Chat

Negotiation chat with different groups

Akira

Avaddon

Avos

Babuk

BlackBasta

BlackMatter

Cloak

Conti

Darkside

Dragonforce

  • 058f4b92-ae99-45c7-bf35-5d2d6754b3de – 19 message(s) voir chat
  • 05f724f8-906e-4739-8177-815852cc2c3f – 29 message(s) voir chat
  • 29BBE03074FDBB8D – 10 message(s) voir chat
  • 7A313D13EB6B4E58 – 32 message(s) voir chat
  • 89716D29D2CEE36F – 23 message(s) voir chat
  • AB0404E049514B50 – 28 message(s) voir chat
  • BD004D632D87DBA0 – 25 message(s) voir chat
  • C2A3C7249797F5ED – 66 message(s) voir chat
  • C42CDF65B97D0E92 – 30 message(s) voir chat
  • C7CD31EAAF9DE9AC – 71 message(s) voir chat
  • C8479B30418B331E – 4 message(s) voir chat
  • D6DDD9B26D7D41DB – 14 message(s) voir chat
  • FDA8141B6DD392E3 – 10 message(s) voir chat
  • b8e14e1a-548f-4eec-bd6e-a590126e57c9 – 14 message(s) voir chat

Hive

Hunters International

Mallox

NoEscape

Pear

Qilin

  • 20240429 – 3 message(s) voir chat
  • 20250203 - from @RakeshKrish12 – 36 message(s) voir chat

REvil

RansomHub

Ranzy

RunSomeWares

fog

lockbit3.0

mount-locker

trinity

Victim
Hello, we want to resolve this, but we have no experience of this sort of event and do not know how this works. Our management want proof you can fix our data and are still reviewing the file list you to understand what files you took. Does the list show all the files you took?
RSW
This is an exhaustive list.
You can send us some files and we will decrypt it for free.
Victim
Hello, please can you provide the following files as proof you have our data:

File 1 - [1.2M] [Redacted]_files/01.0 - [Redacted].xlsx
File 2 - [ 15M] [Redacted]_files/[Redacted].pptx
File 3 - [100K] [Redacted]_files/[Redacted].html
File 4 - [2.4M] [Redacted]_files/[Redacted].jpg
File 5 -[2.6M] [Redacted]_files/[Redacted].JPG
RSW
here it is
Victim
Thank you for providing the requested files. We will get our team to verify them. We will also get our IT to obtain some suitable files and come back to you as soon as we can for a test of your decryption. This may take us some time due to the weekend, therefore we ask that you be patient and stop the timer while work with you to sort this.
RSW
Your time is up. This is last chance to get a deal.
Victim
Hello,
We want to resolve this with you, but your price is very high. Please can you give us a better price.
We have attached a small file for a test of your decryption capability, but our management need assurance that you can restore all our data including larger files. We have a file that is 16GB in size. How do we get proof you can decrypt this?
RSW
The file, you've attached is a binary file. We decrypted it. To check it, you can open it with any text editor.
Victim
Thank you for providing the decrypted file. We will get IT to verify it. How do we share a larger file with you? We will pass your discount to our management for their consideration and will come back to you
RSW
Upload it to any public share.
Victim
Our management said your price is still very high and the limited time for discount is not achievable for us – Our approvals process takes time and it would take us longer than 2 days to get stakeholders together for approvals and obtain bitcoin. We want to reach a deal with you but we need better discount with time to get the necessary approvals to make a payment.
RSW
How much time do you need? Give me the date.
Victim
It would likely take us 3 - 4 business days to get stakeholder approvals for a payment and gathering the funds to obtain bitcoin, so towards the latter part of next week. Please give us a significant discount so we can reach a deal and resolve this quickly for both our benefit.
RSW
We analized the company's revenue, possible reputational losses, files we have and encrypted data. The company provides IT security services, and belong to the most influential family in the world. It's great headline for newspapers. And if that's the case, you will lose most of you customers. Besides, we have huge value of you and your customers data.
Victim
OK, we will pass your reply to our management. They will need to meet with stakeholders after the weekend to discuss this.
RSW
Ok, when will the response be ready?
Victim
Management have discussed the situation and they want to reach a deal with you, but they could not agree to the very large amount you are asking due to the cost our business has incurred already because of your attack. They said that they can offer to pay you * Bitcoin to resolve this quickly. Please accept this so we can reach a deal.
RSW
We have spent a lot of time and resources so we can't acept such a small price.
If the deal goes through quikly, we can settle for *Btc. Let's get a deal.
Victim
Thank you for giving some further discount. We will pass your price to our management for their consideration and come back to you.
RSW
Let's get a deal this week
Victim
Our management said they cannot reach the high amount you are asking, but they want to come to an agreement with you and would be able to pay * Bitcoin to resolve this soon. We ask you to please accept this amount so we can reach a deal.
RSW
Ok. Let's make a deal. We agree to *Btc.
Victim
Thank you for the reply. We have passed your offer to our management but they will need to meet with stakeholders to obtain approval for extra funds. We will come back to you after the weekend.
RSW
Monday is here, let's get a deal!
RSW
Unfortunately, our managment gave us 2 days. Let's make a deal. We can no longer waste time.
RSW
Guys, it's last chance. Let's get a deal! We can't wait longer.
RSW
Ok, we start the publishing process with a mailing to your customers, partners and media. Bye!

Auteur/autrice

sdgadmin@tux.ovh