Chat

Negotiation chat with different groups

Akira

Avaddon

Avos

Babuk

BlackBasta

BlackMatter

Cloak

Conti

Darkside

Dragonforce

  • 058f4b92-ae99-45c7-bf35-5d2d6754b3de – 19 message(s) voir chat
  • 05f724f8-906e-4739-8177-815852cc2c3f – 29 message(s) voir chat
  • 29BBE03074FDBB8D – 10 message(s) voir chat
  • 7A313D13EB6B4E58 – 32 message(s) voir chat
  • 89716D29D2CEE36F – 23 message(s) voir chat
  • AB0404E049514B50 – 28 message(s) voir chat
  • BD004D632D87DBA0 – 25 message(s) voir chat
  • C2A3C7249797F5ED – 66 message(s) voir chat
  • C42CDF65B97D0E92 – 30 message(s) voir chat
  • C7CD31EAAF9DE9AC – 71 message(s) voir chat
  • C8479B30418B331E – 4 message(s) voir chat
  • D6DDD9B26D7D41DB – 14 message(s) voir chat
  • FDA8141B6DD392E3 – 10 message(s) voir chat
  • b8e14e1a-548f-4eec-bd6e-a590126e57c9 – 14 message(s) voir chat

Hive

Hunters International

Mallox

NoEscape

Pear

Qilin

  • 20240429 – 3 message(s) voir chat
  • 20250203 - from @RakeshKrish12 – 36 message(s) voir chat

REvil

RansomHub

Ranzy

RunSomeWares

fog

lockbit3.0

mount-locker

trinity

Victim
> Please confirm this message
Akira
> Hello
Akira
> You've reached Akira support chat. Currently, we are preparing the list of data we took from your network. For now you have to know that dealing with us is the best possible way to settle this quick and cheap. Keep in touch and be patient with us. We will reach out to you soon. Do you have a permission to conduct a negotiation on behalf of your organization? Once we get a response you will be provided with all the details.
Victim
> Yes I do
Akira
> Please wait.
Victim
> Just checking you are still here?
Akira
> We are. Wait for the details.
Victim
> Do you have the details yet?
Akira
> [redacted].rar // 371 KB
Akira
> These files were taken from your network prior to encryption. You can pick 2-3 random files from the list and we will upload them to this chat as a proof of possession. To prove that we can properly decrypt your data you can upload 2-3 encrypted files to our chat and we will upload decrypted copies back.

We're looking through your financial papers to come up with a reasonable demand to you. We offer: 1) full decryption assistance;
2) evidence of data removal;
3) security report on vulnerabilities we found;
4) guarantees not to publish or sell your data;
5) guarantees not to attack you in the future.

Let me know whether you're interested in a whole deal or in parts. This will affect the final price.
Victim
> We need a few days to look at the list and pick 2-3 files. Ill get back to you on monday
Akira
> Standing by.
Akira
> Hello. I am waiting for the files.
Akira
> So, we've gone through your files to define your financial abilities. We've been looking through your bank statements, net income, cyber liability limits, financial audits - all the info that might help us to calculate our demand to you. We're willing to set a $300,000 price for ALL the services we offer:

1) full decryption assistance;
2) evidence of data removal;
3) security report on vulnerabilities we found;
4) guarantees not to publish or sell your data;
5) guarantees not to attack you in the future.

Let me know whether you're interested in a whole deal or in parts. This will affect the final price. Atm, we highly recommend that you refer to your cyber insurance to cover our amount quickly minimizing all upcoming risks.
Victim
> Thank you for this update. I will get you the filenames very soon and we will also discuss the price you have shared
Akira
> Standing by.
Victim
> 1. [redacted].pdf 2. [redacted].xlsx 3. [redacted].docx
Akira
> [redacted].rar // 541 KB
Victim
> I'll review these today
Akira
> We have to proceed to payment options.
Victim
> Ok but first I need to see proof of decryption assistance. I will get you files today
Akira
> Standing by.
Victim
> [redacted].xml.akira // 518 KB
Victim
> [redacted].akira // 749 KB
Victim
> Here
Akira
> Please wait.
Akira
> [redacted] // 748 KB
Akira
> [redacted].xml // 517 KB
Victim
> Thanks. Is it expected that the files become 1kb smaller after decryption?
Akira
> Yes, it is.
Akira
> Ready to move to payment?
Victim
> We have no more questions at the moment. We confirm your abilities to recover the data and the details about our files. I am meeting with our boss in the morning to go over our next steps and I will check in with you after that
Akira
> Waiting for the update.
Victim
> Here is the update. We have taken note of what is still encrypted and the financial impact of losing it or rebuilding it. I am running the numbers again to confirm but I dont think it amounts to the $300k that was quoted. To discuss payment, we would hope to see a revised quote, if that is something you can provide.
Akira
> Let me know what sum you see reasonable and I'll discuss it with my team.
Victim
> I will confirm our assessment with my boss and get back to you after the weekend
Akira
> Waiting.
Akira
> so?
Akira
> You have 24 hours to give us your decision regarding this deal. If you stay silent, we will announce the breach on our blog.
Akira
> You can find your company name in our news column: akiral2iz6a7qgd3ayp3l6yub7xx2uep76idk3u2kollpj5z3z636bad.onion If you want this post to be removed, we have to agree on something.
Akira
> Your data will be available for downloading soon.

Auteur/autrice

sdgadmin@tux.ovh