Chat

Negotiation chat with different groups

Akira

Avaddon

Avos

Babuk

BlackBasta

BlackMatter

Cloak

Conti

Darkside

Dragonforce

  • 058f4b92-ae99-45c7-bf35-5d2d6754b3de – 19 message(s) voir chat
  • 05f724f8-906e-4739-8177-815852cc2c3f – 29 message(s) voir chat
  • 29BBE03074FDBB8D – 10 message(s) voir chat
  • 7A313D13EB6B4E58 – 32 message(s) voir chat
  • 89716D29D2CEE36F – 23 message(s) voir chat
  • AB0404E049514B50 – 28 message(s) voir chat
  • BD004D632D87DBA0 – 25 message(s) voir chat
  • C2A3C7249797F5ED – 66 message(s) voir chat
  • C42CDF65B97D0E92 – 30 message(s) voir chat
  • C7CD31EAAF9DE9AC – 71 message(s) voir chat
  • C8479B30418B331E – 4 message(s) voir chat
  • D6DDD9B26D7D41DB – 14 message(s) voir chat
  • FDA8141B6DD392E3 – 10 message(s) voir chat
  • b8e14e1a-548f-4eec-bd6e-a590126e57c9 – 14 message(s) voir chat

Hive

Hunters International

Mallox

NoEscape

Pear

Qilin

  • 20240429 – 3 message(s) voir chat
  • 20250203 - from @RakeshKrish12 – 36 message(s) voir chat

REvil

RansomHub

Ranzy

RunSomeWares

fog

lockbit3.0

mount-locker

trinity

Hive 2 November 2021 17:52
Hello and welcome to Hive.
How may I help you?
Hive 3 November 2021 13:40
Hello! Waiting for your decision, otherwise I will be forced to raise the price if ignored and put your information on my information auction.
Victim 5 November 2021 16:30
Anyone still here?
Hive 5 November 2021 16:50
hi
Hive 5 November 2021 16:51
How may I help you?
Victim 5 November 2021 17:57
What's your intention here?
Hive 5 November 2021 18:20
We don't care about your company files, we don't care about that, we're only interested in profit. This is business. Are you ready to make a deal?
Hive 5 November 2021 18:23
Decrypting your server and removing stolen confidential files from your servers costs you $200,000 in bitcoins.
Victim 5 November 2021 18:25
Wow...$200,000 in bitcoins is serious money. No idea who you are or what data you're talking about.
Hive 5 November 2021 18:29
After payment, you will receive:

1) Transcription software
2) Promise of non-disclosure
3) Access to storage of decrypted files
4) Security report

To convince you to pay, we can make calls to your customers to notify them of the incident.
Victim 5 November 2021 18:37
Trust me, that's the last thing I need. Just trying to get details from you. Just feeling very targeted right now.
Victim 5 November 2021 18:37
How do I know you have files?
Hive 5 November 2021 19:06
If you are willing to cooperate, I will give you some files to confirm, but it does not matter, as it is silly to think that we have not downloaded anything when big money is being decided. You can read public news and our publications to be sure of our words http://hiveleakdbtnp76ulyhi52eag6c6tyc3xw7ez7iqy6wc34gd2nekazyd.onion/
Hive 5 November 2021 19:11
lacveeam1.lac.[redacted].com
MDVTSQL1
lacsql2012.lac.[redacted].com
SQLCLUSTER02
lacwsus.lac.[redacted].com
CIFSFTPDATA What files from these hosts are you interested in? Maybe you are interested in other hosts, tell me the name of the host
Victim 5 November 2021 19:55
Which hosts did you take files from?
Hive 6 November 2021 02:35
I don't know which hosts your data was downloaded from. We took only those files that were of interest and could be sold to third parties. Typically, customer data, databases, financial reports, corporate email archives and other classified and confidential data related to the company's activities (technological developments, blueprints, drug clinical trials, software codes, etc.) are downloaded.
Victim 6 November 2021 03:13
Can you show us what the files of interest were?
Hive 6 November 2021 11:02
We selected several random files from the downloaded repository and attached to the panel. You can watch it.
Victim 6 November 2021 19:22
Can you decrypt these 2 files?
Hive 6 November 2021 19:36
I have decrypted both files
Victim 7 November 2021 00:13
Are these all the files you took from me?
Victim 7 November 2021 01:31
Can you give me a list of all the files you have?
Victim 7 November 2021 14:28
Are you here?
Hive 7 November 2021 14:33
hi
Hive 7 November 2021 14:59
We have uploaded a list of all your files that we have. You can see them in the panel.
Victim 7 November 2021 15:55
Thanks, we'll take a look today. So basically if we don't pay, everything in this list gets onto your site?
Hive 7 November 2021 16:06
Yes, the files will be revealed here on the site. We will also study them in more detail and post them on other forums. You should understand that this information can get to intruders.
Victim 7 November 2021 20:56
Understood. We are uploading the files with the key file now.
Hive 7 November 2021 20:59
ok
Hive 7 November 2021 21:04
These both files contain sensitive info. I will not disclose them to you before payment. Choose another files or I can upload them to you truncated
Victim 8 November 2021 14:23
We have hundreds of files like this that need to be unlocked. These two alone won't make a difference. We just want to make sure your tool works since there's little value in paying if we can't get these files fixed.
Hive 8 November 2021 14:28
We are well-known organization and our decryptor works. Otherwise you would able to read about any issues with other companies which are hundreds.
Victim 8 November 2021 15:22
We've seen it work on the first 2 files you fixed but we've heard that encryption can sometimes corrupt files too. The last thing we want to do is pay and not get our files back. We can't afford to pay a dime without knowing that your tool will get us back up and running. Sorry if this isn't a normal ask. We're just against a wall right now and this would really help.
Hive 8 November 2021 16:08
Upload any other files and a corresponding key(s) without any important info in them.
Victim 8 November 2021 16:44
We're just worried about this particular file type. That's the main issue.
Hive 8 November 2021 18:00
I already decrypt these two last files you uploaded, but I can't send you them to you due to sensitive info inside
Hive 8 November 2021 18:01
So you will be able to do the same right after you'll purchase the decryption software
Victim 8 November 2021 18:37
Not sure how we'll be able to pay without seeing it. I've read a lot online and people are always running into issues with decryption. This is going to be a risk no matter what, but we need certain assurances
Victim 8 November 2021 19:51
If you can't send the files, can you send a screenshot?
Hive 8 November 2021 21:00
We will answer you a little bit later.
Hive 8 November 2021 21:09
I have uploaded shorten files
Victim 8 November 2021 21:18
We'll review them. If they look good, then we can pay $100,000. That's a little more cash than what we actually have, but we'll take a step towards you to make this happen. Do we have an agreement?
Hive 8 November 2021 21:47
The price is not a subject to discuss.
Victim 8 November 2021 21:51
This isn't about a low ball. No idea how to get our hands on $200,000. What's something reasonable you'd consider?
Hive 8 November 2021 22:40
The price of $ 200,000 was announced at the very beginning of the negotiations. After that, you continued negotiations, specifying all the necessary information for you. thereby you agreed to the announced amount. You didn't just waste your time on this, did you? Your company look can afford this amount and you know it. We did not overstate the cost, the price is optimal for you. I ask you to make a decision and make a payment as soon as possible. Then we will fulfill all the stated conditions immediately.
Victim 9 November 2021 00:23
We were trying to see if this was a viable solution before discussing the financial side. It wouldn't make sense for us to go through with this if we weren't sure on what we were getting from you. We're a small business and we figured you wouldn't accept a small price. $100,000 is not a small price.
Victim 9 November 2021 05:26
If we can move some money around and increase what we can send you to $150,000 will you accept? This is a lot of money for us, we're just a small business and we're trying to take a step in reaching a quick agreement with you.
Hive 9 November 2021 07:20
I fully understand you. I understand what a difficult situation you are in. And for this reason, I will help you, I agree to $ 170,000. I will ask you to also help me and make the payment quickly.
Victim 9 November 2021 08:18
Ok, it's late right now but I will bring this to my team first thing in the morning. Thank you
Victim 9 November 2021 15:23
Is the wallet [redacted]? Also, what will we get from you if we pay $170,000?
Hive 9 November 2021 15:33
After payment you will get:

1) The decryption software
2) Promise of non-disclosure
3) Access to exfiltrated files storage
4) Security report
Hive 9 November 2021 15:37
Yes, our wallet [redacted]
Victim 9 November 2021 20:02
Paid. Can we get the tool now?
Hive 9 November 2021 20:19
Wait a little bit. We'll get to step 1 soon.
Victim 9 November 2021 21:24
and steps 2-4?
Hive 9 November 2021 21:58
3) Access to exfiltrated files storage
mega.nz login megashara@onionmail.org
Password [redacted]
Hive 9 November 2021 22:20
4) Security report
https://dropmefiles.net/en/[redacted]
Victim 10 November 2021 00:32
checking this out

Auteur/autrice

sdgadmin@tux.ovh