Conti Ransomware Gang: An Overview
Summary: Unit 42 describes Conti as one of the most ruthless ransomware gangs it tracks, having spent more than a year attacking hospitals, 911 dispatch carriers, emergency medical services and law enforcement agencies, including a mid-May attack that shut down Ireland's entire national healthcare IT network and forced cancellations of appointments, shutdowns of X-ray systems and delays in COVID testing. The FBI has linked Conti to more than 400 cyberattacks worldwide, three-quarters based in the U.S., with demands as high as $25 million, and Unit 42 reports the group has taken ransoms without returning victims' files.
What you should know: Conti has collected payment and then disappeared without restoring files, and in another case reversed a promise to provide a list of accessed data - so a security leader weighing a ransom payment has no basis to assume this group will honor the deal.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Cybercrime & Law Enforcement
- Related
- Gootloader Malware Disrupted After Infecting 25,000 Computers Cyber Risks · Nov 13, 2026354 dark web vendors and buyers arrested in Operation Tor Nado Cyber Risks · Nov 13, 2026Law Enforcement Disrupts Gootloader, CastleRAT, and StealC Infrastructure Cyber Risks · Nov 13, 2026