLINE

Disclosed Victims & Incident Archive (351)

Disclosed Victim Organization Sector Country
2022-06-07 Alliance Steel General --
2022-05-25 LCRD General --
2022-05-25 The Contact Company General --
2022-05-24 Central Restaurant Products General --
2022-05-24 Schaumburg Park District General --
2022-05-24 RateGain General --
2022-05-23 Imenco AS General --
2022-05-23 Concepts in Millwork General --
2022-05-23 Eurofred General --
2022-05-23 Agile Sourcing Partners General --
2022-05-23 Alimentos y Frutos S.A. General --
2022-05-23 Worksoft General --
2022-05-23 Omicron Consulting S.r.L General --
2022-05-23 Pianca General --
2022-05-23 Allcat Claims Service General --
2022-05-17 FOR BlackCat and LockBit advert General --
2022-05-14 For Costa Rica and US terrorists General --
2022-05-12 Cjk Group, Inc. General --
2022-05-04 EYP General --
2022-04-28 LARON an otp industrial solutions company General --
2022-04-27 Attica Holdings S.A. General --
2022-04-27 For Peru General --
2022-04-25 Elgin_Ca General --
2022-04-23 Jasec General --
2022-04-20 Attica Group General --
2022-04-19 Instituto Meteorológico Nacional and racsa.go.cr General --
2022-04-19 Instituto Meteorológico Nacional General --
2022-04-19 Del Sol General --
2022-04-19 For Costa Rica General --
2022-04-18 Centris General --
2022-04-18 Nordex SE General --
2022-04-17 Ministerio de Hacienda - República de Costa Rica General --
2022-04-17 Tucker Door & Trim General --
2022-04-15 [IMPORTANT ANNOUNCEMENT!] General --
2022-04-15 CJ Pony Parts General --
2022-04-14 Big Horn Plastering of Colorado, Inc. General --
2022-04-14 Elevate Services General --
2022-04-12 TIC International Corporation General --
2022-04-11 Newlat Food SPA General --
2022-04-11 CAE Services General --
2022-04-11 MARTINELLI GINETTO General --
2022-04-11 Eminox General --
2022-04-10 Snap-on Incorporated General --
2022-04-08 Wocklum Group General --
2022-04-06 Barwick Bathroom Distribution LLP General --
2022-04-05 panasonic General --
2022-04-04 Woningcorporatie ZAYAZ General --
2022-04-04 TRUSTFORD General --
2022-04-03 SLH General --
2022-04-03 Frey and Winkler GmbH General --
2022-04-02 Ackerman Plumbing General --
2022-04-02 FlipChip General --
2022-04-02 MANUFAST General --
2022-04-01 GIBSON HomeWares General --
2022-04-01 Midea Carrier General --
2022-04-01 I-SEC International Security General --
2022-04-01 Lowell General --
2022-03-31 Prima Sole Components Spa General --
2022-03-31 Rettenmeier Holding AG General --
2022-03-31 Parker Appliance Company General --
2022-03-31 Zeeland Farm Services, Inc. General --
2022-03-30 Scott Manufacturing, LLC General --
2022-03-30 BANQUE CENTRALE DE TUNISIE General --
2022-03-29 ITECOR International SA General --
2022-03-29 Critical Content General --
2022-03-29 Automobil Holding AS General --
2022-03-29 Royal Brunei Airlines Sdn Bhd General --
2022-03-29 Azimut Benetti Group General --
2022-03-29 GRS Group General --
2022-03-28 AB Karl Hedin General --
2022-03-28 ONCALL Language Services General --
2022-03-28 Neschen Coating GmbH General --
2022-03-28 Allied Eagle Supply General --
2022-03-28 UNITEK Contracting Group General --
2022-03-27 Hochschild Mining General --
2022-03-24 Shapiro and Duncan General --
2022-03-23 Sav-Rx Prescription Services General --
2022-03-23 WELCOME HOTELS General --
2022-03-22 Sanoh America Inc. General --
2022-03-22 Anac General --
2022-03-21 OCA Global General --
2022-03-20 MJH Life Sciences General --
2022-03-20 PFC USA General --
2022-03-19 BAUKING General --
2022-03-19 Normandeau Associates, Inc. General --
2022-03-19 bChannels Ltd. General --
2022-03-19 BDX General --
2022-03-18 Talent Logic Inc. General --
2022-03-18 NORDEX FOOD General --
2022-03-18 TIG General --
2022-03-17 AllOffice General --
2022-03-17 Managed Business Solutions General --
2022-03-17 IMT GROUP General --
2022-03-17 Empire Electronics Inc. General --
2022-03-17 Milan Institute General --
2022-03-09 Aluminerie Alouette General --
2022-03-09 Great HealthWorks General --
2022-03-09 TST Logistics General --
2022-03-08 Myron Corp. General --
2022-03-07 Fuchs North America General --

Showing 100 most recent disclosures of 351 total records. Use the Live Feed or API for complete records.