Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Negotiation Chat – Akira

Chat ID: 20250222

Victim Avatar
We would like to know what data you took from us
Hello. You've reached an Akira support chat. Currently, we are preparing the list of data we took from your network. For now you have to know that dealing with us is the best possible way to settle this quick and cheap. Keep in touch and be patient with us. We will reach out to you soon. Do you have a permission to conduct a negotiation on behalf of your organization? Once we get a response you will be provided with all the details.
Gang Avatar
Victim Avatar
Yes
list (20).txt // 798 KB
Gang Avatar
These files were taken from your network prior to encryption. You can pick 2-3 random files up to 10 MB each from the list and we will upload them to this chat as a proof of possession. To prove that we can properly decrypt your data you can upload 2-3 encrypted files up to 10 MB each to our chat and we will upload decrypted copies back. We're looking through your financial papers to come up with a reasonable demand to you. We offer: 1) full decryption assistance; 2) evidence of data removal; 3) security report on vulnerabilities we found; 4) guarantees not to publish or sell your data; 5) guarantees not to attack you in the future. Let me know whether you're interested in a whole deal or in parts. This will affect the final price.
Gang Avatar
Victim Avatar
Thank you for sharing this information and the file list. We'll review everything and follow up with you on Monday.
Waiting.
Gang Avatar
Victim Avatar
Taking more time than we thought to check this list. Need until tomorrow if thats okay
That's is not okay. Provide a file request today.
Gang Avatar
Victim Avatar
We first contacted you over the weekend and we haven't had enough time to check this list. It's not the easiest thing to skim through all of these directories.
You can ask for any not large file from the list. It doesn't take much time.
Gang Avatar
Victim Avatar
Sorry for the wait. Still understanding the data but please send these
Victim Avatar
E:\[redacted].com\[redacted].docx
Victim Avatar
E:\[redacted].com\[redacted].xlsx
Victim Avatar
E:\[redacted].com\[redacted].xlsx
Files.rar // 1.93 MB
Gang Avatar
Here are the files. Do you want to test our decryption tool?
Gang Avatar
Victim Avatar
Yes, how does that work?
Are you trying to stall? To prove that we can properly decrypt your data you can upload 2-3 encrypted files up to 10 MB each to our chat and we will upload decrypted copies back. Waiting for the files today.
Gang Avatar
We're willing to set a $450,000 price for ALL the services we offer. Waiting for your files today.
Gang Avatar
Victim Avatar
[redacted].jpg.akira // 37.7 KB
Victim Avatar
[redacted].docx.akira // 155 KB
Victim Avatar
Please bear with us. We don't want to create an error so we are following your guidance. Can you fix these?
Please wait.
Gang Avatar
Decrypted.7z // 148 KB
Gang Avatar
Here are the files. Are you ready to proceed with payment?
Gang Avatar
Victim Avatar
Can we slow down just a bit? We're checking these files but you're asking us for almost half a million. Other companies just pay you instantly?
Yes, they do. You have until tomorrow to review the files. We have to move to payment.
Gang Avatar
Victim Avatar
We need to set this straight. We reached out to you over the weekend and we've spent each weekday trying to turn on our bricked computers, which has been a slow process. We've also been reviewing your list and now you're asking for $450,000. We're a small shop out of [redacted], not some large corporation in a big city. Can we get more than 1 day to wrap our heads around all of this?
How much time do you want to gather the amount?
Gang Avatar
Victim Avatar
We can't promise any sort of payment at this rate but Tuesday should give us enough time to see how this may play out. I don't handle our finances but I know this is going to be quite the exercise to see what we can come up with.
We cannot give you until Tuesday. We will give you until Thursday evening the latest.
Gang Avatar
Victim Avatar
That's tomorrow...
Victim Avatar
We have a handful of employees. We don't make millions and millions in revenue. How do you expect us to evaluate all of this in 24 hours? If we can't have time, then we have no idea how we're going to work with you.
Just give us an update on Thursday evening. If you pay this week, we can make a good discount.
Gang Avatar
Victim Avatar
I wanted to get back to you before the evening. I really wish I had a better answer but right now the only thing we have available is some petty cash for a few thousand. We need to meet with our accountant since he knows more about this finance stuff and he's not back until next week. This is a lot more serious than we thought and I don't want to lost contact with you. Can you wait for him to get back so we can see what options we have?
We can wait till Monday for a serious counter offer. The incident will be announced if your number is inadequate.
Gang Avatar
Victim Avatar
I think we can make that work
Hope so.
Gang Avatar
What's your offer?
Gang Avatar
Victim Avatar
Our accountant is still performing an analysis but I told them that we need to get some sort of response to you today. Nothing is finalized but for now he's comfortable offering $80,000. I don't know how to even get this money to you but is this something you can allow?
This doesn't work. $80,000 offer is too far from our demand. We do not work with 5 figure amounts. Update your offer today, if you don't want us to announce the incident.
Gang Avatar
Victim Avatar
The accountant is still reviewing our financials. It's been even harder since he doesn't have access to some of the drives. This isn't our final number but there's nothing else he can provide today. He's going through dozens of reports and re-calculating some of the locked data so he's going to need a few days to figure this out.
We will not give more than 24 hours. Hurry up.
Gang Avatar
Victim Avatar
If we keep getting these short deadlines, then we're going to continue coming up short. It's just a few of us that work here and each day has been painful for us. We don't have access to our files and we're trying to come up with a price that feels unfair. If you're not going to meet us on the price, then please give us enough time to actually give you a proper response. We don't need a whole week, just a few days.
You have the deadline. No one is going to drag this out.
Gang Avatar
Victim Avatar
So we have like 2-3 days? That's all we need.
No, we can't give you 3 days. Update us on Tuesday evening. We will decide how to proceed with you.
Gang Avatar
Victim Avatar
We'll try but we really don't know what we can come up with in a few hours...
You have to take it seriously. We will not wait long.
Gang Avatar
Victim Avatar
Ok this is where we're at. The accountant said that we were already in bad shape to start the year and the budget was trimmed because our profits aren't getting better. We may be able to sideline a small project to come up with more cash for you, but anything more and we're going to need help from the bank. There is nothing else left for now. To sum it up, we can pay $103,000 now. Anything more will require help from the bank.
This is something already. You can understand that you are still far from our demand but we are open to work with you. So, the leadership decided to make a big step towards you and we are ready to accept $400,000 if you pay this week.
Gang Avatar
Victim Avatar
$400,000? This week?
Victim Avatar
Is this some sort of a trick? How do you think we'll 4x our offer in 3 days?
Take a loan or try to borrow. Ask your accountant. You have a few hundred thousands in cash and a couple of dozens in assets.
Gang Avatar
Victim Avatar
I don't know much about the financials but I know our accountant has said multiple times that we are already in a lot of debt. If there's any chance of borrowing then that will take time too. I hate sounding like a broken record constantly asking for time, but you need to give us something to work off of. Can we get the rest of this week to see our options then update you on Monday?
We cannot wait that long. Update us on Thursday evening the latest.
Gang Avatar
Victim Avatar
We have a few banks that we normally work with and I can guarantee that they won't sign off on a loan in 48 hours. We're at their mercy if we go down this path so Thursday won't work.
Do your best. We believe you will make it.
Gang Avatar
Victim Avatar
Just letting you know we are still working on this, but it's moving slowly. We're at the mercy of the banks right now
Keep us posted on your progress.
Gang Avatar
Victim Avatar
We certainly will. We want this resolved just as much as you do.
Waiting.
Gang Avatar
What's your progress?
Gang Avatar
Victim Avatar
We just received word from the bank working with us that they won't have a decision on the loan until next weekend. Either Monday or Tuesday.
Victim Avatar
We have to keep providing them with documentation of our financials so we can justify the amount of the loan so there is a lot involved.
You have to push your bank to get a quicker decision from them. The deadline is Monday. If you provide little or no offer, we will announce the incident incident.
Gang Avatar
Victim Avatar
If we had that power we would tell them that, but it's a bank and we need something from them. They aren't going to just give us money without doing their due diligence.
Victim Avatar
We will let you know on Monday if we have their decision or not.
Ok. We will see on Monday whether your data be published or not.
Gang Avatar
You have 24 hours to give us your decision regarding this deal. If you stay silent, we will announce the breach on our blog.
Gang Avatar
You can find your company name in our news column: https://akiral2iz6a7qgd3ayp3l6yub7xx2uep76idk3u2kollpj5z3z636bad.onion If you want this post deleted, we must come to an agreement.
Gang Avatar