Ransomware note ransomware-note
ransomware-note Conti .txt conti2.txt note-conti-conti2-txt Ransomware note Conti — conti2.txt

Archived note body

Plain text · original whitespace retained

Source and hash

All of your files are currently encrypted by CONTI strain. 

As you know (if you don't - just "google it"), all of the data that has been encrypted by our software cannot be recovered by any means without contacting our team directly. 
If you try to use any additional recovery software - the files might be damaged, so if you are willing to try - try it on the data of the lowest value.

To make sure that we REALLY CAN get your data back - we offer you to decrypt 2 random files completely free of charge.

You can contact our team directly for further instructions through our website :

TOR VERSION :
(you should download and install TOR browser first https://torproject.org)

http://contirecj4hbzmyzuydyzrvm2c65blmvhoj2cvf25zqj2dwrrqcq5oad.onion/

HTTPS VERSION :
https://contirecovery.xyz/

YOU SHOULD BE AWARE!
Just in case, if you try to ignore us. We've downloaded a pack of your internal data and are ready to publish it on out news website if you do not respond. So it will be better for both sides if you contact us as soon as possible.


---BEGIN ID---
[snip]
---END ID---

Related negotiation records

View all 32 records

An explicit alias maps the note family Conti to the Ransomchats actor label Conti. This relationship does not merge either corpus or its statistics.

Up to ten negotiation records from the mapped actor collection
Record IDIndexed dateMessagesThreat actor
20211217 Dec 17, 2021 27 Conti
20211205 Dec 05, 2021 63 Conti
20211112 Nov 12, 2021 32 Conti
20211108 Nov 08, 2021 32 Conti
20210923 Sep 23, 2021 14 Conti
20210904 Sep 04, 2021 17 Conti
20210902 Sep 02, 2021 43 Conti
20210820 Aug 20, 2021 50 Conti
20210812 Aug 12, 2021 46 Conti
20210805 Aug 05, 2021 47 Conti