Conti
Tracked by CyberSIXT since 12 Jun
- Articlesall time
- 7
- Articleslast 30 days
- 0
- CVEs exploitedattributed · all time
- 0
- Research reportsall time
- 5
12 articles from 4 outlets since 10 Dec 2025; the latest 43 days ago.
- Article
- First report
- Research report
Show as table
Profile
Written by CyberSIXT from the sources listed below. Updated 26 Oct.
The US Department of Justice described Conti as a ransomware operation used between 2020 and 2022, involving data theft and extortion1,2. The FBI estimated victim payouts exceeded $150 million by January 2022, with more than 1,000 victims worldwide1.
Security Affairs reported that Oleksii Oleksiyovych Lytvynenko received four years in a US prison for wire fraud conspiracy linked to Conti1. Court documents cited by Security Affairs said he joined a Conti team around September 2021 and was directed to develop a loader to deliver software for further attacks1. SecurityWeek reported that Conti shut down in May 20223.
Sources
- Conti Ransomware Developer Sentenced After Irish Arrest and Extradition · Security Affairs · 2026-09-13
- Conti Ransomware Developer Sentenced to Four Years in Prison · DataBreaches.net · 2026-09-11
- Ukrainian admits guilt in Conti ransomware case, faces 20 years · SecurityWeek · 2026-06-15
Names and sources
- Conti
- CyberSIXT coverage
MITRE ATT&CK® techniques
No MITRE ATT&CK® techniques are recorded for Conti.
Also mentioned alongside Conti (not attributed)2 CVEs in the same articles
These articles name both the actor and the CVE. They do not attribute exploitation of these CVEs to Conti.
- Conti Ransomware Developer Sentenced After Irish Arrest and ExtraditionSecurity Affairs
- Conti Ransomware Developer Sentenced to Four Years in PrisonDataBreaches
- Conti Ransomware Developer Sentenced to Four Years in PrisonSecurityOnline
- Gunra Ransomware Gang Exploits Fortinet Flaws, Bypasses MFADark Reading
- Ukrainian admits guilt in Conti ransomware case, faces 20 yearsSecurityWeek
- Ukrainian national pleads guilty to Conti ransomware roleSecurity Affairs
- Ukrainian admits Conti ransomware conspiracy after US extraditionDataBreaches
- Ukrainian hacker pleads guilty to Conti ransomware role worldwideSecurityOnline
- UNC3753 gang uses vishing and USB drops to steal legal dataSecurity Affairs
- Latvian jailed 102 months for ransomware gang's 54 company spreeDataBreaches
- DragonForce: The Rise of a New “Ransomware Cartel” Built on LockBit and Conti DNASecurityOnline
- Akira ransomware: FBI tallies 250 million in payoutsDataBreaches
The latest 12 are listed. See all 15 articles in the timeline.
Research reports
- Rewterz Threat Alert – Leaked Conti Ransomware Used to Target Russia - Active IOCs - Rewterzrewterz.com · 18 Oct
- Leaks of Conti Ransomware Group Paint Picture of a Surprisingly Normal Tech Start-Up… Sort OfCheck Point · 7 May
- Ransomware gang Conti published data of 850 companies | Group-IBGroup-IB · 1 May
- Ransomware attacks airport authority's serverstimesunion.com · 24 Apr
- Anastasia-Inside-BlackBasta.pdfanalyst1.com · 11 Apr 2025