The suspected Conti ransomware group spinoff employs a variety of attack methods, the notice warns.

Links in tooling, crypto wallets and even attacking victims simultaneously strongly suggest a link, researchers say.