Negotiation chat with different groups

Akira

Avaddon

Avos

Babuk

BlackBasta

BlackMatter

Cloak

Conti

Darkside

Dragonforce

  • 058f4b92-ae99-45c7-bf35-5d2d6754b3de – 19 message(s) voir chat
  • 05f724f8-906e-4739-8177-815852cc2c3f – 29 message(s) voir chat
  • 29BBE03074FDBB8D – 10 message(s) voir chat
  • 7A313D13EB6B4E58 – 32 message(s) voir chat
  • 89716D29D2CEE36F – 23 message(s) voir chat
  • AB0404E049514B50 – 28 message(s) voir chat
  • BD004D632D87DBA0 – 25 message(s) voir chat
  • C2A3C7249797F5ED – 66 message(s) voir chat
  • C42CDF65B97D0E92 – 30 message(s) voir chat
  • C7CD31EAAF9DE9AC – 71 message(s) voir chat
  • C8479B30418B331E – 4 message(s) voir chat
  • D6DDD9B26D7D41DB – 14 message(s) voir chat
  • FDA8141B6DD392E3 – 10 message(s) voir chat
  • b8e14e1a-548f-4eec-bd6e-a590126e57c9 – 14 message(s) voir chat

Hive

Hunters International

Mallox

NoEscape

Pear

Qilin

  • 20240429 – 3 message(s) voir chat
  • 20250203 - from @RakeshKrish12 – 36 message(s) voir chat

REvil

RansomHub

Ranzy

RunSomeWares

fog

lockbit3.0

mount-locker

trinity

Victim 2025-04-10T21:20:45.774561Z
We’ve found your note and messages, and we are here to discuss what we do now

Attacker 2025-04-11T00:35:49.938260Z
We got into your network and encrypted your files. We also took some of the files from your network. You can decrypt several of your files and check several files in our possession. After that, we will discuss payment for decrypting your files and deleting the data we received.

Attacker 2025-04-11T00:35:57.555971Z
tree.txt filesize:4700442

Attacker 2025-04-11T00:36:27.750221Z
Here is a list of your files

Victim 2025-04-11T21:05:13.106683Z
Is this listing all of the data you stole? How much is it total in size?

Attacker 2025-04-11T21:07:50.211371Z
More than 100 gigabytes, more than 50 thousand files.

Victim 2025-04-14T22:05:27.140521Z
We want these files from your list: Group\Clients\[Redacted].pdf Collateral Review\Template v2022-08\[Redacted].xlsm [Redacted].pdf

Attacker 2025-04-14T22:19:19.606914Z
[Redacted].pdf filesize:1125386

Attacker 2025-04-14T22:19:28.998241Z
[Redacted].xlsm filesize:947633

Attacker 2025-04-14T22:19:38.570961Z
[Redacted].pdf filesize:10588784

Attacker 2025-04-17T21:52:57.374172Z
You can see the countdown timer. When it reaches 0, the data will be published, and the decryption tool will be deleted. Some promise to recover the data after our encryption, but this is not possible. Trying to negotiate just before the countdown ends will not make the position strong. Keep this in mind and don't miss the time.

Victim 2025-04-18T18:55:29.118725Z
How are we supposed to negotiate anything or attempt to move forward here when you haven't even told us your price? What exactly is it you want from us?

Attacker 2025-04-18T19:28:58.117337Z
You saw the rules right away. Listing, test, price. The price is 12 BTC.

Attacker 2025-04-22T21:41:50.776077Z
In the absence of active negotiations, the data will be published in less than 48 hours.

Auteur/autrice

sdgadmin@tux.ovh