Ontario security company uncovers ransomware gang affiliate using Cobalt Strike

Advertisement

Advertise with us

TORONTO - An Ontario security software company says it has discovered a new affiliate of a ransomware gang that has pledged allegiance to Russia carrying out attacks with threat emulation technology.

Read this article for free:


By clicking the button above, an account will be created and you will begin to receive some of our recommended newsletters. You may opt out of any newsletter by visiting your Email and Communication Preferences page or by clicking "unsubscribe" at the bottom of any email.

or

Already have an account? Log in here »

To continue reading, please subscribe:

Digital Subscription

One year of digital access for only $1.44 a week*

  • Enjoy unlimited reading on winnipegfreepress.com
  • Read the E-Edition, our digital replica newspaper
  • Access News Break, our award-winning app
  • Play interactive puzzles

*Billed as $5.77 plus GST every four weeks. After 52 weeks, price increases to the regular rate of $19.95 plus GST every four weeks. Offer available to new and qualified returning subscribers only. Cancel any time.

To continue reading, please subscribe:

Add Free Press access to your Brandon Sun subscription for only an additional

$1 for the first 4 weeks*

  • Enjoy unlimited reading on winnipegfreepress.com
  • Read the E-Edition, our digital replica newspaper
  • Access News Break, our award-winning app
  • Play interactive puzzles
Start now

*Your next Brandon Sun subscription payment will increase by $1.00 and you will be charged $17.95 plus GST for four weeks. After four weeks, your payment will increase to $24.95 plus GST every four weeks.

Hey there, time traveller!
This article was published 21/03/2022 (1671 days ago), so information in it may no longer be current.

TORONTO – An Ontario security software company says it has discovered a new affiliate of a ransomware gang that has pledged allegiance to Russia carrying out attacks with threat emulation technology.

Waterloo, Ont.-based eSentire says its threat response unit has been tracking an affiliate of Conti since August and discovered the group used Cobalt Strike in two attacks around Valentine’s Day, as tensions between Russia and Ukraine were escalating.

The firm calls Cobalt Strike “the Swiss army knife of cyber intrusions” because the tool can replicate and launch sophisticated cyberattacks that can test security detections, protections and response systems, but is being used by threat actors to compromise IT environments and spread throughout networks.

A woman uses a computer keyboard in North Vancouver, B.C., on Wednesday, December, 19, 2012. An Ontario security software company says it has discovered a new affiliate of a ransomware gang that has pledged allegiance to Russia carrying out attacks with threat emulation software.THE CANADIAN PRESS/Jonathan Hayward
A woman uses a computer keyboard in North Vancouver, B.C., on Wednesday, December, 19, 2012. An Ontario security software company says it has discovered a new affiliate of a ransomware gang that has pledged allegiance to Russia carrying out attacks with threat emulation software.THE CANADIAN PRESS/Jonathan Hayward

The threat response unit intercepted an attack using Cobalt Strike to try to breach an unnamed children’s charity and hours later, found it being used to target a legal firm.

It says Conti is comprised of sophisticated ransomware developers and operators known for compromising and disrupting the operations of health-care organizations, emergency services, municipalities, oil transportation and electric companies and schools.

Conti claimed responsibility for a cyberattack on a Quebec smelter Rio Tinto operates earlier this month.

This report by The Canadian Press was first published March 21, 2022.

Report Error Submit a Tip

More Stories

City’s drug, homelessness crises overlooked on campaign trail, front-line groups say

Scott Billeck 15 minute read Preview

City’s drug, homelessness crises overlooked on campaign trail, front-line groups say

Scott Billeck 15 minute read Updated: 12:20 PM CDT

Those on the front lines of coping with the city’s deepening homelessness and drug crises express concern at civic election candidates’ lack of attention to the issues

Read
Updated: 12:20 PM CDT

Mayoral candidates share faves, test knowledge in Free Press culture quiz

Conrad Sweatman 5 minute read Preview

Mayoral candidates share faves, test knowledge in Free Press culture quiz

Conrad Sweatman 5 minute read Wednesday, Oct. 14, 2026

It’s been said that politics is downwind of culture. However true that is, where politicians stand on hot-button cultural debates such as artificial intelligence, whether they prefer sports over arts and what local restaurants they patronize can offer a window into their sensibilities and outlooks.

The Free Press invited the four leading mayoral candidates among decided voters — according to a recent Abacus poll — to take part in a cultural quiz. (Kevin Klein, who was polling second, did not respond.) While most of the questions are lighthearted, they speak to some of the personalities behind the heated rivalries over budgets, buses, business taxation and beyond.

What was the last book you finished?

● Scott Gillingham: I’m almost done Winnipeg author Paul Vincent Jacuzzi’s book Blind Eyes. It’s a Dalton Drake novel.

Read
Wednesday, Oct. 14, 2026

Klein promises new guidelines for infill builds, Gillingham gets union’s endorsement

Joyanne Pursaga 5 minute read Preview

Klein promises new guidelines for infill builds, Gillingham gets union’s endorsement

Joyanne Pursaga 5 minute read 5:57 PM CDT

Kevin Klein is promising to repeal “blanket” zoning rules and gather more public input to guide some housing projects, if he’s elected Winnipeg’s next mayor.

A “made-in-Winnipeg” strategy would invite more feedback from neighbours, he said, to help reduce unwanted side effects he linked to some infill builds.

“Residents in Glenwood watched lot splits turn two neighbours into eight and leave sidewalks and boulevards covered in mud,” said Klein Friday, in front of an infill home under construction on Clonard Avenue.

Last year, city council approved sweeping changes to Winnipeg zoning bylaws, which allowed the construction of up to four housing units on a single lot in most residential areas and fourplexes up to 12 metres tall within 800 metres of high-frequency transit stops. The changes aimed to speed up home building by removing the need to complete a city application process and public hearing to get those types of projects approved.

Read
5:57 PM CDT

Slain chef’s family infuriated by stayed charges

Morgan Modjeski 3 minute read Preview

Slain chef’s family infuriated by stayed charges

Morgan Modjeski 3 minute read Wednesday, Oct. 14, 2026

The family of a Ste. Anne chef who died after an altercation at a party says they are angry a manslaughter charge has been stayed against a 46-year-old man.

Read
Wednesday, Oct. 14, 2026

A decision with potential for ‘distraction’ and ‘disrespect’ in Transcona

Malak Abas 6 minute read Preview

A decision with potential for ‘distraction’ and ‘disrespect’ in Transcona

Malak Abas 6 minute read Updated: Yesterday at 9:54 AM CDT

Transcona voters acknowledge they have a tough decision to make at the ballot box on election day.

The east Winnipeg working-class ward is replete with lawn signs and posters, but most of the people the Free Press spoke with said they were still undecided.

While Winnipeg is, historically, more likely to elect an incumbent, longtime councillor Russ Wyatt is seeking a sixth term while facing five criminal charges, including sexual assault and administering a noxious substance, after incidents alleged to have occurred in 2023 and 2025.

Residents are not without options. In addition to Wyatt, former councillor Shawn Nason — who occupied the city council seat from 2018-22 — is running for council (Wyatt chose not to run in the 2018 election after taking several months off to undergo addictions treatment), and there are three new faces on the ballot: Lora Meseman, Chris Giesbrecht and Nathine Dagdick.

Read
Updated: Yesterday at 9:54 AM CDT

Police HQ report to be released Monday

Free Press staff 2 minute read Preview

Police HQ report to be released Monday

Free Press staff 2 minute read 6:44 PM CDT

The province confirmed Friday the final report of the public inquiry into the Winnipeg Police Service headquarters will be released on Monday.

The release will take place at a media conference with commissioner of the Winnipeg Police Service Headquarters inquiry Garth Smorang, scheduled for 1 p.m. Monday at the Manitoba Legislative Building.

The $2.3-million public inquiry took place over 27.5 hearing dates between February and May.

The city has faced myriad problems related to the WPS headquarters, a former Canada Post office building and warehouse at Smith Street and Graham Avenue, for more than a decade.

Read
6:44 PM CDT