R
Ransomwhere.org
Live MapLatest VictimsGroups
PaymentsTTPsIdentifyNewsDataAPI
LIVE
Ransomwhere.org

Real-time ransomware intelligence platform. Tracking threat actors, victims, and payments to raise awareness and help defend against ransomware attacks worldwide.

Platform

  • Live Map
  • Latest Victims
  • Groups
  • Payments
  • Identify
  • News

Resources

  • Data & Methodology
  • API Docs
  • NoMoreRansom
  • Ransomware.live
  • CISA Advisories

Data sourced from Ransomware.live API. For informational purposes only.

© 2026 Ransomwhere.org

Groups/conti

conti

Inactive

Conti is an extremely damaging ransomware due to the speed with which it encrypts data and spreads to other systems. It was first observed in 2020 and it is thought to be led by a Russia-based cybercrime group that goes under the Wizard Spider pseudonym. In early May 2022, the US government announced a reward of up to $10 million for information on the Conti ransomware gang.

351
Victims
3
Sites

Known Leak Sites

continewsnv5otx5kaoje7krkto2qbu3gtqef22mnr7eaxw3y6ncz3ad.onionDLS
continews.clickDLS
continews.bzDLS

Victims (351)

Live
Alliance Steel
conti
LCRD
conti
The Contact Company
conti
Central Restaurant Products
conti
Schaumburg Park District
conti
RateGain
conti
Imenco AS
conti
Concepts in Millwork
conti
Eurofred
conti
Agile Sourcing Partners
conti
Alimentos y Frutos S.A.
conti
Worksoft
conti
Omicron Consulting S.r.L
conti
Pianca
conti
Allcat Claims Service
conti
FOR BlackCat and LockBit advert
conti
For Costa Rica and US terrorists (Biden and his administration)
conti
Cjk Group, Inc.
conti
EYP
conti
LARON an otp industrial solutions company
conti
Attica Holdings S.A.
conti
For Peru
conti
Elgin_Ca
conti
Jasec
conti
Attica Group
conti

Top Targeted Countries

Unknown336
United States11
Canada2
Ireland1
United Kingdom1

Profile

:
:
:
:
:

Activity

Total victims351
Countries affected5
Last seen