Conti is a Russian-speaking group that has been in the ransomware game for a long time, being the successor of the infamous Ryuk. The gang did not waste much time adopting the new attack vector and is the first "top-tier" operation known to weaponize the Log4j vulnerability.
The ransomware operation is using the critical Log4Shell exploit to gain rapid access to internal VMware vCenter Server instances and encrypt virtual machines.
Patch now! More here in this article.
