Negotiation Chat – Akira
These negotiation chats are offered to you by
Valéry Marchive
and Julien Mousqueton.
Chat ID: 20250112
> Hello. You've reached Akira support chat. Currently, we are preparing the list of data we took from your network. For now you have to know that dealing with us is the best possible way to settle this quick and cheap. Keep in touch and be patient with us. Do you have a permission to conduct a negotiation on behalf of your organization? Once we get your reply you will be provided with all the details.
> Are you going to work with us?
> yes, have permission and will wait for list of data taken. can you tell us the price in the meantime?
> Hello. You've reached Akira support chat. Currently, we are preparing the list of data we took from your network. For now you have to know that dealing with us is the best possible way to settle this quick and cheap. Keep in touch and be patient with us. Do you have a permission to conduct a negotiation on behalf of your organization? Once we get your reply you will be provided with all the details.
> i have permission
> List.7z // 119 KB
> These files were taken from your network prior to encryption. You can pick 2-3 random files up to 10 MB each from the list and we will upload them to this chat as a proof of possession. To prove that we can properly decrypt your data you can upload 2-3 encrypted files up to 10 MB each to our chat and we will upload decrypted copies back. We're looking through your financial papers to come up with a reasonable demand to you. We offer: 1) full decryption assistance;
2) evidence of data removal;
3) security report on vulnerabilities we found;
4) guarantees not to publish or sell your data;
5) guarantees not to attack you in the future. Let me know whether you're interested in a whole deal or in parts. This will affect the final price.
> i want the package
> The full package is $750,000. Do you want to test our decryption tool?
> You have 24 hours to give us your decision regarding this deal. If you stay silent, we will announce the breach on our blog.
> We are reviewing the file list and have a few files we would like you to provide as proof of possession
> E:\[redacted].com\unpacked\[redacted].png
> E:\[redacted].com\unpacked\[redacted].pdf
> Please stop the harrassing emails please
> files.rar // 113 KB
> If you need to test our tool, send the files today.
> We are working on our side to evaluate your proposal
> We are waiting for your decision today.
> Do you really think we will wait forever?
> we are working as fast as we can. Remove item 1 and let's know the update proposal and we will start to move quicker
> $400,000 for the options 2-5. We are waiting your reply today.
> today and a deal at 72,500. take away item 3 as well.
> If you take away item 3, we are decrease the price to $340,000. 5 figure amount cannot be considered. Make a reduction asap.
> We appreciate the further discounts, but 340,000 is not reasonable. We are ready to step forward further at your six figure ask of 101,500.
> $300,000 if you pay by Monday. Hurry up.
> We are ready to hurry up but 300,000 is still a tall number for us.
> You still have time. Do your best.
> we are working on our end but that number is still to high for consideration. The partners can step forward at 138,500
> $285,000 and we close this.
> our numbers are still far apart to get to closure. 151,500 and close this
> $265,000. Let's end this as we are about to announce the incident.
> No need for threats as we are trying to get to an agreeable solution. We are 105,000 apart. What is your solution
> The solution is that you gather the rest and we have a deal. We are waiting to end this today.
> Gathering the full funds is problematic. But we will make one more step at 169,600
> We're willing to take the same step and come down to $240,000. We're losing interest guys.
> Can we end this at 201,500 that should make all parties happy
> $225,000 will make us all happy. Here is our BTC wallet [redacted]. Let us know when can we expect the transfer.
> coin has been sent
> please provide us the materials
> unlockers.7z // 2.1 MB
> unlocker.exe -p="path_to_unlock"
unlocker.exe -s="C:\paths.txt"
where "paths.txt" is a list of paths for the decryptor, each path on a new line
ESXi commands
1) chmod +x unlocker
2) ./unlocker -p="/vmfs/volumes"
> thank you, received. please let us know when to expect evidence of data removal
> Should be provided soon.
> Deletion.7z // 69.9 KB