Conti — 20210126

Select a message number for a stable citation link. Text remains selectable; hard-wrapped source lines are joined for reading, intentional blank-line paragraph breaks remain, and written URLs remain inert.

1. Message 001 From Victim Victim Date 1/26/2021, 2:27:09 PM

   [redacted]: Hi My system is encrypted I am ready to pay you tell me how much you want & where I have to pay?? Please help me fast I will do it now

2. Message 002 From Conti Actor / other Date 1/26/2021, 2:29:21 PM

   Support: Hello, please introduce yourself and let me know what company do you represent.

3. Message 003 From Victim Victim Date 1/26/2021, 3:31:45 PM

   [redacted]: [redacted] company

4. Message 004 From Conti Actor / other Date 1/26/2021, 4:04:05 PM

   Support: So, are you trying to recover your client's network?

5. Message 005 From Victim Victim Date 1/26/2021, 4:10:55 PM

   [redacted]: nope it's my own system

6. Message 006 From Conti Actor / other Date 1/26/2021, 4:16:41 PM

   Support: So, it's a single system? If yes - I am not sure if you will be able to handle our demands, more than that - I have no idea how it could be encrypted, cause according to our records your company was not under attack by our team.

7. Message 007 From Victim Victim Date 1/26/2021, 4:32:02 PM

   [redacted]: I will handle it. I will pay it

8. Message 008 From Victim Victim Date 1/26/2021, 4:32:42 PM

   [redacted]: Just tell me how much & where I have to pay I will do it. You Don't have to worry about it

9. Message 009 From Conti Actor / other Date 1/26/2021, 4:44:53 PM

   Support: This exact build code was linked with [redacted]. The requested demand for this code is assigned at $1.2mil