Shortly after Russia’s February Ukraine invasion, the CONTI ransomware group’s announcement supporting Russia resulted in a massive information leak. In this research report, BlueVoyant experts aim to shed light on CONTI and describe its methodology and actions in an accessible manner. Among other things, it also examines recently leaked CONTI documentation, tools, and internal messaging, while exploring ancillary effects and its history.

Key findings and takeaways:

• Tools, techniques, and custom scripts leveraged in attacks
• Preferred malware and their execution
• Typical entry and deployment methods
• Learn how to protect yourself and your business