Negotiation chat with different groups

Akira

Avaddon

Avos

Babuk

BlackBasta

BlackMatter

Cloak

Conti

Darkside

Dragonforce

  • 058f4b92-ae99-45c7-bf35-5d2d6754b3de – 19 message(s) voir chat
  • 05f724f8-906e-4739-8177-815852cc2c3f – 29 message(s) voir chat
  • 29BBE03074FDBB8D – 10 message(s) voir chat
  • 7A313D13EB6B4E58 – 32 message(s) voir chat
  • 89716D29D2CEE36F – 23 message(s) voir chat
  • AB0404E049514B50 – 28 message(s) voir chat
  • BD004D632D87DBA0 – 25 message(s) voir chat
  • C2A3C7249797F5ED – 66 message(s) voir chat
  • C42CDF65B97D0E92 – 30 message(s) voir chat
  • C7CD31EAAF9DE9AC – 71 message(s) voir chat
  • C8479B30418B331E – 4 message(s) voir chat
  • D6DDD9B26D7D41DB – 14 message(s) voir chat
  • FDA8141B6DD392E3 – 10 message(s) voir chat
  • b8e14e1a-548f-4eec-bd6e-a590126e57c9 – 14 message(s) voir chat

Hive

Hunters International

Mallox

NoEscape

Pear

Qilin

  • 20240429 – 3 message(s) voir chat
  • 20250203 - from @RakeshKrish12 – 36 message(s) voir chat

REvil

RansomHub

Ranzy

RunSomeWares

fog

lockbit3.0

mount-locker

trinity

Anonymous 2023-08-02 22:54:31

Anonymous 2023-08-19 04:33:16
Hello! If you are reading this message, your files
are encrypted and your data is compromised.In order for YOU to quickly
and without additional losses FOR YOU to regain control over your data,
strictly follow the proposed scenario:1. ONLY an AUTHORIZED
representative authorized to enter into financial agreements and
negotiate on behalf of the entire company should participate in
negotiations on your part.All other persons not endowed with such
authority (system administrators, cleaners, and others) who enter into
negotiations can cause significant harm, primarily for your own
company.2. Confirm that you are an authorized representative of your
company and briefly describe your situation.3. Stay online throughout
today until further instructions.4. If you did not receive our answer
during the day, then indicate the time, country and city in the time
zone of which you are located. Set a time convenient for you for
follow-up negotiations.5. Keep calm and be patient, they will definitely
answer you and help you with the recovery of your data.6. Remember that
mutual respect is the key to successful negotiations.

Client 2023-08-21 13:25:23
Hello,

Client 2023-08-21 13:25:46
We got infected and you asked to contact you.

Anonymous 2023-08-21 13:42:46
Hello

Anonymous 2023-08-21 13:43:36
you have not given me confirmation that you are authorized to negotiate on behalf of the company.

Anonymous 2023-08-21 13:43:49
you must understand that based on your answers, appropriate decisions will be made that will affectthroughout your company.

Anonymous 2023-08-21 13:44:01
So you're authorized to negotiate?

Client 2023-08-21 13:55:04
I'm authorized to ask your intentions. We're in
[redacted], and we're not used to this kind of situation. I'll
pass on to my manager, who will decide what to do next. This is the 1st
step for him.

Anonymous 2023-08-21 13:56:03
ok

Anonymous 2023-08-21 13:56:12
So that we do not have a misunderstanding and, as a result, undesirable consequences for you, follow these 3 rules:

Anonymous 2023-08-21 13:56:24
1 Always answer my questions. If you don't have an
answer and need to consult with management, tell me so. 2 Never end
negotiations unilaterally. This may serve as a signal to me that you
refuse to cooperate with us. 3 If the negotiations are completed today,
be sure to indicate the time of the next meeting.

Anonymous 2023-08-21 13:56:55
Now I will give you a step-by-step plan of further
actions. Follow it strictly, as it is the shortest way to the to the
successful completion of the case.

Anonymous 2023-08-21 13:57:28
The next steps will be:

Anonymous 2023-08-21 13:57:37
1. We assign you a ransom amount that you must accept*.

Client 2023-08-21 13:57:40
ok

Anonymous 2023-08-21 13:57:45
2. you convert the approved amount into BTC or XMR.

Anonymous 2023-08-21 13:58:13
3. You send us 2 encrypted files to check their reverse decryption**.

Anonymous 2023-08-21 13:58:22
4. we decrypt them and send them to you.

Anonymous 2023-08-21 13:58:33
5. you make sure the decryptor works and give us confirmation.

Anonymous 2023-08-21 13:58:44
6. we give you a wallet to transfer BTC or XMR.

Anonymous 2023-08-21 13:58:54
7. You make a trial amount transfer and wait for confirmation.

Anonymous 2023-08-21 13:59:05
8. After our confirmation, you transfer the entire amount.

Anonymous 2023-08-21 13:59:15
9. We send you the key and detailed instructions.***

Anonymous 2023-08-21 13:59:24
10. your data stored by us will be deleted.

Anonymous 2023-08-21 13:59:32
11. we provide you with a penetration report indicating the exploited vulnerabilities.****

Anonymous 2023-08-21 13:59:45
notes:

Anonymous 2023-08-21 14:00:20
* we know about your income so do not humiliate
yourself.Discounts can only be granted to those companies that have
applied to us in a timely manner and strictly comply with all our
instructions.**Files must not be important, and their maximum size must
be no more than 5 MB each.*** We will keep in touch with you until your
network is fully restored.**** The report is provided to everyone who
paid the full amount of the ransom.

Client 2023-08-21 14:01:49
1?

Anonymous 2023-08-21 14:03:36
This is the general plan.I will discuss the specific
amount of the ransom only with an authorized person who owns the right
to conclude financial agreements.

Anonymous 2023-08-21 14:06:26
if such a person is in touch with you, then tell him this and let him join our negotiations.

Anonymous 2023-08-21 18:29:30
I'm still here and waiting for your representative for further negotiations

Anonymous 2023-08-22 10:26:45
Your silence will only make things worse for
yourself.We have more than 60 GB of your private data at our
disposal.Urgently appoint an authorized representative and enter into
negotiations.Otherwise, we will sell your data to a third party

Anonymous 2023-08-23 10:02:51
As I warned you, your data is for sale.While the
timer is running, no one else can see your files.After the time expires,
your data will be available to our buyers, but it will not be available
to you.Enter into negotiations quickly and we will stop this.

Anonymous 2023-08-23 10:03:18
http://cloak7jpvcb73rtx2ff7kaw2kholu7bdiivxpzbhlny4ybz75dpxckqd.onion/

Anonymous 2023-08-23 10:03:32
[redacted]

Anonymous 2023-08-23 10:03:44
[redacted]

Anonymous 2023-08-23 10:04:37
[redacted]

Anonymous 2023-08-23 13:44:20
[redacted]

Anonymous 2023-08-24 17:08:44
Why are you keeping silent?you are running out of time.

Client 2023-08-27 03:14:55
[redacted].com hi sir this data need also

Client 2023-08-27 03:16:54
http://[redacted].onion my link not working so i contact this way

Client 2023-08-27 03:25:30
pls need decrypt tool

Client 2023-08-27 06:32:44
pls help me

Anonymous 2023-08-27 11:38:31
Hello!To help you I need to understand who I'm
dealing with?Have you been authorized to negotiate on behalf of the
entire company?

Anonymous 2023-08-27 11:45:52
As for [redacted].com, I can tell you that we can also solve this issue.Pass this on to your management.

Anonymous 2023-08-27 12:09:24
Get the point. Without the participation of your
leadership, we will not be able to conclude an agreement with you.It is
up to your bosses to decide whether or not they should pay us to decrypt
the files and return the data.Therefore, I strongly recommend that you
tell them about it. Let them give you a representative.This is the only
way we will find a way out of this situation.

Client 2023-08-27 12:56:03
how much price

Client 2023-08-27 12:56:05
[redacted].com

Anonymous 2023-08-27 14:45:16
wait a bit, I'll make some clarifications on this

Anonymous 2023-08-27 15:23:53
for those who want to recover files on [redacted].com. I have a question. How did you get access to this chat?

Anonymous 2023-08-27 15:25:08
After your answer, we will move on to discussing the price.

Anonymous 2023-08-28 11:30:22
Why did you stop communicating?Files on your computers won't decrypt themselves

Anonymous 2023-08-28 15:26:38
we are ready to cooperate.Give me an answer and we will move on to the question of price

Auteur/autrice

sdgadmin@tux.ovh