conti

Conti was one of the most prolific and financially damaging ransomware operations in history, attributed by the FBI and international law enforcement to a Russia-based cybercriminal organization known as Wizard Spider with suspected ties to Russian intelligence. Active from 2020 until mid-2022, the group operated with salaried staff, a corporate-like internal structure, and collected hundreds of millions in ransom payments including devastating attacks on the Irish Health Service Executive and the Costa Rican government. Conti dissolved in May 2022 following the public leak of its internal chat logs by a Ukrainian member; its personnel subsequently formed or joined multiple successor operations including Black Basta, Royal (→BlackSuit), Karakurt, SilentRansomGroup, Quantum, and others.