While working a recent ransomware incident, BlackBerry identified a group whose name and TTPs mimicked the long-standing, popular ransomware crew Conti. Furthermore, the encryptor payload used in the attack was taken from the original group and modified for use with this new group. Who was this doppelganger?

Whether Conti has rebranded as Monti in a bid to mock the former strain or it is just another new ransomware variant on the block.