New York-based threat intelligence firm AdvIntel says Conti began working with TrickBot a year ago. The group that runs Conti may be a Ryuk splinter group, it says. As of December 2021, a Conti ransom demand averaged $657,000, according to research firm Coveware. The operation largely eschewing the use of third-party initial access brokers, and its being run as a tightly controlled group, including training its own network penetration specialists. Security experts say Conti-wielding attackers have likely earned profits worth hundreds of millions of dollars.”]
Source: https://www.cuinfosecurity.com/cybercrime-moves-conti-ransomware-absorbs-trickbot-malware-a-18573

