Chat

Negotiation chat with different groups

Akira

Avaddon

Avos

Babuk

BlackBasta

BlackMatter

Cloak

Conti

Darkside

Dragonforce

  • 058f4b92-ae99-45c7-bf35-5d2d6754b3de – 19 message(s) voir chat
  • 05f724f8-906e-4739-8177-815852cc2c3f – 29 message(s) voir chat
  • 29BBE03074FDBB8D – 10 message(s) voir chat
  • 7A313D13EB6B4E58 – 32 message(s) voir chat
  • 89716D29D2CEE36F – 23 message(s) voir chat
  • AB0404E049514B50 – 28 message(s) voir chat
  • BD004D632D87DBA0 – 25 message(s) voir chat
  • C2A3C7249797F5ED – 66 message(s) voir chat
  • C42CDF65B97D0E92 – 30 message(s) voir chat
  • C7CD31EAAF9DE9AC – 71 message(s) voir chat
  • C8479B30418B331E – 4 message(s) voir chat
  • D6DDD9B26D7D41DB – 14 message(s) voir chat
  • FDA8141B6DD392E3 – 10 message(s) voir chat
  • b8e14e1a-548f-4eec-bd6e-a590126e57c9 – 14 message(s) voir chat

Hive

Hunters International

Mallox

NoEscape

Pear

Qilin

  • 20240429 – 3 message(s) voir chat
  • 20250203 - from @RakeshKrish12 – 36 message(s) voir chat

REvil

RansomHub

Ranzy

RunSomeWares

fog

lockbit3.0

mount-locker

trinity

Victim
> We would like to know what data you took from us
Akira
> Hello. You've reached an Akira support chat. Currently, we are preparing the list of data we took from your network. For now you have to know that dealing with us is the best possible way to settle this quick and cheap. Keep in touch and be patient with us. We will reach out to you soon. Do you have a permission to conduct a negotiation on behalf of your organization? Once we get a response you will be provided with all the details.
Victim
> Yes
Akira
> list (20).txt // 798 KB
Akira
> These files were taken from your network prior to encryption. You can pick 2-3 random files up to 10 MB each from the list and we will upload them to this chat as a proof of possession. To prove that we can properly decrypt your data you can upload 2-3 encrypted files up to 10 MB each to our chat and we will upload decrypted copies back.

We're looking through your financial papers to come up with a reasonable demand to you. We offer: 1) full decryption assistance;
2) evidence of data removal;
3) security report on vulnerabilities we found;
4) guarantees not to publish or sell your data;
5) guarantees not to attack you in the future.

Let me know whether you're interested in a whole deal or in parts. This will affect the final price.
Victim
> Thank you for sharing this information and the file list. We'll review everything and follow up with you on Monday.
Akira
> Waiting.
Victim
> Taking more time than we thought to check this list. Need until tomorrow if thats okay
Akira
> That's is not okay. Provide a file request today.
Victim
> We first contacted you over the weekend and we haven't had enough time to check this list. It's not the easiest thing to skim through all of these directories.
Akira
> You can ask for any not large file from the list. It doesn't take much time.
Victim
> Sorry for the wait. Still understanding the data but please send these
Victim
> E:\[redacted].com\[redacted].docx
Victim
> E:\[redacted].com\[redacted].xlsx
Victim
> E:\[redacted].com\[redacted].xlsx
Akira
> Files.rar // 1.93 MB
Akira
> Here are the files. Do you want to test our decryption tool?
Victim
> Yes, how does that work?
Akira
> Are you trying to stall? To prove that we can properly decrypt your data you can upload 2-3 encrypted files up to 10 MB each to our chat and we will upload decrypted copies back. Waiting for the files today.
Akira
> We're willing to set a $450,000 price for ALL the services we offer. Waiting for your files today.
Victim
> [redacted].jpg.akira // 37.7 KB
Victim
> [redacted].docx.akira // 155 KB
Victim
> Please bear with us. We don't want to create an error so we are following your guidance. Can you fix these?
Akira
> Please wait.
Akira
> Decrypted.7z // 148 KB
Akira
> Here are the files. Are you ready to proceed with payment?
Victim
> Can we slow down just a bit? We're checking these files but you're asking us for almost half a million. Other companies just pay you instantly?
Akira
> Yes, they do. You have until tomorrow to review the files. We have to move to payment.
Victim
> We need to set this straight. We reached out to you over the weekend and we've spent each weekday trying to turn on our bricked computers, which has been a slow process. We've also been reviewing your list and now you're asking for $450,000. We're a small shop out of [redacted], not some large corporation in a big city. Can we get more than 1 day to wrap our heads around all of this?
Akira
> How much time do you want to gather the amount?
Victim
> We can't promise any sort of payment at this rate but Tuesday should give us enough time to see how this may play out. I don't handle our finances but I know this is going to be quite the exercise to see what we can come up with.
Akira
> We cannot give you until Tuesday. We will give you until Thursday evening the latest.
Victim
> That's tomorrow...
Victim
> We have a handful of employees. We don't make millions and millions in revenue. How do you expect us to evaluate all of this in 24 hours? If we can't have time, then we have no idea how we're going to work with you.
Akira
> Just give us an update on Thursday evening. If you pay this week, we can make a good discount.
Victim
> I wanted to get back to you before the evening. I really wish I had a better answer but right now the only thing we have available is some petty cash for a few thousand. We need to meet with our accountant since he knows more about this finance stuff and he's not back until next week. This is a lot more serious than we thought and I don't want to lost contact with you. Can you wait for him to get back so we can see what options we have?
Akira
> We can wait till Monday for a serious counter offer. The incident will be announced if your number is inadequate.
Victim
> I think we can make that work
Akira
> Hope so.
Akira
> What's your offer?
Victim
> Our accountant is still performing an analysis but I told them that we need to get some sort of response to you today. Nothing is finalized but for now he's comfortable offering $80,000. I don't know how to even get this money to you but is this something you can allow?
Akira
> This doesn't work. $80,000 offer is too far from our demand. We do not work with 5 figure amounts. Update your offer today, if you don't want us to announce the incident.
Victim
> The accountant is still reviewing our financials. It's been even harder since he doesn't have access to some of the drives. This isn't our final number but there's nothing else he can provide today. He's going through dozens of reports and re-calculating some of the locked data so he's going to need a few days to figure this out.
Akira
> We will not give more than 24 hours. Hurry up.
Victim
> If we keep getting these short deadlines, then we're going to continue coming up short. It's just a few of us that work here and each day has been painful for us. We don't have access to our files and we're trying to come up with a price that feels unfair. If you're not going to meet us on the price, then please give us enough time to actually give you a proper response. We don't need a whole week, just a few days.
Akira
> You have the deadline. No one is going to drag this out.
Victim
> So we have like 2-3 days? That's all we need.
Akira
> No, we can't give you 3 days. Update us on Tuesday evening. We will decide how to proceed with you.
Victim
> We'll try but we really don't know what we can come up with in a few hours...
Akira
> You have to take it seriously. We will not wait long.
Victim
> Ok this is where we're at. The accountant said that we were already in bad shape to start the year and the budget was trimmed because our profits aren't getting better. We may be able to sideline a small project to come up with more cash for you, but anything more and we're going to need help from the bank. There is nothing else left for now. To sum it up, we can pay $103,000 now. Anything more will require help from the bank.
Akira
> This is something already. You can understand that you are still far from our demand but we are open to work with you. So, the leadership decided to make a big step towards you and we are ready to accept $400,000 if you pay this week.
Victim
> $400,000? This week?
Victim
> Is this some sort of a trick? How do you think we'll 4x our offer in 3 days?
Akira
> Take a loan or try to borrow. Ask your accountant. You have a few hundred thousands in cash and a couple of dozens in assets.
Victim
> I don't know much about the financials but I know our accountant has said multiple times that we are already in a lot of debt. If there's any chance of borrowing then that will take time too. I hate sounding like a broken record constantly asking for time, but you need to give us something to work off of. Can we get the rest of this week to see our options then update you on Monday?
Akira
> We cannot wait that long. Update us on Thursday evening the latest.
Victim
> We have a few banks that we normally work with and I can guarantee that they won't sign off on a loan in 48 hours. We're at their mercy if we go down this path so Thursday won't work.
Akira
> Do your best. We believe you will make it.
Victim
> Just letting you know we are still working on this, but it's moving slowly. We're at the mercy of the banks right now
Akira
> Keep us posted on your progress.
Victim
> We certainly will. We want this resolved just as much as you do.
Akira
> Waiting.
Akira
> What's your progress?
Victim
> We just received word from the bank working with us that they won't have a decision on the loan until next weekend. Either Monday or Tuesday.
Victim
> We have to keep providing them with documentation of our financials so we can justify the amount of the loan so there is a lot involved.
Akira
> You have to push your bank to get a quicker decision from them. The deadline is Monday. If you provide little or no offer, we will announce the incident incident.
Victim
> If we had that power we would tell them that, but it's a bank and we need something from them. They aren't going to just give us money without doing their due diligence.
Victim
> We will let you know on Monday if we have their decision or not.
Akira
> Ok. We will see on Monday whether your data be published or not.
Akira
> You have 24 hours to give us your decision regarding this deal. If you stay silent, we will announce the breach on our blog.
Akira
> You can find your company name in our news column:

https://akiral2iz6a7qgd3ayp3l6yub7xx2uep76idk3u2kollpj5z3z636bad.onion

If you want this post deleted, we must come to an agreement.

Auteur/autrice

sdgadmin@tux.ovh