Negotiation chat with different groups

Akira

Avaddon

Avos

Babuk

BlackBasta

BlackMatter

Cloak

Conti

Darkside

Dragonforce

  • 058f4b92-ae99-45c7-bf35-5d2d6754b3de – 19 message(s) voir chat
  • 05f724f8-906e-4739-8177-815852cc2c3f – 29 message(s) voir chat
  • 29BBE03074FDBB8D – 10 message(s) voir chat
  • 7A313D13EB6B4E58 – 32 message(s) voir chat
  • 89716D29D2CEE36F – 23 message(s) voir chat
  • AB0404E049514B50 – 28 message(s) voir chat
  • BD004D632D87DBA0 – 25 message(s) voir chat
  • C2A3C7249797F5ED – 66 message(s) voir chat
  • C42CDF65B97D0E92 – 30 message(s) voir chat
  • C7CD31EAAF9DE9AC – 71 message(s) voir chat
  • C8479B30418B331E – 4 message(s) voir chat
  • D6DDD9B26D7D41DB – 14 message(s) voir chat
  • FDA8141B6DD392E3 – 10 message(s) voir chat
  • b8e14e1a-548f-4eec-bd6e-a590126e57c9 – 14 message(s) voir chat

Hive

Hunters International

Mallox

NoEscape

Pear

Qilin

  • 20240429 – 3 message(s) voir chat
  • 20250203 - from @RakeshKrish12 – 36 message(s) voir chat

REvil

RansomHub

Ranzy

RunSomeWares

fog

lockbit3.0

mount-locker

trinity

Victim 2025-01-22T20:05:51.321439Z
hello?

DragonForce 2025-01-22T21:30:08.489146Z
Hello. As you can see, your network was encrypted by DragonForce. Also we downloaded your data, so if you don't pay, we will publish it and you will have problems. After payment you will receive decryption software and proof that we've deleted your files. Don't waste your time, in 28 days decryptor will be automatically deleted.

Victim 2025-01-23T19:57:20.438046Z
you took data? for what?

Victim 2025-01-23T19:57:52.378533Z
how much do we have to pay?

DragonForce 2025-01-24T00:01:24.766069Z
15 BTC. Data is needed for better negotiations. If you don't pay we will publish it so you will have big problems.

Victim 2025-01-24T19:58:52.541737Z
interwebs say you can tell us what files were taken

Victim 2025-01-27T21:03:38.406842Z
ok, thank you

Victim 2025-01-27T21:05:28.955672Z
it says, file not found?

DragonForce 2025-01-28T19:41:32.154822Z
Try again, on our side it work.

Victim 2025-01-29T00:47:20.098922Z
The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again.

Victim 2025-01-29T20:52:57.760489Z
got it

Victim 2025-01-29T21:35:02.623698Z
is this listing represent all the data that was taken?

DragonForce 2025-01-30T00:57:58.10373Z
Yes.

Victim 2025-01-31T21:34:51.65209Z
the money you want, is a really large number for us. can anything be done about this?

DragonForce 2025-01-31T22:12:43.978205Z
If you pay quickly, we can provide a 10% discount.

DragonForce 2025-02-04T10:14:53.541054Z
http://z3wqggtxft7id3ibr7srivv5gjof5fwg76slewnzwwakjuf3nlhukdid.onion/blog?post_uuid=[redacted]]

Victim 2025-02-04T16:36:04.915551Z
What is this link for?

DragonForce 2025-02-04T16:39:59.338842Z
This is a private (hidden) report of a network breach in your company.

DragonForce 2025-02-04T16:40:34.039585Z
To incentivize cooperation.

Victim 2025-02-04T20:24:26.202847Z
it says 388 GB of data?? what is that??

DragonForce 2025-02-04T20:29:23.559957Z
The data we downloaded from your network, we gave you a list of files earlier.

Victim 2025-02-04T20:36:42.857329Z
that represents 388 GB??

DragonForce 2025-02-04T20:55:52.803959Z
Yes.

Victim 2025-02-13T14:46:39.576792Z
you put our name on the blog? i thought we had more time?

DragonForce 2025-02-13T15:19:39.883836Z
We gave you the link earlier, by clicking on it there was a timer when the post would become visible. Now you have 6 days to make the payment.

Auteur/autrice

sdgadmin@tux.ovh