Chat

Negotiation chat with different groups

Akira

Avaddon

Avos

Babuk

BlackBasta

BlackMatter

Cloak

Conti

Darkside

Dragonforce

  • 058f4b92-ae99-45c7-bf35-5d2d6754b3de – 19 message(s) voir chat
  • 05f724f8-906e-4739-8177-815852cc2c3f – 29 message(s) voir chat
  • 29BBE03074FDBB8D – 10 message(s) voir chat
  • 7A313D13EB6B4E58 – 32 message(s) voir chat
  • 89716D29D2CEE36F – 23 message(s) voir chat
  • AB0404E049514B50 – 28 message(s) voir chat
  • BD004D632D87DBA0 – 25 message(s) voir chat
  • C2A3C7249797F5ED – 66 message(s) voir chat
  • C42CDF65B97D0E92 – 30 message(s) voir chat
  • C7CD31EAAF9DE9AC – 71 message(s) voir chat
  • C8479B30418B331E – 4 message(s) voir chat
  • D6DDD9B26D7D41DB – 14 message(s) voir chat
  • FDA8141B6DD392E3 – 10 message(s) voir chat
  • b8e14e1a-548f-4eec-bd6e-a590126e57c9 – 14 message(s) voir chat

Hive

Hunters International

Mallox

NoEscape

Pear

Qilin

  • 20240429 – 3 message(s) voir chat
  • 20250203 - from @RakeshKrish12 – 36 message(s) voir chat

REvil

RansomHub

Ranzy

RunSomeWares

fog

lockbit3.0

mount-locker

trinity

Victim 9 days ago
How to buy Bitcoin for this amount?
Darkside 9 days ago
Hello!
Darkside 9 days ago
Moment please, let me prepare a manual for you.
Darkside 9 days ago
are you sure that you want to pay in bitcoin? maybe you prefer
monero? cause in case you want to pay in bitcoin, you have to pay in 20%
more because of service fees.
Victim 9 days ago
how monero works?
Darkside 9 days ago
process is literally the same
Darkside 9 days ago
give me a moment i provide a monero tutorial
Victim 9 days ago
ok good for monero
Darkside 9 days ago
monero manual

here is the fastest and safest service to buy monero in your country https://localmonero.co/
alternative way is to buy bitcoin via next manual and change it to monero here https://changelly.com/

bitcoin manual
here are some services where you can safely buy and send bitcoin
https://localcryptos.com/ manual how to buy and send is placed on the
main page, this is the simplest and fastest way, no any verification
required///////
https://paxful.com/ here is the short manual how to buy and send
https://www.youtube.com/watch?v=EjB5qFW0bJ8 profile verification may be
required////////
https://www.coinbase.com/ here is the short manual how to buy and send
https://www.youtube.com/watch?v=Neph3rjv0Co profile verification may be
required///
chose which one you like more, and buy bitcoin.


hen text in chat and we provide the wallet for transfer
Victim 9 days ago
ok. I'm working on it
Victim 9 days ago
ok. I'm working on it
Victim 9 days ago
Hi. The price is too high
Victim 9 days ago
could we find a mediation?
Victim 9 days ago
we do not have that amount of money. We are a little company
Victim 9 days ago
5.000€?
Darkside 9 days ago
We do not make such big discounts.
Darkside 9 days ago
Read about us on the Internet.
Darkside 9 days ago
5000 euro is impossible. you are not a small company, we've been
working on your network, we have encryped 200tb of data, you can not be a
small company, you have a whole data center.
Victim 9 days ago
please give us a sustainable amount we are 80 people that works from [redacted location]
Victim 9 days ago
[redacted location]
Victim 9 days ago
we work for non profit organization like [redacted]
Darkside 9 days ago
before the attack we checked info about your company, so it's
absolutely useless to prove us anything. discount is possible, but not
in the amount you want. you can try to take a loan and find any
cryptobrocker who will resolve all the cryptocurrency exchange.
Victim 9 days ago
10.000€
Darkside 9 days ago
You are wasting our time. Write when you have serious offers.
Darkside 9 days ago
discount x100 from first amount is impossible.
we can reduce the price by 50 000. so you have to pay 950 000 $
Victim 9 days ago
we do not have that amount. Is out of our business
Darkside 9 days ago
take a loan
Victim 9 days ago
I can make you an offer compatible with my availability and
comparable to the time it would take if I had to restore from backups
Darkside 9 days ago
we know everything about your backups, if you could restore, you
wouldn't text us at all. so please stop wasting our time and yours, you
know, that the only way to restore your business is to make the payment
requested
Darkside 9 days ago
are we talking with recovery company right now? cause few hours ago this conversation had a bit another vector.
Victim 9 days ago
no I move from home to office
Darkside 9 days ago
go back home, you were much more pliable from there.
Victim 9 days ago
I'm talking to the CEO to unadestand how much can we pay
Darkside 9 days ago
ok we are waiting
Victim 8 days ago
I talked with my CEO we want to solve the issue. We can offer
75.000€ to start the decryption process and 75.000 at the end of the
decryption. (in total 150.000€)
Darkside 8 days ago
This amount is not enough. Raise the price and we will give you an additional discount.
We can refuse payment and not give you a decryptor. Can you afford it? What will you tell your clients?
We understand you and are ready to give you a decryptor right now. Give us a good offer.
Darkside 8 days ago
Any phased payment options are not possible. You pay first, then we
give you decryptors. If you are not sure, you can give us test files and
we will decrypt them for you.
Darkside 8 days ago
In Linux, we specially encrypt log files, they are small in size and you can upload them to chat.
Victim 8 days ago
In you site you declare that you do not attack no.profit
organization. We host the site of a lot of no profit organization that
currently has the service down. Please accept our offer 150.000 all in
one
Darkside 8 days ago
Look, if you were a non-profit organization, you wouldn't be
attacked by anyone. Everyone can say that they are helping someone.
In the current case, your offer does not meet our expectations. It will
get you nowhere and you are wasting your time. Give us a better price
and we will give you a discount.
Darkside 8 days ago
I want you to understand one thing, it doesn't matter to me how long
it takes to discuss the price. This is important for you. The faster
you get decryptors, the faster you will continue to make money.
Victim 8 days ago
I sent you a small files


[redacted].txt.[redacted]
8.95 kB
Darkside 8 days ago
File

[redacted].txt
8.81 kB
Victim 8 days ago
Hi, we had a crisis committee meeting. We evaluated your proposal. I
know that you don't want waste time but trust me we are not so big as
you think. We need time to get a reasonable amount of MONERO or
BITCOIN. We try deliver an extra special effort and we can raise to
250.000€. We hope that this offers meet your expectation
Victim 8 days ago
i'm moving to home becouse of lock down and we had to go home at 10pm
Darkside 8 days ago
We are ready to accept 700k dollars. We will give you a discount of $ 300k.
Victim 8 days ago
We want to pay but we do not have 700k. We did the best effort to offer you 250.000
Victim 8 days ago
here is midnigth, i need to sleep and I hope to found some good news.
Darkside 8 days ago
Let's get back to this question in the morning! you need to rest, you are right! Goodnight!
Victim 8 days ago
good moring......I hope
Darkside 8 days ago
We've made you a 30% discount. Give us a better price and we will try to give you an additional discount.
Victim 8 days ago
Trust me. We host site for no-profit organization that do not have a
lot of money. You found a lot of data but this are our kind of
customer. We made the best 250.000€ is a very high amount for us. We
had also a problem to find this amount in a few days. The site that you
suggested offer MONERO at block of 5000 or 10.000€
Victim 8 days ago
We are 60 employee and only 6 on IT....we are working on this problem 24 hours....we need your help
Darkside 8 days ago
I spoke to my boss and explained your situation to him. He approved a payment of 350k dollars.
There will be no more discounts. Now you are offering 300k dollars, raise your price by 50k and we will close this deal now.
Victim 8 days ago
do you have a quick way to get that amount of MONERO?
Victim 8 days ago
we accept your proposal
Darkside 8 days ago
Price updated. Reload the page.
Victim 8 days ago
ok. Give us a reference to get that amount of monero
Darkside 8 days ago
Yes, have you considered buying through the exchange? Or are you having trouble with it?
Darkside 8 days ago
If you find it difficult to get Monero - buy Bitcoin first. Then change it to Monero.
Victim 8 days ago
We want to buy through the exchange. But they exchange at block of 10.000€.
Darkside 8 days ago
I think it is not difficult to buy bitcoin in your country. Use exchangers or crypto exchanges (binance, et al.).
Victim 8 days ago
ok. I will update you
Victim 8 days ago
we have to do change € on our wallet or directly charge on your wallet
Darkside 8 days ago
Change money on your wallet and then send us cryptocurrency
Victim 7 days ago
Hi, just to tell you that we are working to get cryptocurrency
Darkside 7 days ago
OK, we wait.
Victim 7 days ago
Good moring. Very difficult to move on BTC that amount on one wallet. You need transaction from one wallet alone?
Victim 7 days ago
can we make in more transcation?
Victim 7 days ago
could you Decrypt some server?
Darkside 7 days ago
We are waiting for xmr from you, not btc. If you decided to pay with btc, you have to pay additional 20%.
Darkside 7 days ago
And you can use several transaction
Darkside 7 days ago
After payment you will receive decryptor for all your network.
Victim 7 days ago
several transaction from same wallet or we could use different wallet?
Darkside 7 days ago
You can use different wallet
Victim 6 days ago
How many BTC we had to pay? Yesterday i saw 25.18, now I see 23.3
Darkside 6 days ago
Pay the amount that you see now
Darkside 6 days ago
Btc rate is not stable, so don't wait and pay quickly
Victim 6 days ago
do not change anymore because we had a lot o difficult to get crypto BTC
Darkside 6 days ago
i can fixed the rate, but you have to pay for 6 hours
Darkside 6 days ago
will pay for this time?
Victim 6 days ago
we'll try in 12 hours , but i'm not sure, maybe 24.
Darkside 6 days ago
i have fixed your btc amount, for the next 24 hours it doesn't depend from btc rate
Darkside 6 days ago
but you must pay as soon as possible
Victim 6 days ago
ok
Victim 6 days ago
help us as soon as possible. We are very little to pay that amount
but we do....and also we had to work a lot of other days....give an hand
as soon as you can....trust us
Darkside 6 days ago
After payment I will immediately give you decryptors.
Victim 6 days ago
Hi. Why the rate changed again?
Victim 6 days ago
you promise me to block the rate of BTC to 23.3
Victim 6 days ago
we already had a trade for that amount and we need to fix it
Victim 6 days ago
Are you there?
Darkside 6 days ago
Hello
Darkside 6 days ago
Rate was changed yesterday, before i fixed it
Darkside 6 days ago
You actual amount for the next 12 hours 23.61 BTC
Victim 6 days ago
we bought yesterday 23.3 by an exchanger and we are waiting for the transaction. We cannot change the amount now
Victim 6 days ago
the payment is in process
Darkside 6 days ago
okay, waiting for 23.3 BTC from you in next several hours
Victim 6 days ago
ok. May I ask a partial decrypion of one server?
Darkside 6 days ago
After payment you'll immediately receive decryptor for all network
Darkside 5 days ago
You have the last 3 hours to pay the fixed btc amount after that time the rate will be float again.
Victim 5 days ago
be patient
Victim 5 days ago
the transaction is in progress with our exchanger
Victim 5 days ago
technical time
Darkside 5 days ago
Our btc wallet is always actual and the same, so send as quickly as it possible.
Victim 5 days ago
what do you mean?
Darkside 5 days ago
The wallet that you see on your page is always relevant
Victim 5 days ago
i'm here
Victim 5 days ago
operation is in progress
Darkside 5 days ago
ok
Victim 5 days ago
be patient operation with exchanger is taking too long time
Victim 5 days ago
please
Darkside 5 days ago
How many time you need?
Victim 5 days ago
The exchanger told me that operation should be in the morning. Now here are 20:47
Darkside 5 days ago
Take in mind, that after 35 hours your price will be doubled and this action cannot be undone.
Victim 5 days ago
we know. My mind now is about 23.3 BTC becouse operation is for that amount
Darkside 5 days ago
If you don't pay tomorrow, i'll enable float rate again and don't fixed it anymore.
Darkside 5 days ago
So, hurry up your exchanger.
Darkside 5 days ago
Good morning! Any updates?
Victim 5 days ago
I had a meeting scheduled with exchanger at 1PM
Victim 5 days ago
i don't know why he 's taking time. We yesterday moved € to exchanger
Darkside 5 days ago
Well, if anything, do not hesitate to write about the results
Victim 5 days ago
we need cryptocurrency to close the deal with you and my family will be happy becouse I have to work all weekend
Darkside 5 days ago
I understand you, as far as I know in Europe there are bitcoin ATMs for a long time
Victim 5 days ago
never seen
Darkside 5 days ago
https://coinatmradar.com/country/[redacted]/
Darkside 4 days ago
We won't give you extra time, after 16 hours you price will be doubled, make payment faster.
Victim 4 days ago
Hi, i'm in call with exchanger
Victim 4 days ago
we had to wait for the transfer of the amount
Victim 4 days ago
technica time between bank
Victim 4 days ago
I have the document that prove that we are moving money
Victim 4 days ago
but we need more time
Victim 4 days ago
till monday
Victim 4 days ago
in the week end bank do not operate
Darkside 4 days ago
Send the documents.
Victim 4 days ago
upload in progress


IMG_20201120_152201.jpg
5.4 MB
Victim 4 days ago
3 pages


IMG_20201120_152152.jpg
4.8 MB
Victim 4 days ago
last page


IMG_20201120_152145__02__01.jpg
5.06 MB
Darkside 4 days ago
Ok, added time.
Victim 4 days ago
da you update the countdown on this page
Victim 4 days ago
?
Victim 4 days ago
Time ends on 23 Nov 2020, 09:51
Victim 4 days ago
in the morning is too eearly
Victim 4 days ago
the bank open in the morning
Victim 4 days ago
please set the deadline to 24 November 9 AM
Victim 4 days ago
so we are sure than on monday close the transaction
Darkside 4 days ago
Refresh the page
Victim 4 days ago
Ok thanks
Victim 2 days ago
Hi, we are at work.
Darkside 2 days ago
Hello! We, too, how is the exchange process going?
Victim 2 days ago
only the bank does not work on the week end
Victim 2 days ago
the decryption tool work per single file?
Darkside 2 days ago
You will receive a master (universal) decryptor for your Linux and Windows network after payment
Victim 2 days ago
it runs recursively o per file?
Darkside 2 days ago
the process works as when encrypting only in the opposite direction, we
will also send all instructions, and provide support until you decrypt
the all network
Victim 2 days ago
see you tomorrow
Darkside 2 days ago
Ok! Have a nice day!
Darkside 1 day ago
After 17 hours your price will be doubled and we won't change it.
Victim 1 day ago
i'm here
Victim 1 day ago
good morning
Victim 1 day ago
we are almost ready
Victim 1 day ago
i'm worried about decryption process
Victim 1 day ago
there are a lot of file on a lot of volume
Darkside 1 day ago
Hello! the process of decryption is similar to the encryption process,
you do not need to worry, maximum 4-5 hours and your files will be
decrypted
Victim 1 day ago
on vmware do i need to execute decryption on one host esx that is
connected to all volume or do I have to execute on every single host?
Darkside 1 day ago
You should upload decryptor to each esxi, set 777 permissions and
run. That's all you need, after small time your esxis will be ready for
work.
Victim 1 day ago
can we test the decryption process on one single vmdk file?
Darkside 1 day ago
We will send decryptor after payment and help with all. Don't worry, it's too easy.
Victim 1 day ago
we are doing the first transaction
Victim 1 day ago
what description in the transaction?
Victim 1 day ago
we sent the first little amount in order to test the correct transaction
Victim 1 day ago
it is ok?
Darkside 1 day ago
we can see your transaction
Darkside 1 day ago
you can send all amount
Victim 1 day ago
ok
Victim 1 day ago
we proceed
Darkside 1 day ago
and after 3 confirmation of bitcoin network we will send you decryptors and instruction
Victim 1 day ago
with the next trance
Victim 1 day ago
we sent half amount
Victim 1 day ago
please give us linux or windows decryptor now
Darkside 1 day ago
we will send your decryptors only after you send us full amount.
Darkside 1 day ago
we are waiting for next part
Victim 1 day ago
one moment
Victim 1 day ago
sent
Darkside 1 day ago
ok, we can see your transaction
Darkside 1 day ago
waiting for 3 confirmation and then send you decryptors
Victim 1 day ago
we are waiting for decryptor
Darkside 1 day ago
Windows:

The decryptor works in 2 modes:
1. GUI
2. Console

Three functions are available in GUI mode:
1. "DECRYPT ALL" - search and decrypt ALL encrypted files on the local
PC and on network resources (Shares), where this PC has access.
2. "DECRYPT FOLDER" - decrypts files in the specified folder, which you
can select in the "Browse for folders" window or drag and drop the
folder into the decryptor window.
3. "DECRYPT ONE FILE" - decrypts a single file, which you can open in
the "Open" window or drag and drop the encrypted file into the decryptor
window.

IMPORTANT!
Extension of encrypted files may not coincide with the extension of files, which the decryptor suggests to open!
To open encrypted files with other extensions, in the "Open" window
select, in the lower right corner of "All Files (*. *)" or just drag and
drop the given file into the decryptor window.
File extension does not affect the decryption of file!

Console mode has two parameters:
1. "-all" - search and decrypt ALL encrypted files on the local PC and on network resources (Shares), where this PC has access.
You can also use Group Policy to quickly decrypt your entire network.
2. "-path" - decrypts files in the specified folder or a single file.
3. Dragging and dropping an encrypted file or folder with encrypted files onto the decryptor file.
In this mode, the console window will open automatically, which will display the decryption process.

Command line examples:
> decryptor.exe -all
> decryptor.exe -path C:\Folder
> decryptor.exe -path C:\Folder\file.txt.[redacted]


win_decryptor.exe
76.5 kB
Victim 1 day ago
linux decryptor works alsa per files?
Victim 1 day ago
also
Darkside 1 day ago
linux decryptor decrypts all system, it cant decrypt certain files
Victim 1 day ago
may I ran on host that see all encrypted volume?
Darkside 1 day ago
just run the decryptor on each esxi, that's all, you don't need to do anything anymore
Darkside 1 day ago
after decryption you can use your vms as before that
Victim 1 day ago
we are at work
Darkside 1 day ago
Linux decryption instruction:
1. Upload decryptor to esxi.
2. Set run permissions: chmod 777 decryptor
3. Run decryptor: ./decryptor


jump_decryptor.out
2.38 MB
Darkside 1 day ago
Use this one decryptor for you esxi
Victim 1 day ago
what is the difference?
Victim 1 day ago
the decryptor did not decrypt some file
Victim 1 day ago
on esx
Darkside 1 day ago
Try the last decryptor.
Darkside 1 day ago
Which file was not decrypted? Give more information.
Victim 1 day ago
/vmfs/volumes/[redacted]/[redacted]_RM_03/[redacted]_RM_03_1-flat.vmdk.darkside
/vmfs/volumes/[redacted]/WD_[redacted]/WD_[redacted]-flat.vmdk.darkside
/vmfs/volumes/[redacted]/V185E016/V185E016-flat.vmdk.darkside
/vmfs/volumes/[redacted]/V157E016/V157E016_1-flat.vmdk.darkside
/vmfs/volumes/[redacted]/V066E016 - [redacted]/V066E016 - [redacted]_1-flat.vmdk.darkside
/vmfs/volumes/[redacted]/V079E016 - [redacted]/V079E016 - [redacted]-flat.vmdk.darkside
/vmfs/volumes/[redacted]/V195E016/V195E016_1-flat.vmdk.darkside
/vmfs/volumes/[redacted]/V000REPP/V000REPP_1-flat.vmdk.darkside
/vmfs/volumes/[redacted]/V000PAS2/V000PAS2_1-flat.vmdk.darkside
/vmfs/volumes/[redacted]/V060E016/V060E016-flat.vmdk.darkside
/vmfs/volumes/[redacted]/V000TS1P_2012/V000TS1P_2012-flat.vmdk.darkside
/vmfs/volumes/[redacted]/V144E016/V144E016-flat.vmdk.darkside
/vmfs/volumes/[redacted]/V189E016/V189E016-flat.vmdk.darkside
/vmfs/volumes/[redacted]/V067E016/V067E016-flat.vmdk.darkside
/vmfs/volumes/[redacted]/V000AMQP/V000AMQP-flat.vmdk.darkside
/vmfs/volumes/[redacted]/V000AMMP/V000AMMP_3-flat.vmdk.darkside
/vmfs/volumes/[redacted]/[redacted] - ArcGis DataStore/[redacted] - ArcGis DataStore-flat.vmdk.darkside
Darkside 1 day ago
have other files been decrypted? Are virtual machines working?
Darkside 1 day ago
Use the last decryptor. He will decrypt them.
Victim 1 day ago
i will try the other decryptor becouse when i try to start [redacted] seems that a disk is missing
Darkside 1 day ago
Try the last one and write to me.
Victim 1 day ago
[START #11] File
Path.........../vmfs/volumes/[redacted]/[redacted]_RM_03/[redacted]_RM_03_1-flat.vmdk.darkside
[INFO] File Size................0mb (4096 Bytes)
[ERROR] File Too Small, Ignored
Darkside 1 day ago
What is the size of this file? Problem with one file or multiple?
Victim 1 day ago
42
Victim 1 day ago
seems that some filese were modified and disk size of the VM was set to 0
Victim 1 day ago
so the VM does not start
Darkside 1 day ago
what 42?
Victim 1 day ago
42 useful file was not decrypted
Darkside 1 day ago
and how much was decrypted?
Victim 1 day ago
a lot
Darkside 1 day ago
If the reason for the non-decryption is that there is 0 size, then I
cannot help you. The decryptor cannot decrypt what is not.
Check all file sizes and tell me them. When you tried to start virtual
machines, the hypervisor could damage the encrypted files.
I mean before you got the decryptor.
Darkside 1 day ago
Are you having a problem with virtual machines on the same hypervisor? or at all?
Victim 1 day ago
we are having some problem
Darkside 1 day ago
answer the questions so that I could understand what to tell you.
Victim 1 day ago
the probelm is on esx
Victim 1 day ago
Task name
Power On virtual machine
Target
WD_[redacted]
Status
File /vmfs/volumes/[redacted]/WD_[redacted]/WD_[redacted].vmdk was not found
Darkside 1 day ago
Look through ssh. Do you have a file?
Victim 1 day ago
have a file of 4K with .darkside extension
Victim 1 day ago
we lost some vm
Victim 1 day ago
sigh!
Darkside 1 day ago
The decryptor checks all checksums, it could not damage virtual
machines. This is the first time that a client talks about problems.
Did you check the sized before decryption?
Darkside 1 day ago
How many virtual machines have you failed to recover? Were they on the same esxi?
Darkside 1 day ago
You showed me a log in which the decryptor is trying to decrypt empty files. So the problem arose before decryption.
Why so, I can not answer you, there can be a lot of reasons.
Darkside 1 day ago
If you have any other problems with decryption - I will help you, just give me not empty files.
Victim 1 day ago
the empty file has data of creation on 15Nov in the night
Victim 1 day ago
i don't know why
Victim 1 day ago
there is a format job runnin
Victim 1 day ago
I need your little but useful help. On veem the volume where we have
the backup , this morning was accessible but now the volume is RAW.
Darkside 23 hours ago
I don't quite understand what you mean
Victim 22 hours ago
the tool that you used to encrypt our backup. At the end of encrypion does it do disprutive action?
Darkside 22 hours ago
No, it doesn't. If backups are on Windows - use the Windows decryptor.
Darkside 22 hours ago
Never interrupt the decryption process by closing the program
manually. The program may freeze during decryption, this is normal.
Victim 19 hours ago
Hi.
Victim 19 hours ago
we trusted in you
Victim 19 hours ago
but we need some files that miss
Darkside 17 hours ago
We gave you decryptors and they work, if you have problems with them, I will help you.
Darkside 17 hours ago
Before buying decryptors, you saw that some files were empty and you could not pay.
Darkside 17 hours ago
We fulfilled our part of the deal, I don't know why you have empty files. You didn't even tell me how many there are.

Auteur/autrice

sdgadmin@tux.ovh