Chat

Negotiation chat with different groups

Akira

Avaddon

Avos

Babuk

BlackBasta

BlackMatter

Cloak

Conti

Darkside

Dragonforce

  • 058f4b92-ae99-45c7-bf35-5d2d6754b3de – 19 message(s) voir chat
  • 05f724f8-906e-4739-8177-815852cc2c3f – 29 message(s) voir chat
  • 29BBE03074FDBB8D – 10 message(s) voir chat
  • 7A313D13EB6B4E58 – 32 message(s) voir chat
  • 89716D29D2CEE36F – 23 message(s) voir chat
  • AB0404E049514B50 – 28 message(s) voir chat
  • BD004D632D87DBA0 – 25 message(s) voir chat
  • C2A3C7249797F5ED – 66 message(s) voir chat
  • C42CDF65B97D0E92 – 30 message(s) voir chat
  • C7CD31EAAF9DE9AC – 71 message(s) voir chat
  • C8479B30418B331E – 4 message(s) voir chat
  • D6DDD9B26D7D41DB – 14 message(s) voir chat
  • FDA8141B6DD392E3 – 10 message(s) voir chat
  • b8e14e1a-548f-4eec-bd6e-a590126e57c9 – 14 message(s) voir chat

Hive

Hunters International

Mallox

NoEscape

Pear

Qilin

  • 20240429 – 3 message(s) voir chat
  • 20250203 - from @RakeshKrish12 – 36 message(s) voir chat

REvil

RansomHub

Ranzy

RunSomeWares

fog

lockbit3.0

mount-locker

trinity

Victim 2025-01-25T17:38:28.964451Z
Hello, I am reaching out regarding our encryption issue
Victim 2025-01-25T17:39:01.481152Z
Need to know what the next steps are
DragonForce 2025-01-25T17:41:54.644682Z
Hello, please wait, we are exploring your financial possibilities, and then we will tell you the amount to pay.
DragonForce 2025-01-25T18:45:12.332003Z
NASltd_list_of_files.zip filesize:2496907
DragonForce 2025-01-25T18:46:03.774012Z
is a list of files we stole from your network.
DragonForce 2025-01-25T18:52:31.028698Z
For decrypting and deleting the stolen data, including a commitment that we will not post or announce your hack on our blog price 5 bitcoins. You can do a test decrypt (if you haven't already). You can also examine the files we stole, choose a few random files to make sure we are telling the truth, we will provide these random files to you.
Victim 2025-01-25T18:54:37.738495Z
The file list you sent when downloaded comes as attachment.htm not [redacted].zip. How can I get the zip file?
DragonForce 2025-01-25T18:59:52.753191Z
http://temp.sh/drpwd/[redacted].zip
Victim 2025-01-25T19:06:47.211473Z
Got the list but it only contains data from one of my servers. How about the other data?
DragonForce 2025-01-25T19:08:25.016840Z
The rest of the data can be recovered. I sent the data that was stolen. Encrypted files can all be recovered.
DragonForce 2025-01-25T19:10:37.535688Z
We provide a program that automatically decrypts the data on all servers.
Victim 2025-01-25T19:10:48.284323Z
OK
Victim 2025-01-25T19:13:41.750406Z
But I think there is a mistake in your price. Looks like 5 bitcoins is about 500K USD. I don't make that much in two years combined! Not to mention, I live in a place called Altadena in California where we had major fires and I lost my house with everything in it with no insurance. This would be impossible to pay!
DragonForce 2025-01-25T19:18:15.900193Z
No there was no mistake. But we're open to talking. We can discount it to a reasonable amount. I think losing your reputation altogether would be worse.
Victim 2025-01-25T19:33:35.937803Z
I spoke to two of my friends who had the same problem and he said when they paid, the decryptor could not decrypt large files with several gigabytes. The small files like Word, Excel worked ok but they lost all of their large files. How can you guarantee that it will work?
DragonForce 2025-01-25T19:40:15.360764Z
We're not newbies at this. We don't have the problems your friends had.
DragonForce 2025-01-25T19:40:27.400121Z
We're risking our name here. DragonForce, we don't make mistakes like that.
Victim 2025-01-25T19:42:17.437685Z
Can you prove it? Can you send me a decryptor that can decrypt 1 large file to see if it will work?
DragonForce 2025-01-25T19:45:18.463878Z
If your friends did have such instances, you can ask what faction they belonged to. It certainly wasn't us (DragonForce). No, of course not. We wouldn't do that. Large files are often the most key and important. It's stupid to do a test decryption on that. You should understand that. You did a test decryption - it worked. That's the first point that shows we're not cheating. The second point is that you can pick files from a list of 2-3 random files that we can give you! That all proves that we're serious and not cheating.
Victim 2025-01-25T19:53:23.933808Z
I also know that you would say anything to get paid and it's hard for me to believe anything you say. I also lost my house and everything I own two weeks ago. I don't have a lot of money since I have to rebuild my life again. I will have to think about what part of my life I need to fix first and how much the stuff you stole is worth to me if anything. I will get back to you once I think it over.
DragonForce 2025-01-25T19:55:04.465346Z
It's not just about those files. It's about the company being perceived as untrustworthy and compromised. Think about it and come back. I'll see you later.
Victim 2025-01-25T19:55:49.139384Z
I will get back to you.
DragonForce 2025-01-25T19:56:27.594846Z
Pay the ransom and don't mess with us, otherwise we'll just publish the files. You still have time.

Auteur/autrice

sdgadmin@tux.ovh