Joint Cybersecurity Advisory - AA21-265A: Conti Ranswomware TLP:WHITE

A joint CISA/FBI/NSA advisory on Conti ransomware describes the actors, their techniques and typical attack chain (initial access via phishing and compromised credentials, use of TrickBot and Cobalt Strike, lateral movement, encryption, data exfiltration, and double extortion), and provides indicators of compromise, ATT&CK mappings, and recommended mitigations such as MFA, network segmentation, patching, endpoint detection and response, and incident response guidance.