Conti group

Threat Actor

Conti group — a so-called ransomware as a service provider — provides malware, an extortion platform and support to affiliates, who get a percentage of the payments made by victims. Conti has been linked to hundreds of attacks, including multiple U.S. transportation and logistics companies.

Incidents Associated with this Threat

Malware Used by this Threat Actor

No malware identified for this threat actor.