Conti
From extortion.wiki, the ransomware notes archive
4 archived notes associated with the upstream family directory conti. The family label follows ThreatLabz; any link to negotiation records uses an explicit archive alias mapping.
Archived note files
4 supported · 0 skipped| Original filename | File type | Content hash | Source | Internal archive |
|---|---|---|---|---|
| conti1.txt | Plain text (.txt) | e3eb5ee75fd3705a… | Upstream file | Read archived source |
| conti2.txt | Plain text (.txt) | e3f40e43d5d21e88… | Upstream file | Read archived source |
| conti3.txt | Plain text (.txt) | 20d59cc8349d360e… | Upstream file | Read archived source |
| conti4.txt | Plain text (.txt) | c895264a65a7e1dd… | Upstream file | Read archived source |
Negotiation records
Threat actor page: ContiAn explicit archive alias maps the ThreatLabz family Conti to the Ransomchats actor label Conti. Note and negotiation counts remain separate.
| Participants | Source | Archive status | |||
|---|---|---|---|---|---|
| 20211217 | 27 | Conti, Victim | JSON | Indexed | |
| 20211205 | 63 | Conti, Victim | JSON | Indexed | |
| 20211112 | 32 | Conti, Victim | JSON | Indexed | |
| 20211108 | 32 | Conti, Victim | JSON | Indexed | |
| 20210923 | 14 | Conti, Victim | JSON | Indexed | |
| 20210904 | 17 | Conti, Victim | JSON | Indexed | |
| 20210902 | 43 | Conti, Victim | JSON | Indexed | |
| 20210820 | 50 | Conti, Victim | JSON | Indexed | |
| 20210812 | 46 | Conti, Victim | JSON | Indexed | |
| 20210805 | 47 | Conti, Victim | JSON | Indexed | |
| 20210715 | 10 | Conti, Victim | JSON | Indexed | |
| 20210708 | 25 | Conti, Victim | JSON | Indexed | |
| 20210628 | 34 | Conti, Victim | JSON | Indexed | |
| 20210611 | 48 | Conti, Victim | JSON | Indexed | |
| 20210602 | 81 | Conti, Victim | JSON | Indexed | |
| 20210520 | 101 | Conti, Victim | JSON | Indexed | |
| 20210517 | 69 | Conti, Victim | JSON | Indexed | |
| 20210517 | 56 | Conti, Victim | JSON | Indexed | |
| 20210513 | 78 | Conti, Victim | JSON | Indexed | |
| 20210428 | 13 | Conti, Victim | JSON | Indexed | |
| 20210426 | 12 | Conti, Victim | JSON | Indexed | |
| 20210316 | 63 | Conti, Victim | JSON | Indexed | |
| 20210315 | 49 | Conti, Victim | JSON | Indexed | |
| 20210305 | 45 | Conti, Victim | JSON | Indexed | |
| 20210219 | 12 | Conti, Victim | JSON | Indexed | |
| 20210126 | 9 | Conti, Victim | JSON | Indexed | |
| 20210107 | 139 | Conti, Victim | JSON | Indexed | |
| 20201230 | 146 | Conti, Victim | JSON | Indexed | |
| 20201121 | 6 | Conti, Victim | JSON | Indexed | |
| 20201109 | 255 | Conti, Victim | JSON | Indexed | |
| 20201019 | 9 | Conti, Victim | JSON | Indexed | |
| 20201017 | 78 | Conti, Victim | JSON | Indexed |
Dataset provenance and citation
| Upstream collector | Zscaler ThreatLabz |
|---|---|
| Source repository | ThreatLabz/ransomware_notes |
| Source directory | conti |
| Snapshot commit | 2bbf5b4ecda84837c4a71af1a99c6821920f051a |
| Dataset snapshot | Jun 26, 2026, 10:27 PM |
| Synchronization time | Jul 22, 2026, 11:47 AM |
| Source status | Complete |
| License | MIT; preserved notice |
| Stable internal citation | extortion.wiki. Conti ransomware notes. ThreatLabz/ransomware_notes snapshot 2bbf5b4ecda84837c4a71af1a99c6821920f051a. https://extortion.wiki/notes/conti/. |