Conti group
Threat Actor
Conti group — a so-called ransomware as a service provider — provides malware, an extortion platform and support to affiliates, who get a percentage of the payments made by victims. Conti has been linked to hundreds of attacks, including multiple U.S. transportation and logistics companies.
Incidents Associated with this Threat
- January 28, 2022: UK Snack Provider Hit by Ransomware Attack
- December 1, 2021: Bay & Bay Transport, MN Hit by Ransomware Attack a 2nd Time
Malware Used by this Threat Actor
No malware identified for this threat actor.