Chat

Negotiation chat with different groups

Akira

Avaddon

Avos

Babuk

BlackBasta

BlackMatter

Cloak

Conti

Darkside

Dragonforce

  • 058f4b92-ae99-45c7-bf35-5d2d6754b3de – 19 message(s) voir chat
  • 05f724f8-906e-4739-8177-815852cc2c3f – 29 message(s) voir chat
  • 29BBE03074FDBB8D – 10 message(s) voir chat
  • 7A313D13EB6B4E58 – 32 message(s) voir chat
  • 89716D29D2CEE36F – 23 message(s) voir chat
  • AB0404E049514B50 – 28 message(s) voir chat
  • BD004D632D87DBA0 – 25 message(s) voir chat
  • C2A3C7249797F5ED – 66 message(s) voir chat
  • C42CDF65B97D0E92 – 30 message(s) voir chat
  • C7CD31EAAF9DE9AC – 71 message(s) voir chat
  • C8479B30418B331E – 4 message(s) voir chat
  • D6DDD9B26D7D41DB – 14 message(s) voir chat
  • FDA8141B6DD392E3 – 10 message(s) voir chat
  • b8e14e1a-548f-4eec-bd6e-a590126e57c9 – 14 message(s) voir chat

Hive

Hunters International

Mallox

NoEscape

Pear

Qilin

  • 20240429 – 3 message(s) voir chat
  • 20250203 - from @RakeshKrish12 – 36 message(s) voir chat

REvil

RansomHub

Ranzy

RunSomeWares

fog

lockbit3.0

mount-locker

trinity

victim
hello
victim
hello
trinity
hello
victim
what do we have to do to acces our files ?
trinity
Please say your network domain
victim
i sent you email to
trinity
Yes I see
victim
what info do you need ?
trinity
[redacted] ?
victim
idd
trinity
your network?
victim
[redacted] is correct
trinity
Price for decrypt 70000$ in bitcoin amount
victim
ok, i'm talking with management
victim
is there any garantee tht we can decrypt all files ?
victim
i see the VHDX files are only 3GB and the were much bigger ..
trinity
We have been working
for several years and all our clients have received their key. You can
send us up to 10 files for the test decrypt, but these files should not
contain important information
victim
ok, and my VHD files will decrypt as wel ? they were +1TB in size and now only 3GB
trinity
Yes
trinity
Inside the hard disk these files have normal size
victim
In order to proceed,
my manager requires a due dilligence step that protects us from
liability, and that is to obtain proof that you have our sensitive files
before we can consider payment. For that reason, can you provide the
cleartext copy of the "[redacted]_V10_13_8_GP.ZIP" file located
in the "C:\Users\Administrator\Downloads" folder on one of the encrypted
servers.
trinity
we don't loan out valuable files for testing for the test send 1-2 files (1-5 mb) not backup and database
trinity
If you don't pay,
we'll put your data on the leak sites.
https://hunters55rdxciehoqzwv7vgyv6nt37tbwax2reroyzxhou7my5ejyid.onion/
companies/2148689972 ,and similar sites
victim
In order to
negotiate a resolution, we would require proof of data posession, so we
have asked you for a file that does not contain sensitive information
(you can verify that in the file itself). We have so far not received
any evidence of you posessing cleartext copies of our data. Such
evidence allows me to talk to my manager, who will eventually decide on
the best course of action, as we have multiple alternatives.
trinity
We can't provide this file to you.
victim
Since we cannot show
our manager any proof of stolen data, we cannot argue such a high
ransom demand. We do have backups which are few weeks old, but I am
convinced that our manager would pay a smaller fee for decryption key in
order to have the latest data in a much faster way. They are willing to
offer you $10.000 for the decryption key.
trinity
We have already told
you the price. The only way you can reduce the final price is to pay
today and then we can think about a discount.
trinity
but 10000$ just a joke for us, you should understand it. We can make discount 10.000$ if you pay today
victim
I will have to take
that offer to my manager. In the meantime, how can you provide proof of
having a working decryption key? Can we provide you with an encrypted
file and you decrypt it?
victim
I will have to take
that offer to my manager. In the meantime, how can you provide proof of
having a working decryption key? Can we provide you with an encrypted
file and you decrypt it?
trinity
Yes, send file here https://dropmefiles.com/
trinity
Yes, send file here https://dropmefiles.com/
victim
Hereby https://dropmefiles.com/[redacted]
trinity
https://dropmefiles.com/[redacted]
trinity
pass 123
trinity
You don't use our discount offer. So the price is 70.000$ again. Tomorrow it will rise again.

Auteur/autrice

sdgadmin@tux.ovh