US Offers Up to $15 Million for Information on Conti Ransomware Group
The US government is offering up to $15 million for information that helps identify the leaders and members of the Conti ransomware group. Specifically, up to $10 million is being offered for information on the identities and locations of Conti leaders, with an additional $5 million available for any information leading to the arrest or conviction of group members or associates involved in Conti ransomware attacks.
According to an official statement from the US State Department, Conti is considered one of the most “profitable” ransomware groups in recent years. The group has attacked over 1,000 victims, who have collectively paid more than $150 million in ransom to the hackers.
About the Conti Ransomware Group
Conti is one of the most active groups operating under the Ransomware-as-a-Service (RaaS) model. Experts link the group to the Russian-speaking cybercriminal organization Wizard Spider, which is also known for other malware such as Ryuk, TrickBot, and BazarLoader.
Recent Attack on Costa Rica
One of Conti’s latest victims was Costa Rica. Last week, the newly elected president of Costa Rica, Rodrigo Chaves, was forced to declare a state of emergency after Conti attacked several government agencies.
According to Bleeping Computer, a 672 GB data dump, allegedly containing information stolen from Costa Rican government institutions, was published on Conti’s “leak site.”
It appears that at least the Ministry of Finance was affected by the breach. The ministry has yet to fully assess the scale of the incident and its impact on taxpayer data, payments, and customs systems. Media reports indicate that the hackers demanded a $10 million ransom from the Ministry of Finance, but the government refused to pay. Nearly all digital services of Costa Rica’s Ministry of Finance have been unavailable since April 18.
Government Agencies Impacted by the Attack
The following agencies were listed on Conti’s site as having been affected by the attack:
- Ministry of Finance of Costa Rica (Ministerio de Hacienda)
- Ministry of Labor and Social Security (MTSS)
- Social Development and Family Allowances Fund (FODESAF)
- Interuniversity Headquarters of Alajuela (SIUA)
Other agencies and organizations in Costa Rica reportedly impacted by the large-scale Conti attack include:
- Administrative Board of the Electrical Service of Cartago Province (Jasec)
- Ministry of Science, Innovation, Technology, and Telecommunications
- National Meteorological Institute (IMN)
- Radiographic Costarricense (RACSA)
- Costa Rican Social Security Fund (CCSS)