Contact us Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Negotiation Chat — Akira

Negotiation chats provided by Valéry Marchive and Julien Mousqueton.

Chat ID: 20250312

Victim
hi
Victim
hello
Hello. You've reached an Akira support chat. Currently, we are preparing the list of data we took from your network. For now you have to know that dealing with us is the best possible way to settle this quick and cheap. Keep in touch and be patient with us. We will reach out to you soon. Do you have a permission to conduct a negotiation on behalf of your organization? Once we get a response you will be provided with all the details.
Gang
Victim
yes, i have permission
Victim
requesting sample data of [redacted]
List.rar // 19.8 KB
Gang
These files were taken from your network prior to encryption. You can pick 2-3 random files up to 10 MB each from the list and we will upload them to this chat as a proof of possession. To prove that we can properly decrypt your data you can upload 2-3 encrypted files up to 10 MB each to our chat and we will upload decrypted copies back. We're looking through your financial papers to come up with a reasonable demand to you. We offer: 1) full decryption assistance; 2) evidence of data removal; 3) security report on vulnerabilities we found; 4) guarantees not to publish or sell your data; 5) guarantees not to attack you in the future. Let me know whether you're interested in a whole deal or in parts. This will affect the final price.
Gang
Are you going to work with us?
Gang
What do you mean "requesting sample data of [redacted]"?
Gang
Victim
I am looking for "[redacted]"
Could you please be a little more specific?
Gang
Victim
[redacted] is the tiny bearded man hiding inside your encrypter. I assume he leaves his name so he can be contacteed. I much desire to speak with him. If you don't know him contact your management.
OK.
Gang
Victim
Standing by.
You can find your company name in our news column: https://akiral2iz6a7qgd3ayp3l6yub7xx2uep76idk3u2kollpj5z3z636bad.onion. If you want this post to be removed, we have to agree on something.
Gang
Victim
Hello there, I got this chat from a different attack, in fact my company has a different name. Can I have a separate Chat?
From a different attack? What do you mean? What's your company name?
Gang
Victim
[redacted]
You're in the right place.
Gang
You data will be published soon.
Gang