Negotiation chat with different groups

Akira

Avaddon

Avos

Babuk

BlackBasta

BlackMatter

Cloak

Conti

Darkside

Dragonforce

  • 058f4b92-ae99-45c7-bf35-5d2d6754b3de – 19 message(s) voir chat
  • 05f724f8-906e-4739-8177-815852cc2c3f – 29 message(s) voir chat
  • 29BBE03074FDBB8D – 10 message(s) voir chat
  • 7A313D13EB6B4E58 – 32 message(s) voir chat
  • 89716D29D2CEE36F – 23 message(s) voir chat
  • AB0404E049514B50 – 28 message(s) voir chat
  • BD004D632D87DBA0 – 25 message(s) voir chat
  • C2A3C7249797F5ED – 66 message(s) voir chat
  • C42CDF65B97D0E92 – 30 message(s) voir chat
  • C7CD31EAAF9DE9AC – 71 message(s) voir chat
  • C8479B30418B331E – 4 message(s) voir chat
  • D6DDD9B26D7D41DB – 14 message(s) voir chat
  • FDA8141B6DD392E3 – 10 message(s) voir chat
  • b8e14e1a-548f-4eec-bd6e-a590126e57c9 – 14 message(s) voir chat

Hive

Hunters International

Mallox

NoEscape

Pear

Qilin

  • 20240429 – 3 message(s) voir chat
  • 20250203 - from @RakeshKrish12 – 36 message(s) voir chat

REvil

RansomHub

Ranzy

RunSomeWares

fog

lockbit3.0

mount-locker

trinity

Victim
> hi

Victim
> hi

Victim
> hi

Victim
> anybody out there?

Victim
> hello?

Akira
> Hello. You've reached an Akira support chat. Currently, we are preparing the list of data we took from your network. For now you have to know that dealing with us is the best possible way to settle this quick and cheap. Keep in touch and be patient with us. We will reach out to you soon.

Do you have a permission to conduct a negotiation on behalf of your organization? Once we get a response you will be provided with all the details.

Victim
> nobody seems to be there, we will come back later

Akira
> Do you see our messages?

Victim
> hi there, got another tor browser, now I see your messages

Victim
> yes, I have a permission to negotiate on behalf of my organization

Akira
> Please wait for details.

Victim
> hello?

Victim
> I can't see any message after your "Do you see our messages?"

Victim
> I will come back to check new messages

Victim
> hello?

Akira
> Can you see my message?

Victim
> yes

Victim
> now I see "Can you see my message?", but I had to log out and log in again

Victim
> it seems that I don't get an update in the chat directly

Victim
> we will come back later as "please wait" seems to be a bit longer

Akira
> List.rar // 2.48 MB

Akira
> These files were taken from your network prior to encryption. You can pick 2-3 random files from the list and we will upload them to this chat as a proof of possession. To prove that we can properly decrypt your data you can upload 2-3 encrypted files to our chat and we will upload decrypted copies back.

Victim
> I got the list and will check which files we want to see as prove of possession

Akira
> Standing by.

Victim
> we would like to see the following 3 files:

Victim
> D:\[redacted].log

Victim
> D:\[redacted].refs

Victim
> D:\[redacted].png

Akira
> Please wait.

Victim
> Take your time, I will come back on monday

Victim
> hi there, back again and ready to receive your files

Akira
> The files will be uploaded shortly.

Akira
> files.rar // 19.6 KB

Akira
> Please review. Give me encrypted files asap, if you want to test our decryption tool.

Victim
> got your files and check them, will come back with encrypted files asap

Akira
> We are standing by to the files.

Victim
> [redacted].akira // 21.6 KB

Victim
> uploaded the one file to test the decryption tool

Akira
> [redacted] // 21.1 KB

Victim
> ok, matches, so: what next?

Akira
> So, we've gone through your files to define your financial abilities. We've been looking through your bank statements, net income, cyber liability limits, financial audits - all the info that might help us to calculate our demand to you. We're willing to set a $350,000 price for ALL the services we offer:

1) full decryption assistance;
2) evidence of data removal;
3) security report on vulnerabilities we found;
4) guarantees not to publish or sell your data;
5) guarantees not to attack you in the future.

Let me know whether you're interested in a whole deal or in parts. This will affect the final price.

Victim
> We decline and will not pay anything. This conversion is over.

Akira
> OK. Thank you for the information.

Auteur/autrice

sdgadmin@tux.ovh