Conti — 20210904

Select a message number for a stable citation link. Text remains selectable; hard-wrapped source lines are joined for reading, intentional blank-line paragraph breaks remain, and written URLs remain inert.

1. Message 001 From Conti Actor / other Date 4/9/2021, 8:58:53 AM

   Hello, are you ready to negotiate?

2. Message 002 From Victim Victim Date 4/25/2021, 9:10:41 AM

   please help, my files are encrypted!!!

3. Message 003 From Conti Actor / other Date 4/25/2021, 10:49:00 AM

   Please introduce yourself. You title and company name.

4. Message 004 From Victim Victim Date 5/6/2021, 11:34:38 AM

   company - [redacted]

5. Message 005 From Victim Victim Date 5/6/2021, 12:38:28 PM

   did you download any data from our system?

6. Message 006 From Victim Victim Date 5/6/2021, 12:38:48 PM

   what is the next step?

7. Message 007 From Conti Actor / other Date 5/6/2021, 1:02:43 PM

   Yes, we did. I will upload the 30% of the files we currently hold as a list. You will be able to choose any 2 random files of your choice from the list and we will upload them as a proof.

8. Message 008 From Conti Actor / other Date 5/6/2021, 1:05:37 PM

   As you already know - your network and all of your data were encrypted by CONTI team. Besides the encryption process we've downloaded a large pack of your internal documents and files that will be published in case our negotiations fail. How it happens can be seen on our website https://continews.icu The recovery price is $980000 (17 BTC). If you want to make sure we can recover all of your data - you can send us the two files of your choice and we will decrypt them free of charge. If we reach mutual agreement your will be provided with decryption tool, none of your internal data will be published and you will be provided with security tips on how to avoid further breaches. We strongly recommend to review our offer in a timely manner and contact your insurance provider to avoid additional expenses from your side on security software and on building the new network from scratch.

9. Message 009 From Conti Actor / other Date 5/6/2021, 1:05:59 PM

   30 % listing.txt [ 1.3MB ]

10. Message 010 From Conti Actor / other Date 5/6/2021, 1:08:17 PM

    Data Pack [redacted].zip [ 38.9MB ]

11. Message 011 From Conti Actor / other Date 5/8/2021, 9:29:23 AM

    you can send two random files for free test decrypt

12. Message 012 From Victim Victim Date 5/8/2021, 11:23:48 AM

    NTUSER.DAT_[redacted]_.TM.blf.[redacted] [ 65kB ]

13. Message 013 From Victim Victim Date 5/8/2021, 11:24:03 AM

    here is the encrypted file please help us fast.

14. Message 014 From Victim Victim Date 5/8/2021, 11:24:57 AM

    Are you there? Please reply us fast??

15. Message 015 From Conti Actor / other Date 5/8/2021, 3:54:19 PM

    yes. We're processing.

16. Message 016 From Conti Actor / other Date 5/8/2021, 3:57:42 PM

    We are ready to provide a 25% discount if the payment will be made within next 24 hours. The btc wallet for the payment is: [redacted] The decrypted file will be uploaded within 2 hours.

17. Message 017 From Conti Actor / other Date 5/8/2021, 7:30:59 PM

    NTUSER.DAT_[redacted]_.TM.blf [ 64kB ]