Record · corpus.blog/posts/01a0f863-0a43-7157-8e27-17d03effca80

Lessons from the Conti Leaks

blog.bushidotoken.net · published 17 April 2022

A record is what was published and who pointed at it. The text of the post is not held here: read it at the source, or at its Wayback capture.

Read the post at blog.bushidotoken.net Wayback capture

0blogs citing

First cited: —
Most recent: —
Rank this month: not ranked
External links: 43
Words captured: 1,355

Cited by

No blog we hold has cited this post yet.

Links from this post

Link

Host

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjK4s0yBJinn3oDemgAk9et_aeZrqX-j7NskswvwbwKt24ni6O78hTkh_gp_2M9AepjDiLD7I0LUjfhpbJfjMtH7MhNb9QJoqtukMd-OzU7SiRolCsUz9xABIdJ4jnk7yErZEMqWk2jylWJhQ-NBYkRcXkwK_awUJvaCL_s_IFjO9hnNi-w2q-Jamy3bw/s1153/WizardSpiderStructure.png

blogger.googleusercontent.com

https://research.checkpoint.com/wp-content/uploads/2022/03/map_index_v2.html

research.checkpoint.com

https://ddanchev.blogspot.com/2022/02/exposing-conti-ransomware-gang-osint_28.html

ddanchev.blogspot.com

https://twitter.com/VK_Intel/status/1498761290709409792

twitter.com

https://twitter.com/VK_Intel/status/1498400616615395328

twitter.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhhz5olg621LHomvcDoWiEkYLQ2tEB2HX5fyEmv9kdmnAmfLg33r0cFqGR1bPmrmpH1cECun-6zH5M1CNnuV45nqbarwvS-BcZdLqJZh80V0M89fe2SBe5mgeOncnZgImrBvqnna5NpRtEUZv5wDvfoIF53cg73wg0f2UQ13LENEjipL17Q4AoKvJt56A/s864/ContiOSINTteam.png

blogger.googleusercontent.com

https://www.cyjax.com/2021/04/20/wizardspider-using-legitimate-services-as-cloak-of-invisibility/

cyjax.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjTPbmEDdYyYKU5kDs4z5qZrpCfaNMZdXVwzaXYonfY_wFBapwPmv_n5u2tAA8nDFX0MCVw6Zf8PXwsAiGX8wUiiUjVcHI3cW_j-SLOF1JI9xTLy0SuQUHBZrm2aXQTazdOfJ-8EXzXfoqVGEhMDGBIQ2EQbqOeSmEqXjaJGmCE5HiRe36jnrCQJvVJGQ/s2894/phishingtemplates.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjM9CIG44PZXqWwms60R3Dp2h6ZE9O61B8h_3t6eNrKxFyQOK8Kl2NUipkCa2gMAyEUFgH-zjoYN-ez-Zl8BRfDhS75D7ValTqtkMRNyi-BPRmytMMJqbU1-9pXJ7R6_HU0HDn2x1MO_IUYSzZO5UtOZKatZsUGuxsYtb9EyFMUECTIHs7iuZRSL8VF6A/s1513/SpamDashboard.jpg

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEin1X93TNYNf2HvBvvPDthNKfyvoeEWXV9o1PTGIZ7e12hFHkEUgOw5P96n_wB5O3U2wApRD6Tko5dbTw1iZACS6-gwcvwufIO-ClaQNh3QmTi0v-2z3_RMKYChi9rdsDIl8chga95TushlgQXcoYANUUmMpgH1-2fq90UXZaFFCHaVOlQf3zF6JPcnVA/s1529/FUDtest.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhUdduSfKZGdctV0CvTZIEL_frpD2TxfLzzXvAqZw0GKiPpNGpsziLxZcNZpTY3AUKiHJg7uFCYRP-ayS_J40f1041sNwYaX8KG73I805-xFnBTmY_fi0CjcwOShl7ZtRsJvXc_FTY5oPVJJS12A2dvma49GZOwMyQYiQqPrWDNdlmVR50n1aQxxS0QYw/s2328/VPS.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjFn4glgDXla3PSRRFsJa7pn6sOW7LsTeb7rz1RIU6r6Uw7jYO9CllSCre1NkdEp9NA6wriBzCxrGY-BxQeQEyCF_bB2BPTf_iFG-vYt48p-JUop_oA-L1O2s2JmxDifFfzlGVR07VSEY7Acn9jnmkMNYbd2pXUyupzwlXxmO5WnPa0L8825hKE40L9Yw/s1744/botpanel.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhstNx-JFrEydj24nEsUbrWs94qlrHKgU8sN7qHVksTAvWHm0JQVpwfMO5_IobbUuHK7c07DZMe9Gi1qkSlIbxzJHJB0BLQzcdSRtA415dSH04vqZxttpmvy_CcyVxSTpbsjE-pW6jPWLFu8RKA7HnyKxIvDo22VGdofxyCwucDVn66inROZQhrU0IFHQ/s1085/MicrosoftStore.jpg

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh2vGYvH5lJ5kluZCM7Y7Do5xkr9xY9DN5uSVIiY9JLksLPIl3PkALG7sUmXD_ne04yJTQQp1QNFRNinE3JOuA4pwoCg-fyePaDdt9OB6iqCe6pJm34UNZoWHax6DARxbXCkYsH6mq76KRUYZSO5uPSvXEArBKhd-JJLX8FpT-nZhsbTpRcJHmqNSB-PQ/s1042/PetitPotam.jpg

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjhgFDEEXkr3BLAQxV63_tUchheHhN_OL5c0hj4vuO2woyof7-V1x1ofhHge7dFfBvAscW-X2wjnvApJ7V4GxwD3-b1Gu2_GxY3luQg2yuMDIzw-YVl6eT7tRo6yYyAR47OF8buMnrLa74vOZRPQlr6_UH2EC6LhsXQfAwpVhAZA3dow0m1ZApDcg4BHw/s1706/0day.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhCLmEsJpFeh7MB-ld7GIveQIwGGwK-fUsaiuQMN80NWajuRfylWiWIGm14XQiWcd0xz6ZYAg2hQV0TJVkJhRIPF4SSRZ4kw3axhQl-KI5-HxlHhQpE83rSergn6FdqK9eM0fvo972SK49fO9bZ3sOvBHfDn-JUDc_D3SibFSzKoavdl8ua1DZP7y9JRQ/s1400/Turla.png

blogger.googleusercontent.com

https://twitter.com/BushidoToken/status/1512401043690336256?s=20&t=W-3i9aeB0IxJZlvWuv5Zpg

twitter.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgEpBTiIyO-TC1MBvDRWBCk5Zlh1tmDVyKaXugd1EYvb34bSWkoP2Z41j5qUNiZuynZUMlrpNq7ld5TdlkAdUEMh8EzvQ24Eg4INxKKrXC6hAkXYVrZFYSxtOMBDHjwXEp7MvZbLgvrkJ6eCiTjdcgQnjKg2gRyVeGRVYd-jTLRWAdqvIBsO3n-H737lQ/s3816/Forums.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjQB0QnfVWq9G0p3jzw0S56lknPxAUUzymXpj-5RBTIAQGqJpd1lPit-Sf2ARHH2sX-i_AEGJCqHnJUEKBPNy_npFlLhGNaPZPNuWfvfeYn1OM6h4ym-yLFf-EjxlOmqkBY-CAK95R-fcpG1RGFLWzrRVXaHq5OB-dR8iDqHY2aSc2hSedOQDHLkQ9LjA/s1754/McDuckGroupCardShop.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjvEuQJJs0V5257qnBFWlTPvY1mJxRhQwl9GVlpPe03iOYgEoFes0EvriJ98i6HH_Hyn5WgTv011rG7lAFXOpfuHqJ4fX0v8IBx8W9IpZoBP7w7s6jyiMmzuL_4RKziCQeuX6k7zD6Nm-KmoT3JSNrtqErW2quOHmbRF4ASytoIdJZ5_oPGctRBHfUvTw/s676/REvilMaze.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhYmnaY2Y8Zo1SAZ0otbFoRBJPGAD9fPLB1wiweRhT6D2KymTtCTJUER1xlqSUJKFVAuwO6nF4U0iA_-nPAKOffApSEw3Loe59i1atzvDMHadC9HbX823CPoShKPMuCTIS6NrHH1uo62MEk0j3x7Ki1Hx-8nVUYkBWctvqdTrp-v4R2zNcwZ9WO1vvG5g/s1359/REvilArrests.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhGxgyOlO4dCa0T_qTwkqmy9cvhQbFZeL5ng6OcxCLMsBhORz6IpdNncyCXA-bGHB_eFj9mTecyO04ZJTVg_cMqjBLy-lvGjY77NHqvYcRNlvjd8kHTg63vdgo9koDB5R3FE2fvY3mynqfgC2pCeoEa28qOcqfc3-cBLqq-l_YnUYakkUsRAbZ5uVP1AA/s1956/Cryptohazard_Maze.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh-fTmTyMfqBLkmD3gkmHtaF1plbPpqJQa0uhztFUgfMIL_VYWtIyvWteuqHn1j23VwJQ7tUZyY1tQ3MrFDNiz_tN8dG6wkXx_1ucon_cuyrRRD0aj4mX2P-sqzvVMvK4gEWGHKMS3EQzbwNgnpy6m-aSfdufR_e2Km06CW0fCUZmgBbZ7V65FSiPsP4Q/s1396/AvosBlackM.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEg2s_UBg5gW51OLNZhZ8akGKXODVIa8TZbnFKnTdw2hVNsaYTyCVNrmF4nIqc4YvRBwS3TFDAL07JjKSgDeZ-R_rb_5R1ATM8ZUEPWI4isj0J4lT9p9hUB-9IyHULJi3J18s_0MxR-AC68udm-TDh9fAqKfhDSCcD1OPrPd94ZHt_7dOAyKhB0567H9ng/s3816/Crylock.png

blogger.googleusercontent.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhssRn3IN4hYvm2pYZBNydIBGGf7I2duPLiaN55kDeMHEtQMZfM0i2qlXfXw7sckVsJRsa21LTcCb0YN8Wa3yM5pwpUAtbEuYMgvykhXy3K_8qLDQUftWlX2VuyXzTnKQ0rK2ZmOZRugqR45ltO6d7WS5x06e3Ekwb6NidrwMRuwawJ1fISlipSASlAag/s1901/Contiv3Modes.jpg

blogger.googleusercontent.com

https://blog.talosintelligence.com/2021/09/Conti-leak-translation.html

blog.talosintelligence.com

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEi9DlS8dKMS5x95mbdg17AvDICnukIwW3S24Vtpvf2Nx1DjmMXXtH4-_qUIQNX_dp7Mm8b3WEavsuDi-Fm_u2YWvQu09YO9_19yPWJYBoQSGvEmZtVTtp3lsFA9Kf5HZBas7YHIMMJccKsls54OiZtLPAvvDH-QzCrVYhF-LrSMCk6LoIv64J7dkPreEQ/s1074/contivics.jpg

blogger.googleusercontent.com

https://www.bleepingcomputer.com/news/security/hackers-use-contis-leaked-ransomware-to-attack-russian-companies/

bleepingcomputer.com

https://bazaar.abuse.ch/sample/7f6dbd9fa0cb7ba2487464c824b6d7e16ace9d4cd15e4452df4c9a9fd6bd1907/

bazaar.abuse.ch

https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEj8RFsHdFbOWVEI7K9uSvTwWhXpR8CEED-9Lka8gEnYCDennEZWHcVeLl2fWG6Oy-FLpZj3dKWJe_VdnPFsd1S1QWrNNc3j3wtMh7FseuH-ou3DIle98TR4jh1laUo0Sc1SdBI9W1IvKBPwWWfpGzNexxy1_xcpAo2YS0iHfJEKeIrFx7O9VatQQiHzFQ/s1508/NB65.png

blogger.googleusercontent.com

https://www.trellix.com/en-gb/about/newsroom/stories/threat-labs/conti-leaks-examining-the-panama-papers-of-ransomware.html

trellix.com

https://www.secureworks.com/blog/gold-ulrick-leaks-reveal-organizational-structure-and-relationships

secureworks.com

Move fast and commit crimes: Conti’s development teams mirror corporate tech Read at the source ↗

intel471.com

Conti puts the ‘organized’ in organized crime Read at the source ↗

intel471.com

https://arcticwolf.com/resources/blog/karakurt-web

arcticwolf.com

https://www.trmlabs.com/post/analysis-corroborates-suspected-ties-between-conti-and-ryuk-ransomware-groups-and-wizard-spider

trmlabs.com

https://www.wired.co.uk/article/conti-ransomware-russia

wired.co.uk

https://twitter.com/TheDFIRReport/status/1498642505646149634

twitter.com

https://twitter.com/c3rb3ru5d3d53c/status/1499130574321197058

twitter.com

https://twitter.com/c3rb3ru5d3d53c/status/1499570311460753408

twitter.com

https://twitter.com/albertzsigovits/status/1498237945685422087

twitter.com

https://twitter.com/pancak3lullz/status/1499108972258906123

twitter.com

https://twitter.com/pancak3lullz/status/1498347648637624326

twitter.com