By 
New versions of Conti's ransomware source code have been reportedly leaked by a cyber-security researcher who was displeased with the group's public declaration of support to Russia.
The researcher who believed to hail from Ukraine was unhappy when the cybercriminals publicly decided to support Russia's invasion of Ukraine.
Conti is a Russian-speaking ransomware group that also operates a ransomware-as-a-service (RaaS) business model.
Over the weekend, a link to the new package was published under the "Conti Leaks" Twitter handle. The source code has been uploaded to VirusTotal and while password-protected, the information required to open the file is available to cybersecurity teams.
Earlier, the pro-Ukraine individual leaked an older version of the ransomware. Conti's declaration of support for Russia's invasion of Ukraine also led to the leak of the group's internal chat logs.
According to the logs, Conti is made up of individuals tasked with different duties – including malware coders, tests, system administrators and 'HR' personnel who deal with hires, as well as negotiators who deal with victims and try to ensure a blackmail payment is made.
The researchers at Check Point analyzed the leaked data and came to a conclusion regarding the Conti hiring process: while some members are recruited through underground forums, others aren't even told that they are interviewing with cybercriminals. Instead, some potential hires were told that they would be helping in the development of software for legitimate penetration testers and analytics.
Conti is known for its devastating cyberattack and it is estimated that hundreds of organizations in the United States alone have fallen prey to Conti.
