The "Full Monti": Individual Threat Actor Attribution in RaaS Operations
Executive Summary Monti, a ransomware variant first identified in early 2022, was recently observed in an engagement by DAR’s threat intelligence team. While “Monti” does not appear on OFAC’s list of sanctioned groups and individuals, DAR was able to identify the likely involvement of a sanctioned individual, Mikhail Matveev (aka “Wazawaka”), in the attack.
Read PostWhite Paper