Skip to main content
Explore our brands An Informa TechTarget Publication

A highly cited and "interesting" blog post analyzing this specific archive is by the researchers at Trellix. Key Insights from the Archive

: The 31.7z file specifically contained components of their backend infrastructure and source code for various tools used in their attack chain, which helped security researchers develop better detection methods.

Analysis of these files (often referred to as the "ContiLeaks") provided a rare, behind-the-curtain look at how a professionalized ransomware syndicate operates: