Chat

Negotiation chat with different groups

Akira

Avaddon

Avos

Babuk

BlackBasta

BlackMatter

Cloak

Conti

Darkside

Dragonforce

  • 058f4b92-ae99-45c7-bf35-5d2d6754b3de – 19 message(s) voir chat
  • 05f724f8-906e-4739-8177-815852cc2c3f – 29 message(s) voir chat
  • 29BBE03074FDBB8D – 10 message(s) voir chat
  • 7A313D13EB6B4E58 – 32 message(s) voir chat
  • 89716D29D2CEE36F – 23 message(s) voir chat
  • AB0404E049514B50 – 28 message(s) voir chat
  • BD004D632D87DBA0 – 25 message(s) voir chat
  • C2A3C7249797F5ED – 66 message(s) voir chat
  • C42CDF65B97D0E92 – 30 message(s) voir chat
  • C7CD31EAAF9DE9AC – 71 message(s) voir chat
  • C8479B30418B331E – 4 message(s) voir chat
  • D6DDD9B26D7D41DB – 14 message(s) voir chat
  • FDA8141B6DD392E3 – 10 message(s) voir chat
  • b8e14e1a-548f-4eec-bd6e-a590126e57c9 – 14 message(s) voir chat

Hive

Hunters International

Mallox

NoEscape

Pear

Qilin

  • 20240429 – 3 message(s) voir chat
  • 20250203 - from @RakeshKrish12 – 36 message(s) voir chat

REvil

RansomHub

Ranzy

RunSomeWares

fog

lockbit3.0

mount-locker

trinity

Victim 2025-04-08T20:28:51.424478Z
We found your note. Where is the listing? Is there a link on your page somewhere?
Attacker 2025-04-08T20:41:38.922911Z
tree.txt filesize:4533984
Attacker 2025-04-08T20:42:08.638245Z
This is a list of files
Attacker 2025-04-08T20:58:17.418497Z
At the moment, information about the incident is completely private. There are no publications yet.
Victim 2025-04-09T18:15:41.602121Z
Thank you. We are reviewing the list
Victim 2025-04-09T19:02:13.854667Z
[Redacted].JPG, [Redacted].jpeg, [Redacted].pdf
Attacker 2025-04-09T19:11:14.457636Z
[Redacted].xlsx filesize:27582
Attacker 2025-04-09T19:11:20.459373Z
[Redacted].doc filesize:21504
Attacker 2025-04-09T19:11:28.440043Z
[Redacted].JPG filesize:71420
Attacker 2025-04-09T19:11:33.675575Z
[Redacted].jpeg filesize:2807
Attacker 2025-04-09T19:11:38.950857Z
[Redacted].pdf filesize:27068
Victim 2025-04-11T20:43:35.209059Z
[Redacted].zip filesize:1521432
Attacker 2025-04-11T21:14:55.742893Z
[Redacted].msg filesize:326656
Attacker 2025-04-11T21:15:01.888965Z
[Redacted].pdf filesize:11648
Attacker 2025-04-11T21:15:05.809785Z
[Redacted].xlsx filesize:27388
Attacker 2025-04-11T21:15:08.364957Z
[Redacted].xlsx filesize:27408
Attacker 2025-04-11T21:15:12.482293Z
[Redacted].doc filesize:321536
Attacker 2025-04-11T21:15:16.114719Z
[Redacted].doc filesize:796672
Victim 2025-04-12T12:55:24.673494Z
Reviewing. Whats next?
Attacker 2025-04-12T12:57:29.002751Z
Now we want you to pay us 15 BTC, after which we will give you a decryption tool and delete the data from our servers.
Attacker 2025-04-14T20:49:41.059210Z
If negotiations are not underway, we will publish an incident announcement without publishing the data. That's how he becomes known publicly. If negotiations fail, we publish the data. You wanted privacy, but you stopped negotiating after we mentioned the terms.
Victim 2025-04-15T17:37:54.509846Z
That is a huge amount of dollars. We do not have that kind of money. We are a low margin business and these new tariffs are killing us. Please ask us for something that we can actually pay
Attacker 2025-04-15T17:39:10.565056Z
And how much do you think you could pay?
Victim 2025-04-16T18:14:06.725583Z
Our business is going through massive downtrends and there is so much uncertainty with tariffs we have no idea how much our sales will drop. You are asking for over a million and we do not have that even if we wanted. Honestly we are more in the 10's of thousands. Please work with us
Attacker 2025-04-16T18:23:16.827043Z
We have examined your documents. Including insurance. We can reduce the amount to 14 BTC.
Victim 2025-04-19T14:28:56.985330Z
That is going to be impossible for us. We are willing to discuss the potential of payment but at that amount it we cannot do anything
Attacker 2025-04-19T14:38:12.921231Z
Abstract discussions do not bring real results. The amount that we have named is based on your documents that we have studied. You know these documents, you've seen them, we speak the same language. If you have a different view, then name it and we will discuss it. A serious suggestion, not abstract words.
Victim 2025-04-21T02:15:28.179287Z
We are meeting tomorrow to discuss your message. Will report back
Attacker 2025-04-21T03:07:48.057451Z
Ok
Victim 2025-04-23T17:08:00.885257Z
We are having a difficult time deciding how to continue this discussion given you are asking for over $1 million. We cannot aford that but we do not want to upset you either. Can you show us a more reasonable amount so we can consider? How do you prove you delete our data if paid?
Victim 2025-04-27T16:45:24.250486Z
You posted us so i guess you are no longer interested
Attacker 2025-04-28T05:20:53.894675Z
You knew the conditions. You have received an offer. You've decided to play games. The consequences are now your responsibility.

Auteur/autrice

sdgadmin@tux.ovh