Conti Ransomware Group Diaries, Part II: The Office
Summary: A Ukrainian security researcher leaked almost two years of internal Conti chat logs, which show the ransomware gang organized into departments including coders, testers, administrators, reverse engineers and penetration testers, with 62 employees as of July 18, 2021 and payroll at 87 by July 30, 2021. Employees were paid $1,000 to $2,000 monthly in Bitcoin on the 1st and 15th, worked staggered 5-day weeks for 24/7 coverage, and the group repeatedly lost control of bots over unpaid invoices for servers, VPNs and domains.
Key Takeaway: Conti's May 14, 2021 attack on Ireland's Health Service Executive shut down national and local networks and took until Sept. 21, 2021 to fully restore, at an estimated cost of more than $600 million - a reminder that a group losing bots to a forgotten $960 renewal can still take a health system offline for months.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026