Conti (Windows)

First seen
2020-01-01 00:00:00
Malware type
ransomware
Family
Malware family
Profile updated
2026-07-07 12:38:06

Targeted industries: government-and-public-sector healthcare-and-pharmaceutical financial-services education-and-nonprofits energy-and-utilities technology-and-telecommunications

Targeted regions: country_code:us

Context

Conti is an extremely damaging ransomware due to the speed with which it encrypts data and spreads to other systems. It was first observed in 2020 and it is thought to be led by a Russia-based cybercrime group that goes under the Wizard Spider pseudonym. In early May 2022, the US government announced a reward of up to $10 million for information on the Conti ransomware gang.

Reports & references

  • analyst1.com — Ransom Mafia Analysis Of The Worlds First Ransomware Cartel (report)
  • blog.google — Exposing Initial Access Broker Ties Conti (report)
  • Microsoft — Ransomware As A Service Understanding The Cybercrime Gig Economy And How To Protect Yourself (report)
  • CrowdStrike — Report2021Gtr (report)
  • CrowdStrike — Wizard Spider Adversary Update (report)
  • arcticwolf.com — Conti And Akira Chained Together (report)
  • zdnet.com — The Malware That Usually Installs Ransomware And You Need To Remove Right Away (report)
  • trellix.com — Conti Leaks Examining The Panama Papers Of Ransomware (report)
  • Kaspersky — 106824 (report)
  • dragos.com — Dragos Ics Ot Ransomware Analysis Q4 2021 (report)
  • Trend Micro — Datasheet Ransomware In Q1 2022 (report)
  • redcanary.com — Intelligence Insights November 2021 (report)
  • therecord.media — Conti Ransomware Gang Chats Leaked By Pro Ukraine Member (report)
  • coveware.com — Ransomware As A Service Innovation Curve (report)
  • Trend Micro — Lockbit Conti And Blackcat Lead Pack Amid Rise In Active Raas And Extortion Groups Ransomware In Q1 2022 (report)
  • go.recordedfuture.com — Cta 2022 0802 (report)
  • Broadcom/Symantec — Sed Fy22Q2 Ses Ransomware Threat Landscape Wp (report)
  • Broadcom/Symantec — The Ransomware Threat September 2021 (report)
  • krebsonsecurity.com — Ransomware Gangs And The Name Game Distraction (report)
  • news.sophos.com — The Ransomware Threat Intelligence Center (report)
  • public.intel471.com — Ransomware As A Service 2020 Ryuk Maze Revil Egregor Doppelpaymer (report)
  • vulnerability.ch — Ransomware And Date Leak Site Publication Time Analysis (report)
  • web.archive.org — Otchet Kompanii Group Ib Ransomware Uncovered 2020 2021 (report)
  • coveware.com — Ransomware Attack Vectors Shift As New Software Vulnerability Exploits Abound (report)
  • cronup.com — De Ataque Con Malware A Incidente De Ransomware (report)

External references