Advanced Intel was one of the first to notice the changes. notice this appeared on Twitter.

Bad news

• First, the group’s internal infrastructure was shut down. Other internal services such as chat servers are also being retired.
• Bleeping Computer writes that the public source for the origins of “Conti News” and the site for reimbursement negotiations still exists, but the Tor management panels that hackers use to negotiate and publish news on the site have already been disabled.

The only goal Conti wanted to achieve with the final attack was to use the platform as a tool for advertising, arrange his own “death” and then be reborn in the most plausible way. The ulterior motive of the attack on Costa Rica, announced by Conti’s internal leadership, was publicity, not ransom. Internal correspondence between members of the group shows that the ransom demanded was much less than $1 million (despite rumors that the group demanded $10 million and Conti’s own statements that the ransom was $20 million).
– Say experts from advanced Intel.

• Like this The Conti group was split into several groups.
• Experts believe that this criminal organization will play an important role in blackmail for a long time. Instead of the traditional rebranding for hacking groups (and more transformation into a new group, as before, as before), Conti’s leadership is working with other smaller groups of extortionists to carry out the attacks.
• As part of such a partnership, junior hackers are flooded with experienced Pentesters, negotiators and operators from among Conti members.
• And Conti himself gains mobility and the ability to escape the attention of law enforcement, by dividing into smaller cells led by a single leadership.

According to researchers, Conti can be used in this way by HelloKitty, AvosLocker, Hive, BlackCat, BlackByte etc. cooperates with. Advanced Intel also believes Conti members have created a new set of independent teams focused entirely on data theft rather than encryption. These groups are Karakurt, BlackByte and Bazarcall.

It will be remembered that Conti is the largest criminal organization of hijacking hackers led by TrickBot, BazarLoader and Emotet.