Ontario security company uncovers ransomware gang affiliate using Cobalt Strike

By: The Canadian Press Posted: Last Modified:

Advertisement

Advertise with us

TORONTO - An Ontario security software company says it has discovered a new affiliate of a ransomware gang that has pledged allegiance to Russia carrying out attacks with threat emulation technology.

Read this article for free:


or

Already have an account? Log in here »

To continue reading, please subscribe:

Subscribe and receive a limited-edition Free Press branded hat or tote.

Digital Subscription

One year of digital access for only $205*

  • Enjoy unlimited reading on winnipegfreepress.com
  • Read the E-Edition, our digital replica newspaper
  • Access News Break, our award-winning app
  • Play interactive puzzles

*First annual payment billed as $205.00 + GST for one year. This annual subscription will automatically renew at $233.00 + GST every 52 weeks (10% off the regular annual price of $259.35). Offer available to new and qualified returning subscribers only. Cancel any time.

To continue reading, please subscribe:

Add Free Press access to your Brandon Sun subscription for only an additional

$1 for the first 4 weeks*

  • Enjoy unlimited reading on winnipegfreepress.com
  • Read the E-Edition, our digital replica newspaper
  • Access News Break, our award-winning app
  • Play interactive puzzles
Start now

*Your next Brandon Sun subscription payment will increase by $1.00 and you will be charged $17.95 plus GST for four weeks. After four weeks, your payment will increase to $24.95 plus GST every four weeks.

Hey there, time traveller!
This article was published 21/03/2022 (1601 days ago), so information in it may no longer be current.

TORONTO – An Ontario security software company says it has discovered a new affiliate of a ransomware gang that has pledged allegiance to Russia carrying out attacks with threat emulation technology.

Waterloo, Ont.-based eSentire says its threat response unit has been tracking an affiliate of Conti since August and discovered the group used Cobalt Strike in two attacks around Valentine’s Day, as tensions between Russia and Ukraine were escalating.

The firm calls Cobalt Strike “the Swiss army knife of cyber intrusions” because the tool can replicate and launch sophisticated cyberattacks that can test security detections, protections and response systems, but is being used by threat actors to compromise IT environments and spread throughout networks.

A woman uses a computer keyboard in North Vancouver, B.C., on Wednesday, December, 19, 2012. An Ontario security software company says it has discovered a new affiliate of a ransomware gang that has pledged allegiance to Russia carrying out attacks with threat emulation software.THE CANADIAN PRESS/Jonathan Hayward
A woman uses a computer keyboard in North Vancouver, B.C., on Wednesday, December, 19, 2012. An Ontario security software company says it has discovered a new affiliate of a ransomware gang that has pledged allegiance to Russia carrying out attacks with threat emulation software.THE CANADIAN PRESS/Jonathan Hayward

The threat response unit intercepted an attack using Cobalt Strike to try to breach an unnamed children’s charity and hours later, found it being used to target a legal firm.

It says Conti is comprised of sophisticated ransomware developers and operators known for compromising and disrupting the operations of health-care organizations, emergency services, municipalities, oil transportation and electric companies and schools.

Conti claimed responsibility for a cyberattack on a Quebec smelter Rio Tinto operates earlier this month.

This report by The Canadian Press was first published March 21, 2022.

Advertisement Advertise With Us

Report Error Submit a Tip

Advertisement

Learn more about Winnipeg Free Press Advertising solutions

More Stories

MIKE DEAL / FREE PRESS WPS Chief Gene Bowers says community outreach teams will work with uniformed officers on continued drug-enforcement efforts.

Police resuming drug-enforcement crackdown, working with outreach community

Chris Kitching 7 minute read Preview

Police resuming drug-enforcement crackdown, working with outreach community

Chris Kitching 7 minute read Thursday, Aug. 6, 2026

Winnipeg police are relaunching a drug enforcement campaign in some neighbourhoods Friday after they say a 10-day sweep led to more than 100 arrests and a drop in reported crime earlier this summer.

Police said the renewed initiative, targeting open drug use and trafficking, will continue into November with an outreach-first approach and a partnership with a coalition of community groups in response to criticism of the initial campaign.

“While there was a great deal of support for the enforcement actions we undertook to address public safety issues, there was also criticism about the lack of collaboration,” Winnipeg Police Service Chief Gene Bowers told reporters.

“At that time, I acknowledged that community organizations should have been part of our efforts. Hence, we’re here today.”

Read
Thursday, Aug. 6, 2026
Photos by ROBERT LEE / FREE PRESS Beryl Boney, who grew up in Trinidad and Tobago, has spent 25 years transforming her block on St. Mary’s Road with flowers and vegetables, including ceramic chickens that nod to her Caribbean roots.

Vibrant Norwood apartment garden a labour of love to honour green thumb’s late partner

David Sanderson 7 minute read Preview

Vibrant Norwood apartment garden a labour of love to honour green thumb’s late partner

David Sanderson 7 minute read 6:00 AM CDT

St. Vital resident Rob Duncan can’t pinpoint when he first noticed an award-winning garden blanketing the grounds of a two-storey St. Mary’s Road apartment block, near Coniston Street.

Perhaps he was on his way home from work and caught a glimpse of it out of the corner of his eye. Or maybe he was running errands in the Norwood Flats area and paused to admire the array of annuals, perennials and potted plants that extends from the block’s doorway to the front curb.

What Duncan does know for certain is that after spying the urban oasis, twice fêted in Take Pride Winnipeg’s annual Winnipeg in Bloom competition, he couldn’t unsee it.

“First of all, the pink building really stands out,” Duncan says, referring to the brightly painted California Apartments complex at 268 St. Mary’s Rd. “But then you have the pergola, the rock garden, the flowers and trees… a sea of colour on a very busy street.”

Read
6:00 AM CDT
The Canadian Press Avi Lewis (centre), the new leader of the NDP, celebrates with former interim leader Don Davies (left) and Manitoba Premier Wab Kinew at the party convention in Winnipeg on March 26, 2026.

Israel: the new political divide?

David McLaughlin 5 minute read Preview

Israel: the new political divide?

David McLaughlin 5 minute read 2:01 AM CDT

Abdul won and Avi is thrilled.

Federal NDP Leader Avi Lewis emerged from electoral hiding to tell us how it is “exhilarating to witness” a “wave of progressive populism” in the United States. He was referring to the upset winner of Tuesday’s heavily-watched Michigan Senate primary race, Abdul El-Sayed, who barely prevailed over his establishment opponent for the Democratic nomination.

Premier Wab Kinew’s favourite New Democrat (after himself) steadfastly hesitates to take a risk and run for a House of Commons seat in a byelection to kickstart Canada’s version of progressive populism. No hesitation, though, in Lewis immediately basking in the reflected glory of those international comrades and fellow travellers who do.

Writing about the state of Canada’s New Democrats feels like a hate crime — you hate wasting your time — and this is no exception. A better story is what’s driving this modest but undeniable political movement in U.S. politics and whether it might gain traction here in Canada.

Read
2:01 AM CDT
A woman uses a computer keyboard in North Vancouver, B.C., on Wednesday, December, 19, 2012. An Ontario security software company says it has discovered a new affiliate of a ransomware gang that has pledged allegiance to Russia carrying out attacks with threat emulation software.THE CANADIAN PRESS/Jonathan Hayward

Ont firm uncovers ransomware gang affiliate tactic

The Canadian Press 2 minute read Preview

Ont firm uncovers ransomware gang affiliate tactic

The Canadian Press 2 minute read Monday, Mar. 21, 2022

TORONTO - An Ontario security software company says it has discovered a new affiliate of a ransomware gang that has pledged allegiance to Russia carrying out attacks with threat emulation technology.

Waterloo, Ont.-based eSentire says its threat response unit has been tracking an affiliate of Conti since August and discovered the group used Cobalt Strike in two attacks around Valentine's Day, as tensions between Russia and Ukraine were escalating.

The firm calls Cobalt Strike "the Swiss army knife of cyber intrusions" because the tool can replicate and launch sophisticated cyberattacks that can test security detections, protections and response systems, but is being used by threat actors to compromise IT environments and spread throughout networks.

The threat response unit intercepted an attack using Cobalt Strike to try to breach an unnamed children’s charity and hours later, found it being used to target a legal firm.

Read
Monday, Mar. 21, 2022
‘They’re desperate to see someone’

Winnipeggers hoping for shorter waits in rural ERs delay care for all, Selkirk nurse says

Nicole Buffie 5 minute read Preview

Winnipeggers hoping for shorter waits in rural ERs delay care for all, Selkirk nurse says

Nicole Buffie 5 minute read Thursday, Aug. 6, 2026

Nurses and union leaders say Winnipeggers — who are frustrated with wait times at city hospitals — head to rural emergency rooms instead, but the facilities don’t have enough staff to meet the extra demand.

As a result, patients in the Selkirk Regional Health Centre emergency department have waited up to 18 hours during peak times, said one nurse who works there.

The nurse, who spoke to the Free Press on the condition of anonymity, said in recent years they have noted more Winnipeg patients who’ve driven the 25 kilometres north to Selkirk’s ER, believing the wait for treatment would be shorter than in the three emergency departments inside the Perimeter.

“They’re all trying to access health care, right? And everybody deserves health care. And I feel bad, because people have to come out here thinking that the wait times are less,” the nurse said. “I can’t blame people for wanting to seek care, and they’re desperate to see someone.”

Read
Thursday, Aug. 6, 2026
MIKE DEAL / FREE PRESS A highway sign that goes over the Winnipeg River near Lac du Bonnet, named after Susan and Richard Nowell the couple that died in the 2025 wildfires. Returning to the Lac du Bonnet area where wildfires turned lives upside down, caused the deaths of two homeowners and displaced thousands of people fifteen months ago. Reporter: Nicole Buffie 260807 - Friday, August 07, 2026.

Lac du Bonnet slowly healing from devastating fire

Nicole Buffie 6 minute read Preview

Lac du Bonnet slowly healing from devastating fire

Nicole Buffie 6 minute read Yesterday at 6:32 PM CDT

LAC DU BONNET — Fifteen months after devastating wildfires ripped through Lac du Bonnet, claiming two lives and destroying more than a dozen homes, residents are trying their best to build back better.

Along the winding gravel path that is Wendigo Road outside Lac du Bonnet, new timber peeks through patches of charred forest. Homes and cottages are beginning to take shape after fire raced through the neighbourhood at record speed and levelled at least 18 homes on the road.

Table saws and nail guns ring in the distance while Brian Curtis plots out where his new cottage will go. Curtis bought his previous cottage 19 years ago and had recently levelled the foundation.

He and his wife, Pam, had been thinking about long-term renovations when the May 13, 2025 fire swept away all their work and memories.

Read
Yesterday at 6:32 PM CDT