Negotiation chat with different groups

Akira

Avaddon

Avos

Babuk

BlackBasta

BlackMatter

Cloak

Conti

Darkside

Dragonforce

  • 058f4b92-ae99-45c7-bf35-5d2d6754b3de – 19 message(s) voir chat
  • 05f724f8-906e-4739-8177-815852cc2c3f – 29 message(s) voir chat
  • 29BBE03074FDBB8D – 10 message(s) voir chat
  • 7A313D13EB6B4E58 – 32 message(s) voir chat
  • 89716D29D2CEE36F – 23 message(s) voir chat
  • AB0404E049514B50 – 28 message(s) voir chat
  • BD004D632D87DBA0 – 25 message(s) voir chat
  • C2A3C7249797F5ED – 66 message(s) voir chat
  • C42CDF65B97D0E92 – 30 message(s) voir chat
  • C7CD31EAAF9DE9AC – 71 message(s) voir chat
  • C8479B30418B331E – 4 message(s) voir chat
  • D6DDD9B26D7D41DB – 14 message(s) voir chat
  • FDA8141B6DD392E3 – 10 message(s) voir chat
  • b8e14e1a-548f-4eec-bd6e-a590126e57c9 – 14 message(s) voir chat

Hive

Hunters International

Mallox

NoEscape

Pear

Qilin

  • 20240429 – 3 message(s) voir chat
  • 20250203 - from @RakeshKrish12 – 36 message(s) voir chat

REvil

RansomHub

Ranzy

RunSomeWares

fog

lockbit3.0

mount-locker

trinity

victim 2024-03-03T21:21:19.66197Z
We found your note. What did you do to our systems?

dragonforce 2024-03-03T23:12:15.145191Z
tree.7z filesize:895892

dragonforce 2024-03-03T23:12:42.332673Z
List of files that we downloaded from your corporate network.

dragonforce 2024-03-03T23:15:30.775125Z
At the first stage, you can select 1-3 files to ensure that we have them. At the second stage, you should check our decryption program. On the chat page, you will be able to get acquainted with our FAQ.

dragonforce 2024-03-03T23:17:20.910704Z
In your server at 192.168.3.11, we used TrueCrypt. If you want to save your data, then don't touch the hard drive. And if we agree, you will have the opportunity to restore all the data.

victim 2024-03-04T14:23:30.693707Z
Thank you for the tree. I will provide that to our leadership. While we are communicating with you, can you please remove our name from your blog?

dragonforce 2024-03-04T16:48:22.716208Z
ok.

victim 2024-03-05T12:01:01.841829Z
Leadership is reviewing the tree and will select the files to send you. What is this going to cost us?

dragonforce 2024-03-05T12:06:16.806154Z
The price for decrypting and deleting your files from our servers is 60 BTC. If a quick payment is made, I will discuss with my colleagues a discount for your company.

victim 2024-03-06T12:09:19.05468Z
Here are the files that leadership selected:

victim 2024-03-06T12:09:27.060268Z
Service Centers are Closed Due to Bad Weather.doc Walking Results 2005-3.doc Q2 2023 ATA_ ECON_Webinar.pdf ERY driving directions.xls Buffalo Bid April 2015.xls

dragonforce 2024-03-06T12:40:39.268828Z
ok, wait.

dragonforce 2024-03-06T13:06:06.701694Z
files.7z filesize:1097058

dragonforce 2024-03-07T09:45:31.034369Z
If you expect a good discount, then you should speed up your negotiations with us. Have you received the files?

victim 2024-03-07T13:14:06.771753Z
We just received them. I will give them to leadership and we will be in touch shortly

dragonforce 2024-03-07T13:15:35.382451Z
Ok.

victim 2024-03-08T13:40:01.285308Z
Are we able to test your tool?

dragonforce 2024-03-08T13:41:33.413591Z
Yes, you do have the opportunity to do this.

dragonforce 2024-03-08T13:42:39.937086Z
You are on the test decryption page (Stage 2), you can upload the file and it will be decrypted automatically.

victim 2024-03-08T19:16:20.422622Z
Ok thank you. Our MSP has left for the day and now that it is the weekend he will not return until Monday. Can we test it then please. We know your time is valuable and we are not trying to waste it.

dragonforce 2024-03-08T19:34:30.841203Z
We will extend the deadline, but please keep in mind that if we do not start more meaningful negotiations next week, we will not wait for you. See you on Monday.

victim 2024-03-11T12:53:12.749047Z
For some reason, we are having an issue with testing the file on your free test on the other page. We will keep trying, but I have the files here as well: https://dropmefiles.com/zj0I7

dragonforce 2024-03-11T12:53:48.507848Z
Ok. Wait.

dragonforce 2024-03-11T13:19:39.08864Z
[Redacted] Samples.7z filesize:1468

dragonforce 2024-03-12T13:04:34.394063Z
Perhaps publishing on our excellent blog will expedite the negotiation process with you?

victim 2024-03-12T13:24:04.48202Z
There is no need to publish anything. We have been experiencing network connectivity issues throughout and all information must be relayed to my leadership. This takes some time. I will be back in touch very soon.

dragonforce 2024-03-12T13:24:42.456459Z
ok.

victim 2024-03-13T14:48:06.492867Z
Our board requires 100% unanimous voting in able for us to move forward with you. We have one member who is not scheduled to return until Monday. We do want to come to a resolution with you. We know that your time is very valuable and we just want to show complete visibility and communication letting you know that we are trying on our end. Please do not release any of our data until after our board can meet.

dragonforce 2024-03-13T16:01:52.217105Z
Agreed, we await Monday.

victim 2024-03-14T11:45:22.953916Z
Thank you.

Auteur/autrice

sdgadmin@tux.ovh