Chat

Negotiation chat with different groups

Akira

Avaddon

Avos

Babuk

BlackBasta

BlackMatter

Cloak

Conti

Darkside

Dragonforce

  • 058f4b92-ae99-45c7-bf35-5d2d6754b3de – 19 message(s) voir chat
  • 05f724f8-906e-4739-8177-815852cc2c3f – 29 message(s) voir chat
  • 29BBE03074FDBB8D – 10 message(s) voir chat
  • 7A313D13EB6B4E58 – 32 message(s) voir chat
  • 89716D29D2CEE36F – 23 message(s) voir chat
  • AB0404E049514B50 – 28 message(s) voir chat
  • BD004D632D87DBA0 – 25 message(s) voir chat
  • C2A3C7249797F5ED – 66 message(s) voir chat
  • C42CDF65B97D0E92 – 30 message(s) voir chat
  • C7CD31EAAF9DE9AC – 71 message(s) voir chat
  • C8479B30418B331E – 4 message(s) voir chat
  • D6DDD9B26D7D41DB – 14 message(s) voir chat
  • FDA8141B6DD392E3 – 10 message(s) voir chat
  • b8e14e1a-548f-4eec-bd6e-a590126e57c9 – 14 message(s) voir chat

Hive

Hunters International

Mallox

NoEscape

Pear

Qilin

  • 20240429 – 3 message(s) voir chat
  • 20250203 - from @RakeshKrish12 – 36 message(s) voir chat

REvil

RansomHub

Ranzy

RunSomeWares

fog

lockbit3.0

mount-locker

trinity

Victim 2025-04-10T23:16:50.760546Z
Where is the listing is step 1?
Attacker 2025-04-11T00:18:00.831244Z
tree.txt filesize:2352921
Attacker 2025-04-11T00:18:16.513956Z
Here is the list of files.
Victim 2025-04-12T13:28:39.055759Z
We will work on getting you the 3 files
Victim 2025-04-12T13:28:52.697488Z
How did you all get in?
Attacker 2025-04-12T13:32:40.055477Z
Data on the method of penetration and work within the network are provided only after successful completion of negotiations. We are waiting for your files to demonstrate the test decryption.
Victim 2025-04-13T03:05:19.964810Z
Will work on that too
Victim 2025-04-14T18:40:51.565505Z
Please provide us with the following files:
Victim 2025-04-14T18:41:07.665303Z
[Redacted].pdf [Redacted].xlsx [Redacted].xlsx
Attacker 2025-04-14T18:47:10.846028Z
[Redacted].xlsx filesize:1826490
Attacker 2025-04-14T18:47:35.671018Z
[Redacted].pdf filesize:2490220
Attacker 2025-04-14T18:48:11.168050Z
[Redacted].xlsx filesize:2774610
Attacker 2025-04-14T18:48:48.901797Z
[Redacted].xlsx filesize:132809
Victim 2025-04-15T02:43:29.785757Z
We will check theses out.
Victim 2025-04-15T18:57:07.383843Z
Is this everything you have? What are you wanting from us?
Attacker 2025-04-15T19:00:36.817314Z
Have you checked the decryption capability and made sure that we have the files?
Victim 2025-04-15T19:06:24.489669Z
We could only decrypt one file but it worked from what we could tell and you sent us the files we requested from the list provided.
Attacker 2025-04-15T19:09:07.493667Z
We can decrypt all the data back, and we will delete the data that is received from your network. The cost will be 500,000$
Victim 2025-04-16T16:29:53.615706Z
Is that file listing you sent earlier 100% of the files?
Attacker 2025-04-16T16:39:40.995198Z
This is the list that we have decided to share with you.
Victim 2025-04-17T01:53:31.530191Z
What percentage is it?
Attacker 2025-04-17T01:54:35.954113Z
This is the list that we have decided to share with you.
Victim 2025-04-17T15:43:03.343335Z
That is a lot of money when we don't know everything you have
Attacker 2025-04-17T15:51:09.306020Z
You have been provided with the necessary information. You can also see the countdown timer. Upon completion, the data will be published, and the decryption program will be deleted. You will not be able to recover data from recovery companies. After the timer expires, the decryptor will actually be deleted, and it will not be available for any money. These are standard terms and conditions, and you know it. The situation can be resolved quickly for the specified amount and continue working quietly. Think about it.
Victim 2025-04-17T18:48:28.757111Z
Is there any wiggle room in the amount? That would be a lot to try to produce by the time the timer reaches zero.
Attacker 2025-04-17T18:51:53.813026Z
Abstract conversation does not lead to success. Name the amount and the due date. And we will discuss it with you.
Victim 2025-04-18T19:28:05.857541Z
We are having internal conversations here but it would be helpful for you all to give us a better starting point on the price
Attacker 2025-04-18T19:32:21.405713Z
Starting point 500 000$

Auteur/autrice

sdgadmin@tux.ovh