Chat

Negotiation chat with different groups

Akira

Avaddon

Avos

Babuk

BlackBasta

BlackMatter

Cloak

Conti

Darkside

Dragonforce

  • 058f4b92-ae99-45c7-bf35-5d2d6754b3de – 19 message(s) voir chat
  • 05f724f8-906e-4739-8177-815852cc2c3f – 29 message(s) voir chat
  • 29BBE03074FDBB8D – 10 message(s) voir chat
  • 7A313D13EB6B4E58 – 32 message(s) voir chat
  • 89716D29D2CEE36F – 23 message(s) voir chat
  • AB0404E049514B50 – 28 message(s) voir chat
  • BD004D632D87DBA0 – 25 message(s) voir chat
  • C2A3C7249797F5ED – 66 message(s) voir chat
  • C42CDF65B97D0E92 – 30 message(s) voir chat
  • C7CD31EAAF9DE9AC – 71 message(s) voir chat
  • C8479B30418B331E – 4 message(s) voir chat
  • D6DDD9B26D7D41DB – 14 message(s) voir chat
  • FDA8141B6DD392E3 – 10 message(s) voir chat
  • b8e14e1a-548f-4eec-bd6e-a590126e57c9 – 14 message(s) voir chat

Hive

Hunters International

Mallox

NoEscape

Pear

Qilin

  • 20240429 – 3 message(s) voir chat
  • 20250203 - from @RakeshKrish12 – 36 message(s) voir chat

REvil

RansomHub

Ranzy

RunSomeWares

fog

lockbit3.0

mount-locker

trinity

Akira
> Hello. You've reached Akira support chat. Currently, we are preparing the list of data we took from your network. For now you have to know that dealing with us is the best possible way to settle this quick and cheap. Keep in touch and be patient with us. Do you have a permission to conduct a negotiation on behalf of your organization? Once we get your reply you will be provided with all the details.
Akira
> Are you going to work with us?
Victim
> yes, have permission and will wait for list of data taken. can you tell us the price in the meantime?
Akira
> Hello. You've reached Akira support chat. Currently, we are preparing the list of data we took from your network. For now you have to know that dealing with us is the best possible way to settle this quick and cheap. Keep in touch and be patient with us. Do you have a permission to conduct a negotiation on behalf of your organization? Once we get your reply you will be provided with all the details.
Victim
> i have permission
Akira
> List.7z // 119 KB
Akira
> These files were taken from your network prior to encryption. You can pick 2-3 random files up to 10 MB each from the list and we will upload them to this chat as a proof of possession. To prove that we can properly decrypt your data you can upload 2-3 encrypted files up to 10 MB each to our chat and we will upload decrypted copies back. We're looking through your financial papers to come up with a reasonable demand to you. We offer: 1) full decryption assistance;
2) evidence of data removal;
3) security report on vulnerabilities we found;
4) guarantees not to publish or sell your data;
5) guarantees not to attack you in the future. Let me know whether you're interested in a whole deal or in parts. This will affect the final price.
Victim
> i want the package
Akira
> The full package is $750,000. Do you want to test our decryption tool?
Akira
> You have 24 hours to give us your decision regarding this deal. If you stay silent, we will announce the breach on our blog.
Victim
> We are reviewing the file list and have a few files we would like you to provide as proof of possession
Victim
> E:\[redacted].com\unpacked\[redacted].png
Victim
> E:\[redacted].com\unpacked\[redacted].pdf
Victim
> Please stop the harrassing emails please
Akira
> files.rar // 113 KB
Akira
> If you need to test our tool, send the files today.
Victim
> We are working on our side to evaluate your proposal
Akira
> We are waiting for your decision today.
Akira
> Do you really think we will wait forever?
Victim
> we are working as fast as we can. Remove item 1 and let's know the update proposal and we will start to move quicker
Akira
> $400,000 for the options 2-5. We are waiting your reply today.
Victim
> today and a deal at 72,500. take away item 3 as well.
Akira
> If you take away item 3, we are decrease the price to $340,000. 5 figure amount cannot be considered. Make a reduction asap.
Victim
> We appreciate the further discounts, but 340,000 is not reasonable. We are ready to step forward further at your six figure ask of 101,500.
Akira
> $300,000 if you pay by Monday. Hurry up.
Victim
> We are ready to hurry up but 300,000 is still a tall number for us.
Akira
> You still have time. Do your best.
Victim
> we are working on our end but that number is still to high for consideration. The partners can step forward at 138,500
Akira
> $285,000 and we close this.
Victim
> our numbers are still far apart to get to closure. 151,500 and close this
Akira
> $265,000. Let's end this as we are about to announce the incident.
Victim
> No need for threats as we are trying to get to an agreeable solution. We are 105,000 apart. What is your solution
Akira
> The solution is that you gather the rest and we have a deal. We are waiting to end this today.
Victim
> Gathering the full funds is problematic. But we will make one more step at 169,600
Akira
> We're willing to take the same step and come down to $240,000. We're losing interest guys.
Victim
> Can we end this at 201,500 that should make all parties happy
Akira
> $225,000 will make us all happy. Here is our BTC wallet [redacted]. Let us know when can we expect the transfer.
Victim
> coin has been sent
Victim
> please provide us the materials
Akira
> unlockers.7z // 2.1 MB
Akira
> unlocker.exe -p="path_to_unlock"
unlocker.exe -s="C:\paths.txt"
where "paths.txt" is a list of paths for the decryptor, each path on a new line
ESXi commands
1) chmod +x unlocker
2) ./unlocker -p="/vmfs/volumes"
Victim
> thank you, received. please let us know when to expect evidence of data removal
Akira
> Should be provided soon.
Akira
> Deletion.7z // 69.9 KB

Auteur/autrice

sdgadmin@tux.ovh