Negotiation chat with different groups

Akira

Avaddon

Avos

Babuk

BlackBasta

BlackMatter

Cloak

Conti

Darkside

Dragonforce

  • 058f4b92-ae99-45c7-bf35-5d2d6754b3de – 19 message(s) voir chat
  • 05f724f8-906e-4739-8177-815852cc2c3f – 29 message(s) voir chat
  • 29BBE03074FDBB8D – 10 message(s) voir chat
  • 7A313D13EB6B4E58 – 32 message(s) voir chat
  • 89716D29D2CEE36F – 23 message(s) voir chat
  • AB0404E049514B50 – 28 message(s) voir chat
  • BD004D632D87DBA0 – 25 message(s) voir chat
  • C2A3C7249797F5ED – 66 message(s) voir chat
  • C42CDF65B97D0E92 – 30 message(s) voir chat
  • C7CD31EAAF9DE9AC – 71 message(s) voir chat
  • C8479B30418B331E – 4 message(s) voir chat
  • D6DDD9B26D7D41DB – 14 message(s) voir chat
  • FDA8141B6DD392E3 – 10 message(s) voir chat
  • b8e14e1a-548f-4eec-bd6e-a590126e57c9 – 14 message(s) voir chat

Hive

Hunters International

Mallox

NoEscape

Pear

Qilin

  • 20240429 – 3 message(s) voir chat
  • 20250203 - from @RakeshKrish12 – 36 message(s) voir chat

REvil

RansomHub

Ranzy

RunSomeWares

fog

lockbit3.0

mount-locker

trinity

Victim 15:59 18.05.2021
привет

Avaddon 16:10 18.05.2021
Hello! Chat in English.

Victim 16:11 18.05.2021
hi

Victim 16:11 18.05.2021
how can i change my avatar?

Victim 16:12 18.05.2021
how much?

Avaddon 16:16 18.05.2021
Where are you from?

Victim 16:17 18.05.2021
Kazakhstan

Victim 16:17 18.05.2021
we don't have so big money you asking

Avaddon 16:29 18.05.2021
Wait a bit, we'll get back to you soon.

Victim 16:43 18.05.2021
ok

Avaddon 05:27 19.05.2021
tell me what kind of company are you?

Avaddon 05:28 19.05.2021
what do you do? do you have your own website? We do not work in the CIS countries and if we make sure that you are a company located in the CIS, then we will decrypt you for free.

Victim 07:26 19.05.2021
we are small wellding company who has finance problems at the moment.

Avaddon 08:13 19.05.2021
Hey! We need proof of your identity. If you provide us with a photo of your documents and face, we will give you a decryptor free of charge.

Avaddon 08:13 19.05.2021
Make a photo of your passport against your face. Then make a photo of the passport on the background of the monitor with encrypted files, you can open the properties of the file. Send us a photo through the service https://www.sendspace.com/

Victim 09:12 19.05.2021
ok. Thanks.

Victim 09:12 19.05.2021
https://www.sendspace.com/file/[redacted]

Victim 09:13 19.05.2021
here is a link to photos

Avaddon 09:20 19.05.2021
We apologize for this situation, this is an accident. We do not work in the CIS countries.

Avaddon 09:21 19.05.2021
You can download the decryptor on your payment page, update it. Run the decryptor according to the instructions.

Victim 09:49 19.05.2021
thanks.

Victim 09:50 19.05.2021
i wonder how you getting access?))))

Avaddon 10:02 19.05.2021
About vulnerabilities in your network. These are weak passwords and old operating systems, the operating systems that you used have vulnerabilities, with the help of them an attack was carried out on your network. Use strong passwords and hide them as best as possible and update all your OS to the latest versions.

Victim 13:49 19.05.2021
thanks a lot!!

Auteur/autrice

sdgadmin@tux.ovh