Negotiation chat with different groups

Akira

Avaddon

Avos

Babuk

BlackBasta

BlackMatter

Cloak

Conti

Darkside

Dragonforce

  • 058f4b92-ae99-45c7-bf35-5d2d6754b3de – 19 message(s) voir chat
  • 05f724f8-906e-4739-8177-815852cc2c3f – 29 message(s) voir chat
  • 29BBE03074FDBB8D – 10 message(s) voir chat
  • 7A313D13EB6B4E58 – 32 message(s) voir chat
  • 89716D29D2CEE36F – 23 message(s) voir chat
  • AB0404E049514B50 – 28 message(s) voir chat
  • BD004D632D87DBA0 – 25 message(s) voir chat
  • C2A3C7249797F5ED – 66 message(s) voir chat
  • C42CDF65B97D0E92 – 30 message(s) voir chat
  • C7CD31EAAF9DE9AC – 71 message(s) voir chat
  • C8479B30418B331E – 4 message(s) voir chat
  • D6DDD9B26D7D41DB – 14 message(s) voir chat
  • FDA8141B6DD392E3 – 10 message(s) voir chat
  • b8e14e1a-548f-4eec-bd6e-a590126e57c9 – 14 message(s) voir chat

Hive

Hunters International

Mallox

NoEscape

Pear

Qilin

  • 20240429 – 3 message(s) voir chat
  • 20250203 - from @RakeshKrish12 – 36 message(s) voir chat

REvil

RansomHub

Ranzy

RunSomeWares

fog

lockbit3.0

mount-locker

trinity

Victim
> ?

Akira
> Hello. You've reached an Akira support chat. Currently, we are preparing the list of data we took from your network. For now you have to know that dealing with us is the best possible way to settle this quick and cheap. Keep in touch and be patient with us. We will reach out to you soon. Do you have a permission to conduct a negotiation on behalf of your organization? Once we get a response you will be provided with all the details.

Akira
> Are you going to work with us?

Victim
> We're reaching out to figure out what's going on.

Akira
> Do you have a permission to conduct a negotiation on behalf of your organization? Once we get a response you will be provided with all the details.

Victim
> I am authorized to speak you and will relay what is discussed to our team.

Akira
> List.rar // 447 KB

Akira
> These files were taken from your network prior to encryption. You can pick 2-3 random files up to 10 MB each from the list and we will upload them to this chat as a proof of possession. To prove that we can properly decrypt your data you can upload 2-3 encrypted files up to 10 MB each to our chat and we will upload decrypted copies back. We're looking through your financial papers to come up with a reasonable demand to you. We offer: 1) full decryption assistance;
2) evidence of data removal;
3) security report on vulnerabilities we found;
4) guarantees not to publish or sell your data;
5) guarantees not to attack you in the future. Let me know whether you're interested in a whole deal or in parts. This will affect the final price.

Victim
> Please send the following files

Victim
> [redacted].pdf

Victim
> [redacted].xlsx

Victim
> [redacted].pdf

Akira
> files.rar // 4.04 MB

Akira
> There is no file [redacted].pdf in the list. Do you want to test our decryption tool?

Victim
> We do here is a link to the files

Victim
> https://limewire.com/d/[redacted]

Akira
> Please wait.

Akira
> decrypted.7z // 70.3 KB

Akira
> Here are the files. We're willing to set a $1,700,000 price for ALL the services we offer.

Akira
> Are you going to work with us?

Victim
> We are talking with our board members, they are aware of the offer and I will say it was a shock. If you’re able to offer anything lower let us know.

Akira
> The price is not a shock for your company. If you have a counter offer, please let us know asap as we won't wait long.

Akira
> You have 24 hours to give us your decision regarding this deal. If you stay silent, we will announce the breach on our blog.

Victim
> Our board members have discussed and they don't have this level of funds available. Let me know if there’s a better number I can bring to them to resolve this.

Akira
> We've already provided a better number. The question is are you going to work with us or not. Let us know your counter offer asap. If we don't receive one, we will have to announce the incident on our blog.

Akira
> You can find your company name in our news column: https://akiral2iz6a7qgd3ayp3l6yub7xx2uep76idk3u2kollpj5z3z636bad.onion If you want this post to be removed, we have to agree on something.

Auteur/autrice

sdgadmin@tux.ovh