Ransomware note ransomware-note
ransomware-note Conti .txt conti3.txt note-conti-conti3-txt Ransomware note Conti — conti3.txt

Archived note body

Plain text · original whitespace retained

Source and hash

All of your files are currently encrypted by CONTI ransomware. 
If you try to use any additional recovery software - the files might be damaged or lost.

To make sure that we REALLY CAN recover data - we offer you to decrypt samples. 

You can contact us for further instructions through our website : 

TOR VERSION : 
(you should download and install TOR browser first https://torproject.org) 

http://m232fdxbfmbrcehbrj5iayknxnggf6niqfj6x4iedrgtab4qupzjlaid.onion 

HTTPS VERSION : 
https://contirecovery.info 

YOU SHOULD BE AWARE! 
Just in case, if you try to ignore us. We've downloaded your data and are ready to publish it on out news website if you do not respond. So it will be better for both sides if you contact us ASAP.

---BEGIN ID---
[snip]
---END ID---

Related negotiation records

View all 32 records

An explicit alias maps the note family Conti to the Ransomchats actor label Conti. This relationship does not merge either corpus or its statistics.

Up to ten negotiation records from the mapped actor collection
Record IDIndexed dateMessagesThreat actor
20211217 Dec 17, 2021 27 Conti
20211205 Dec 05, 2021 63 Conti
20211112 Nov 12, 2021 32 Conti
20211108 Nov 08, 2021 32 Conti
20210923 Sep 23, 2021 14 Conti
20210904 Sep 04, 2021 17 Conti
20210902 Sep 02, 2021 43 Conti
20210820 Aug 20, 2021 50 Conti
20210812 Aug 12, 2021 46 Conti
20210805 Aug 05, 2021 47 Conti