Chat

Negotiation chat with different groups

Akira

Avaddon

Avos

Babuk

BlackBasta

BlackMatter

Cloak

Conti

Darkside

Dragonforce

  • 058f4b92-ae99-45c7-bf35-5d2d6754b3de – 19 message(s) voir chat
  • 05f724f8-906e-4739-8177-815852cc2c3f – 29 message(s) voir chat
  • 29BBE03074FDBB8D – 10 message(s) voir chat
  • 7A313D13EB6B4E58 – 32 message(s) voir chat
  • 89716D29D2CEE36F – 23 message(s) voir chat
  • AB0404E049514B50 – 28 message(s) voir chat
  • BD004D632D87DBA0 – 25 message(s) voir chat
  • C2A3C7249797F5ED – 66 message(s) voir chat
  • C42CDF65B97D0E92 – 30 message(s) voir chat
  • C7CD31EAAF9DE9AC – 71 message(s) voir chat
  • C8479B30418B331E – 4 message(s) voir chat
  • D6DDD9B26D7D41DB – 14 message(s) voir chat
  • FDA8141B6DD392E3 – 10 message(s) voir chat
  • b8e14e1a-548f-4eec-bd6e-a590126e57c9 – 14 message(s) voir chat

Hive

Hunters International

Mallox

NoEscape

Pear

Qilin

  • 20240429 – 3 message(s) voir chat
  • 20250203 - from @RakeshKrish12 – 36 message(s) voir chat

REvil

RansomHub

Ranzy

RunSomeWares

fog

lockbit3.0

mount-locker

trinity

victim Friday, 30 August 2024 16:56:22
We have found what appears to be your notes on our systems with links that we have followed here. What are the next steps and what is going on?
fog Friday, 30 August 2024 17:35:20
Hello. Wait please. I'll get back with details.
victim Sunday, 01 September 2024 16:57:05
Hello? Any news?
fog Monday, 02 September 2024 07:47:38
[provides a plain TXT files list]
that's what's been taken from your network
fog Monday, 02 September 2024 13:45:34
We can decrypt your systems in a couple of hours for only $290,000. Just send us 3 random encrypted files to be sure - we'll decrypt them for free.
victim Wednesday, 04 September 2024 19:37:39
Can you send us the files from the list we have provided below?
08/29/2024 04:28 AM 98,075 [redacted].pdf
08/29/2024 06:59 AM 165 [redacted].xlsx
08/29/2024 03:50 AM 15,571 [redacted].xlsx
08/29/2024 03:59 AM 28,381 [redacted].docx
08/29/2024 04:01 AM 32,193 [redacted].pdf
fog Wednesday, 04 September 2024 20:11:55
[provides a 7zip compressed archive]
victim Sunday, 08 September 2024 13:19:56
Hello, we are still working on gathering encrypted files small enough to send over to you, but it's almost impossible to find any due to the way all of our systems were locked up in the first place. We hope to have something soon, but we will reach back out once we do.
fog Sunday, 08 September 2024 14:40:00
I can wait until Monday only
victim Monday, 09 September 2024 23:59:59
Hello, we are still trying to pull some sample encrypted files to send to you but we are running into a lot of issues because our systems aren't available to grab the files off of. We will hopefully have a file or two tomorrow to send over.
fog Tuesday, 10 September 2024 08:57:22
I hope so
fog Tuesday, 10 September 2024 08:57:29
I cant wait more
victim Tuesday, 10 September 2024 13:35:13
Ok, we will have those files over today.
fog Tuesday, 10 September 2024 14:02:13
I wait
victim Wednesday, 11 September 2024 13:49:27
[provides 3 encrypted files]
Please see the attached files.
fog Wednesday, 11 September 2024 14:06:55
[provides 2 decrypted files]
fog Admin 14:42:56
its time to perform payment
victim Thursday, 12 September 2024 01:04:56
Hello, thank you for your patience to this point as we try and navigate our way through this. We have been working at verifying and reviewing everything you’ve given us and while we want to get this resolved, we simply don’t have 290,000 to send you. Is there any discount from you to be had so that we can maybe get this to some sort of resolution with you?
fog Thursday, 12 September 2024 10:05:00
if you make payment by Saturday evening I can take 255k to get to a resolution
victim Thursday, 12 September 2024 23:25:23
Hello, thank you for your patience to this point as we try and navigate our way through this. We have been working at verifying and reviewing everything you’ve given us and while we want to get this resolved, we simply don’t have 290,000 to send you. Is there any discount from you to be had so that we can maybe get this to some sort of resolution with you?
fog Friday, 13 September 2024 08:28:37
if you make payment today evening I can take 255k to get to a resolution
victim Monday, 16 September 2024 13:32:42
Thank you for the reduction, but even at that number it’s more than we have on hand. Can you please give us a number that we can take back to the firm’s leadership and see what can be done?
fog Monday, 16 September 2024 14:41:41
what did you leadership said about 255k?
fog Monday, 16 September 2024 14:42:30
what do you have on hand?
fog Wednesday, 25 September 2024 14:28:27
I see
fog Wednesday, 25 September 2024 14:29:22
I will leak your files
victim Wednesday, 09 October 2024 13:18:41
We are still interested in getting a decryptor to unlock a small portion of our data, but it’s not nearly worth 255,000. What is the lowest number you will take?
fog Wednesday, 09 October 2024 14:19:51
I will wake 255k
fog Wednesday, 09 October 2024 14:20:07
what is it worth?
fog Wednesday, 09 October 2024 14:20:16
what would you say?
victim Thursday, 10 October 2024 14:34:22
Hello, we are willing to pay 25,000 so we can both move on from this. That’s about what it would take for us to just completely reconstitute the data anyway.
fog Thursday, 10 October 2024 15:01:32
how much would it take for you to keep this situation secret?
victim Thursday, 10 October 2024 16:36:05
$25,000 is what we have and could send you as soon as possible
fog Thursday, 10 October 2024 18:34:58
you don't care if your files leaked?
fog Thursday, 10 October 2024 18:35:11
no I don't take 25k
fog Thursday, 10 October 2024 18:35:37
I can take 150k if you need decrypter only
victim Wednesday, 16 October 2024 16:50:19
While we appreciate the reduction for just the decryptor, we would also like for our data to be deleted from your possession and for proof of that being deleted. We can come up on our price, but we don’t have what you are asking for. We can do $60k that we can send immediately, and is more than double what we offered before. But that’s all we have onhand to send. Please consider our offer and we will get the process started of sending that money over to you.
fog Wednesday, 16 October 2024 17:23:38
$200,000 for data deletion and unlockers. You have the last chance
victim Saturday, 26 October 2024 20:09:12
Hello, it’s taken us quite a while, but we have been able to source an additional 40,000 and we can now offer you 100,000 to get this done as soon as possible. This has been very stressful for us and we have exhausted all avenues of getting additional funding. If you accept, we will get the process started to send the money to you ASAP.
fog Sunday, 27 October 2024 08:52:28
hi
fog Sunday, 27 October 2024 08:54:39
I cannot accept this for both data and unlockers but ok I can accept that for unlockers only
fog Sunday, 27 October 2024 08:54:49
175k for everything would let me get it resolved today
fog Wednesday, 30 October 2024 12:23:39
hi
fog Wednesday, 30 October 2024 12:26:36
are you leaving me?
victim Thursday, 31 October 2024 14:49:23
Honestly, it's taken us this long just to collect what we've been able to collect and at the price that you're wanting, we'd just rather put the extra 75k into rebuilding the data we're missing. We've been trying to come to an agreement here, but we've exhausted all options and this is what we have.
fog Thursday, 31 October 2024 15:02:54
Does it mean our deal is off?
fog Thursday, 31 October 2024 15:03:25
Do you understand that your files will be leaked?
fog Tuesday, 05 November 2024 13:32:00
http://[redacted].onion/posts/[redacted]/
victim Tuesday, 05 November 2024 17:35:37
Hello, the deal is not off. We have offered what we think is a generous offer to have a small portion of our data unlocked that we weren’t able to retrieve from backups. If you are going to walk away from 100,000 just to release our data, then we will have no choice but to reconstruct the data with that 100,000 and move on.
fog Tuesday, 05 November 2024 18:03:59
hi
fog Tuesday, 05 November 2024 18:04:17
ok send 100k here [redacted] and we get this resolved
fog Tuesday, 05 November 2024 18:04:27
tell me when ready to send
victim Wednesday, 06 November 2024 17:18:51
We are in the process of converting the funds now. I will reach back out once we have that process complete. Just so we are clear, you will provide us with a decryptor, proof of you deleting our data, and a report on how you got into our network?
fog Wednesday, 06 November 2024 19:06:05
Yes, we will provide you with everything you outlined.
fog Friday, 08 November 2024 16:30:25
Hello. How long should I wait? Next week I will have to leak your files.
victim Saturday, 09 November 2024 18:24:46
Payment has been made. Can you please provide the items as soon as possible?
fog Saturday, 09 November 2024 19:07:52
received. wait please
victim Wednesday, 13 November 2024 14:30:32
Hello, can you please provide the items to us?
fog Admin 14:43:43
Windows
unlocker.exe -nomutex -console -target \\SERVER\C$
unlocker.exe -nomutex -console -target C:\

Esxi \ LINUX
chmod +x unlocker_key
./unlocker_key --id [redacted] --log --target "/vmfs/volumes/"
victim Sunday, 24 November 2024 22:52:40
Can you help us out with some files that don't see to be decrypting? I've attached them.
fog Monday, 25 November 2024 09:44:09
wait
victim Monday, 25 November 2024 14:32:18
The decryptor that we have isn't working on these files. Can you send me a decryptor that works?
fog Monday, 25 November 2024 14:50:28
Give us error logs and explain your actions in more details.
victim Tuesday, 26 November 2024 14:22:26
These are the best logs we can find.
victim Tuesday, 26 November 2024 14:24:02
We're just attempting to run the decryptor and it's simply not decrypting some of the files.
fog Tuesday, 26 November 2024 16:44:33
wait
fog Tuesday, 26 November 2024 16:46:09
are you trying to decrypt files on windows?
victim Tuesday, 26 November 2024 20:20:24
Yes
fog Wednesday, 27 November 2024 12:27:26
the problem is the path to files is too long
fog Wednesday, 27 November 2024 12:28:23
the decrypter works correctly
fog Wednesday, 27 November 2024 12:28:55
try to fix files in a different folder
victim Wednesday, 27 November 2024 16:19:10
We shortened the path and it's still not working
fog Wednesday, 27 November 2024 19:32:06
give us the log as well

Auteur/autrice

sdgadmin@tux.ovh