Negotiation chat with different groups

Akira

Avaddon

Avos

Babuk

BlackBasta

BlackMatter

Cloak

Conti

Darkside

Dragonforce

  • 058f4b92-ae99-45c7-bf35-5d2d6754b3de – 19 message(s) voir chat
  • 05f724f8-906e-4739-8177-815852cc2c3f – 29 message(s) voir chat
  • 29BBE03074FDBB8D – 10 message(s) voir chat
  • 7A313D13EB6B4E58 – 32 message(s) voir chat
  • 89716D29D2CEE36F – 23 message(s) voir chat
  • AB0404E049514B50 – 28 message(s) voir chat
  • BD004D632D87DBA0 – 25 message(s) voir chat
  • C2A3C7249797F5ED – 66 message(s) voir chat
  • C42CDF65B97D0E92 – 30 message(s) voir chat
  • C7CD31EAAF9DE9AC – 71 message(s) voir chat
  • C8479B30418B331E – 4 message(s) voir chat
  • D6DDD9B26D7D41DB – 14 message(s) voir chat
  • FDA8141B6DD392E3 – 10 message(s) voir chat
  • b8e14e1a-548f-4eec-bd6e-a590126e57c9 – 14 message(s) voir chat

Hive

Hunters International

Mallox

NoEscape

Pear

Qilin

  • 20240429 – 3 message(s) voir chat
  • 20250203 - from @RakeshKrish12 – 36 message(s) voir chat

REvil

RansomHub

Ranzy

RunSomeWares

fog

lockbit3.0

mount-locker

trinity

Victim
> Hello

Victim
> hello

Akira
> Hello. You've reached Akira support chat. Currently, we are preparing the list of data we took from your network. For now you have to know that dealing with us is the best possible way to settle this quick and cheap. Keep in touch and be patient with us. Do you have a permission to conduct a negotiation on behalf of your organization? Once we get your reply you will be provided with all the details.

Victim
> Hello

Akira
> Do you see our messages?

Victim
> hello

Akira
> Please refresh this chat periodically.

Victim
> Hi

Victim
> What are the steps to recovery?

Akira
> Do you have a permission to conduct a negotiation on behalf of your organization? Once we get your reply you will be provided with all the details.

Victim
> yes

Victim
> any update?

Akira
> Please confirm you have a permission to conduct a negotiation on behalf of your organization and we will proceed with the details.

Victim
> yes, i have permission

Victim
> do you need any information?

Victim
> hello?

Victim
> ?

Victim
> hi?

Akira
> The longer you ignore our question, the longer you remain non-operational.

Victim
> i have permission to negotiation

Victim
> you need a proof?

Victim
> I need information on how recovery works

Akira
> I need you confirmation that you have a permission to conduct a negotiation on behalf of your company and make financial decisions.

Victim
> yes, i have permission to negotiation

Victim
> what information do you need?

Victim
> I'm ready to negotiate. How much?

Akira
> Are you kidding us? Please answer our question and we will proceed.

Victim
> Maybe I didn't understand your question. You questioned whether I am allowed to negotiate. The answer is yes, I have permission. Do you need any additional information that I didn't send? It's confusing. What question do I need to answer? I am the owner of the company, and I need to negotiate.

Akira
> list.rar // 848 KB

Akira
> These files were taken from your network prior to encryption. You can pick 2-3 random files up to 10 MB each from the list and we will upload them to this chat as a proof of possession. To prove that we can properly decrypt your data you can upload 2-3 encrypted files up to 10 MB each to our chat and we will upload decrypted copies back.

We're looking through your financial papers to come up with a reasonable demand to you. We offer: 1) full decryption assistance;
2) evidence of data removal;
3) security report on vulnerabilities we found;
4) guarantees not to publish or sell your data;
5) guarantees not to attack you in the future.

Let me know whether you're interested in a whole deal or in parts. This will affect the final price.

Victim
> show me these files, please: E:\[redacted].doc E:\[redacted].doc

Victim
> [redacted].ini.akira // 1.35 KB

Victim
> and decrypt this .ini, please

Akira
> files.rar // 145 KB

Victim
> ok, and can you decrypt the .ini too?

Victim
> ?

Victim
> Do you have access to just the documents on the list, or are there more documents?

Victim
> If you choose partial, is it done per server, or per file?

Akira
> We will decrypt every file that we encrypted. The list reflects everything we took. We do not decrypt per file.

Akira
> The price for the whole deal is $690,000. You can send us encrypted files for test.

Victim
> I will send the file for testing

Victim
> [redacted].ini.akira // 1.35 KB

Victim
> You did it?

Akira
> What do you mean? Will you send encrypted files?

Victim
> I will send the file for testing

Victim
> [redacted].ini.akira // 1.35 KB

Akira
> Wait a bit.

Akira
> decrypted.7z // 494 Bytes

Akira
> You can review. Ready to move to payment? Once you confirm I will give you our BTC wallet.

Akira
> We are waiting for your decision regarding the deal within a few hours.

Akira
> We see no decisions from you. Are you going to work with us?

Victim
> We are assessing your proposal. It’s a tough financial decision. Please give us more time.

Akira
> Hope 24 hours will be enough.

Akira
> Have you decided something? We are going to announce the leak today.

Akira
> You can find your company name in our news column: https://akiral2iz6a7qgd3ayp3l6yub7xx2uep76idk3u2kollpj5z3z636bad.onion If you want this post to be removed, we have to agree on something.

Auteur/autrice

sdgadmin@tux.ovh