Pioneering

Abstract This chapter examines the complex relationship between Conti and the Russian government, analyzing how the group balances independence with occasional collaboration. While Conti operates autonomously and remains primarily profit-driven, its pro-Russian stance and avoidance of attacks on CIS countries suggest a tacit understanding with Russian authorities. Conti’s anti-Western sentiment, particularly its focus on US targets, aligns with broader Russian geopolitical interests. Although the group is not directly controlled by the FSB, evidence suggests that Russian state entities occasionally call upon Conti’s hacking expertise for specific operations, referred to internally as “pioneering” tasks. The chapter also discusses the arrests of REvil members, which caused unease within Conti, and explores how the Russian government selectively engages with ransomware groups to advance its interests while allowing them to operate with relative impunity.