Ransomware.live conti

Conti

Conti is an extremely damaging ransomware due to the speed with which it encrypts data and spreads to other systems. It was first observed in 2020 and it is thought to be led by a Russia-based cybercrime group that goes under the Wizard Spider pseudonym. In early May 2022, the US government announced a reward of up to $10 million for information on the Conti ransomware gang.

External information

Victims

351

First Discovered

victim

2020-07-31

Last Discovered

victim

2022-06-07

Avg Delay

between attack and claim

N/A

Infostealer

for victim with domain

N/A

View Victims on World Map

Known Locations (3)

Title	Available	Last Visit	FQDN
CONTI.News	No	2025-06-01 21:18:23	`continewsnv5otx5kaoje7krkto2qbu3gtqef22mnr7eaxw3y6ncz3ad.onion`
Access Blocked	No	2025-06-01 21:18:25	`continews.click`
Error Response Page	No	2025-06-01 21:18:26	`continews.bz`

Target (Available)

Heatmap (Available)

Ransom Notes (4)

Tools Used (Available)

This information is provided by Ransomware-Tool-Matrix
Discovery	RMM Tools	Defense Evasion	Credential Theft	OffSec	Networking	LOLBAS	Exfiltration
AdFind Bloodhound PowerView Seatbelt ShareFinder SharpView SoftPerfect NetScan	AnyDesk Atera Splashtop placeholder placeholder placeholder placeholder	GMER PCHunter placeholder placeholder placeholder placeholder placeholder	Mimikatz ProcDump Router Scan SharpChrome placeholder placeholder placeholder	Cobalt Strike Metasploit Meterpreter PowerShell Empire PowerSploit Rubeus placeholder	placeholder placeholder placeholder placeholder placeholder placeholder placeholder	BITSAdmin NTDS Utility (ntdsutil) PsExec WMIC placeholder placeholder placeholder	Dropfiles MEGA Qaz[.]im RClone Sendspace WinSCP placeholder