Negotiation chat with different groups

Akira

Avaddon

Avos

Babuk

BlackBasta

BlackMatter

Cloak

Conti

Darkside

Dragonforce

  • 058f4b92-ae99-45c7-bf35-5d2d6754b3de – 19 message(s) voir chat
  • 05f724f8-906e-4739-8177-815852cc2c3f – 29 message(s) voir chat
  • 29BBE03074FDBB8D – 10 message(s) voir chat
  • 7A313D13EB6B4E58 – 32 message(s) voir chat
  • 89716D29D2CEE36F – 23 message(s) voir chat
  • AB0404E049514B50 – 28 message(s) voir chat
  • BD004D632D87DBA0 – 25 message(s) voir chat
  • C2A3C7249797F5ED – 66 message(s) voir chat
  • C42CDF65B97D0E92 – 30 message(s) voir chat
  • C7CD31EAAF9DE9AC – 71 message(s) voir chat
  • C8479B30418B331E – 4 message(s) voir chat
  • D6DDD9B26D7D41DB – 14 message(s) voir chat
  • FDA8141B6DD392E3 – 10 message(s) voir chat
  • b8e14e1a-548f-4eec-bd6e-a590126e57c9 – 14 message(s) voir chat

Hive

Hunters International

Mallox

NoEscape

Pear

Qilin

  • 20240429 – 3 message(s) voir chat
  • 20250203 - from @RakeshKrish12 – 36 message(s) voir chat

REvil

RansomHub

Ranzy

RunSomeWares

fog

lockbit3.0

mount-locker

trinity

Akira
> Hello. You've reached Akira support chat. Currently, we are preparing the list of data we took from your network. For now you have to know that dealing with us is the best possible way to settle this quick and cheap. Keep in touch and be patient with us. Do you have a permission to conduct a negotiation on behalf of your organization? Once we get your reply you will be provided with all the details.

Victim
> yes

Victim
> how do i fix my computer?

Akira
> Hello please wait

Victim
> hello?

Victim
> is anyone there?

Victim
> I guess I'll just shut down and reformat since you are not answering

Akira
> Wait a second.

Akira
> List.7z // 1010 KB

Akira
> These files were taken from your network prior to encryption. You can pick 2-3 random files up to 10 MB each from the list and we will upload them to this chat as a proof of possession. To prove that we can properly decrypt your data you can upload 2-3 encrypted files up to 10 MB each to our chat and we will upload decrypted copies back. We're looking through your financial papers to come up with a reasonable demand to you. We offer: 1) full decryption assistance;
2) evidence of data removal;
3) security report on vulnerabilities we found;
4) guarantees not to publish or sell your data;
5) guarantees not to attack you in the future. Let me know whether you're interested in a whole deal or in parts. This will affect the final price.

Victim
> hello

Victim
> hi

Victim
> I need help my files are locked!

Victim
> please help me I need my files

Victim
> I needz my filez bro

Victim
> yo i need my files back

Victim
> 10/07/2020 11:10 AM 75,909 [redacted].pdf 10/07/2020 11:10 AM 20,991 [redacted].pdf

Victim
> how much money do you need

Victim
> whats your demand

Victim
> i am willing to pay

Victim
> YEAH BOIII

Victim
> I gots work due for muh classes bro, hurry up

Victim
> DO YOU ACEPT WACKY BUCKS?

Victim
> Cashapp right now bro

Victim
> my grandma moves faster than you and she's dead

Victim
> what country are you in?

Victim
> What is your Political Affiliation?

Akira
> Wait a bit.

Victim
> YOUR COUNTRY SUCKS!!!!!!

Victim
> best i can do is 2 v-bucks

Victim
> I got some Chuck E Cheese tokens if that tickles your fancy

Victim
> I cant wait any longer i am watching paint dry

Victim
> okay fine...3 v-bucks take it or leave it

Victim
> you want some robucks? pls

Victim
> I got a $19 Fornite Card, Who wants it?

Victim
> chat are we cooked?

Victim
> [redacted].exe // 1.04 MB

Victim
> my local target wont let me buy any more gift cards, how should i pay you?

Victim
> money.jpg // 33.8 KB

Victim
> go ahead open it

Victim
> hello from the other side

Victim
> WEE WOOO WEE WOO

Victim
> You're probably wondering how this is happening XD

Victim
> i'm connected to your office cameras

Victim
> i have noth korean paypal how can i pay u

Victim
> R.gif // 1.71 MB

Victim
> Ill give you to the count of five to respond

Victim
> are we doing a deal or what?

Victim
> I guess i will reflash my computer. You guys are a joke lol. I need to do it the hard way smh

Victim
> shut-up-take-my-money.gif // 1.05 MB

Victim
> do you accept tiktok coins ?

Victim
> whats your OF?

Victim
> HONSE.jpg // 24.3 KB

Akira
> is your leadership aware of the incident?

Victim
> Duh?

Akira
> We're willing to set a $550,000 price for ALL the services we offer. Let us know asap.

Victim
> Hello

Victim
> Someone uploaded this locker to an online database of malware

Victim
> You need to give the corp a new password

Victim
> Are you official negotiator of Akira or just affiliate?

Akira
> Provide the link to that database and we will provide a new chat.

Victim
> Anyways, If you have direct access to Akira leadership, add me on Tox. I may have some accesses in the future that I want to send to you, depending on the group affiliate rates. ID: [redacted]

Victim
> https://bazaar.abuse.ch/sample/[redacted]/

Victim
> This is the link to the database - but i'm not the corp. I am an affiliate of another group.

Victim
> If you are the official negotiator or owner of Akira, could you add my tox specified above? I would like to have contact with you in case I have an access that i want to give.

Akira
> Thank you for this information. We will contact you if necessary.

Victim
> Hello

Akira
> Hello

Victim
> I have a USA access that im exfiltrating data from now, it is $400m yearly revenue as shown on zoominfo, although other sources like wikipedia say it has a yearly revenue of $900m USD. I was wondering if you are interested in me using your service to lock the corp. Let me know if you are open to discussion.

Akira
> We are not interested. Thank you.

Auteur/autrice

sdgadmin@tux.ovh