monti Ransomware
Tracked since Dec 7, 2022
0
victims recorded
0
in the last 30 days
0
CVEs
—
Last activity
Monti is a ransomware group first observed in June 2022 that initially copied nearly all of Conti's leaked source code, pivoting to target government, legal, and healthcare entities, later releasing a new Linux variant in 2023 with significantly less Conti code similarity, and experimenting with an affiliate model.
Vulnerabilities cited for this group
CVEs associated with the group by ransomware.live. Records not yet published here appear without a link.
No CVE associated with this group in the sources.
Observed tools
Credential Theft
Mimikatz · Veeam-Get-Creds
Defense Evasion
Avast Anti-Rootkit driver · GMER
Discovery Enum
SoftPerfect NetScan
Exfiltration
MEGA · PSCP · WinSCP
RMM-Tools
Action1 · AnyDesk
Victims posted on leak sites, according to ransomware.live. Victim names are not displayed. · View on ransomware.live