Negotiation chat with different groups

Akira

Avaddon

Avos

Babuk

BlackBasta

BlackMatter

Cloak

Conti

Darkside

Dragonforce

  • 058f4b92-ae99-45c7-bf35-5d2d6754b3de – 19 message(s) voir chat
  • 05f724f8-906e-4739-8177-815852cc2c3f – 29 message(s) voir chat
  • 29BBE03074FDBB8D – 10 message(s) voir chat
  • 7A313D13EB6B4E58 – 32 message(s) voir chat
  • 89716D29D2CEE36F – 23 message(s) voir chat
  • AB0404E049514B50 – 28 message(s) voir chat
  • BD004D632D87DBA0 – 25 message(s) voir chat
  • C2A3C7249797F5ED – 66 message(s) voir chat
  • C42CDF65B97D0E92 – 30 message(s) voir chat
  • C7CD31EAAF9DE9AC – 71 message(s) voir chat
  • C8479B30418B331E – 4 message(s) voir chat
  • D6DDD9B26D7D41DB – 14 message(s) voir chat
  • FDA8141B6DD392E3 – 10 message(s) voir chat
  • b8e14e1a-548f-4eec-bd6e-a590126e57c9 – 14 message(s) voir chat

Hive

Hunters International

Mallox

NoEscape

Pear

Qilin

  • 20240429 – 3 message(s) voir chat
  • 20250203 - from @RakeshKrish12 – 36 message(s) voir chat

REvil

RansomHub

Ranzy

RunSomeWares

fog

lockbit3.0

mount-locker

trinity

Akira
> Hello. You've reached an Akira support chat. Currently, we are preparing the list of data we took from your network. For now you have to know that dealing with us is the best possible way to settle this quick and cheap. Keep in touch and be patient with us. We will reach out to you soon.

Do you have a permission to conduct a negotiation on behalf of your organization?

Akira
> Your attempts to waste our time could force our exit from negotiations and cause data publication.

Victim
> we identified our systems to be encrypted and we have limited back ups. Let us know if you can help with recovery.

Akira
> We will let you know soon.

Akira
> Hello! First of all send us 2-3 encrypted files, so we can prove that we can restore them. Secondly we have downloaded 400 gb of your sensaitve data. In the attachment we sent you the file-lists of data we have downloaded from your network. You can request any 2-3 files from that list as proof that we have the files. For the service of decryption and secure deletion of downloaded files your company must pay 900000 usd in BTC.
File list: https://temp.sh/[redacted]/all.txt

Victim
> knock knock !

Akira
> Don't you see our previous message? We've sent the list and outlined the deal terms.

Auteur/autrice

sdgadmin@tux.ovh