Skip to content

Conti

Defunct Russia-linked ransomware group that extorted over $150M from victims before disbanding in 2022; its leaked source code now underpins newer malware.

Known aliases

  • Conti
  • Conti group
  • Conti ransomware

Current stories

securityConfirmed5 publishers

A Conti developer got four years for holding stolen data from 12 of the group's 1,000-plus victims

Two years of extradition work and a guilty plea produced a four-year sentence for one Conti developer, measured against a group that hit more than 1,000 organizations and reappeared under new names.

Perspective Coverage

5 publishers
Builder
Builder 20%
Operator
Operator 68%
Investor
Investor 12%

Reality

Evidence70
Adoption
Not scored
Hype gap+20
Incentives60
Confidence75
securityConfirmed5 publishers

Karen Vardanyan's 24-month Ryuk sentence is mostly time he has already served

Karen Vardanyan was arrested in Kyiv in April 2025, extradited within two months, and sentenced this week to 24 months that run against custody already served. Prosecutors had argued that only meaningful sentences change a cybercriminal's math.

Perspective Coverage

5 publishers
Builder
Builder 9%
Operator
Operator 80%
Investor
Investor 11%

Reality

Evidence68
Adoption
Not scored
Hype gap+10
Incentives40
Confidence66
productOne report1 publisher

ShinyHunters says it controls the private keys to Cl0p's onion address

ShinyHunters told BleepingComputer it took Cl0p's source code, the contents of /var/log and the private keys to the gang's Tor address, and gave Cl0p 72 hours to pay. That last item decides who can host the same onion URL.

Publishers:techradar.com

Reality

Evidence32
Adoption22
Hype gap+34
Incentives82
Confidence44
investOne report1 publisher

Conti's $150m in victim payouts produces one four-year sentence

The Justice Department sentenced Oleksii Lytvynenko to four years over Conti, the ransomware the FBI ties to more than $150m in victim payouts as of January 2022 and to attacks in 47 states. Four others stand charged in the same district.

Publishers:justice.gov

Reality

Evidence64
Adoption58
Hype gap+28
Incentives74
Confidence66
securityOne report1 publisher

Akira advisory update: $244m taken, one SonicWall CVE, three controls to audit now

Nine agencies across four countries refreshed the #StopRansomware Akira advisory on Nov. 13 with indicators current to November 2025 and a three-item action list.

Publishers:cisa.gov

Reality

Evidence79
Adoption66
Hype gap+4
Incentives24
Confidence71
securityOne report1 publisher

Two years, 117 identified children: the only Com case this week with an outcome attached

A UK sentencing is the week's single security item measured in results rather than warnings, and the arithmetic is unflattering: 730 days of custody against 117 identified victims.

Publishers:sentinelone.com

Reality

Evidence52
Adoption63
Hype gap+18
Incentives58
Confidence46