Ransomware as organization: a comparative analysis of corporate and criminal structures in Conti

Author

• George UrlingFollow

Date of Award

2026

Degree Name

Cybersecurity

College

College of Engineering and Computer Sciences

Type of Degree

M.S.

Document Type

Thesis

First Advisor

Dr. Husnu Narman

Second Advisor

Dr. Josh Brunty

Third Advisor

Dr. James Lanham

Fourth Advisor

Billy Gardner Jr.

Abstract

Cybercriminal groups continue to pose major threats to global cybersecurity. One of the most common types of cybercriminal groups are, “Ransomware-as-a-Service (RaaS)" groups, who create and sell ransomware. While research is conducted into the development of ransomware, there is limited reporting on the organizational structure and habits of RaaS groups. In 2022, prominent RaaS group Conti had their chat logs leaked, with the logs ranging from 2020 to 2022. This study seeks to provide a deeper understanding of RaaS group structures by utilizing the Conti leaked logs as a case study. The study, entitled “Ransomware as Organization: A Comparative Analysis of Corporate and Criminal Structures in Conti” seeks to compare the structure of a modern RaaS group and the structure of corporate and criminal organizations. The question posed in this study is, “How does the organizational structure and internal communication of Conti resemble both legitimate corporate entities and traditional criminal organizations?” The results of this study find multiple parallels between Conti and corporate and criminal organizational structures; thesis findings indicate that despite their presence online, RaaS groups still involve people and as such follow structures that people are used to. This conclusion is especially important for those in criminal justice, and any field attempting to disrupt these groups, as it humanizes them and demystifies previous fears of the unknown.

Subject(s)

Computer security.

Extortion.

Malware (Computer software)

Computer crimes.

Criminal justice.

Criminology.

Recommended Citation

Urling, George, "Ransomware as organization: a comparative analysis of corporate and criminal structures in Conti" (2026). Theses, Dissertations and Capstones. 2057.
https://mds.marshall.edu/etd/2057