Monti
Monti is a ransomware group with a financial motive, tracked by Brandefense. It targets 7 sectors, including Government and Technology, in 5 countries, including the United States and Germany.
- Techniques
- 0
- Exploited CVEs
- No CVE data
- First seen
- Jun 1, 2022
- Last seen
- Aug 14, 2023
- Record updated
Who They Target.
Labelsconti-code-lineagedouble-extortionlinux-encryptormontiransomware
About Monti.
Monti is a ransomware group first observed in June 2022 that initially copied nearly all of Conti's leaked source code, pivoting to target government, legal, and healthcare entities, later releasing a new Linux variant in 2023 with significantly less Conti code similarity, and experimenting with an affiliate model.
Last updated Oct 1, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.