Negotiation Chat – Conti
Chat ID: 20210517_b
we received your ransom note. Can you provide the proof pack you mentioned
17/05/2021, 19:05:39
Welcome! [redacted]
17/05/2021, 21:35:39
Hello!
17/05/2021, 21:37:06
You need pay for decrypt your files. Your price is 1.500.000$
17/05/2021, 21:37:07
can you send us a proof pack
17/05/2021, 21:37:20
You need to pay this amount and we will give you decryptor for all your network, file tree on what we have downloaded from your network and wiping log of that information.
You can choose not to pay and then your data will be published in the media with subsequent sale.
If you will spend 3 days in silence we will start publushing the information.
17/05/2021, 21:37:29
can you let us know the amount of information that you have taken
17/05/2021, 21:40:55
We have your accounting, legal documents, finance, contracts and personal correspondence, DB, that's all I can say. It's about 200 Gigabate. You will receive a complete list of files after payment as well as a log of their removal from our server.
17/05/2021, 21:46:54
[redacted]_proof.7z [ 2.1MB ]
17/05/2021, 21:49:21
Proof Pack. Pass: 123123
17/05/2021, 21:49:38
If you delay the negotiations, on Monday we will release information about the fact of hacking your network. Further, if you do not understand this, we will publish part of the data to find a buyer for them.
17/05/2021, 21:50:39
We will also try to find a buyer for your data and access to your network if you refuse to pay.
17/05/2021, 22:26:56
Thanks for providing the data. We are struggling with the claim that you have 200GB of data. Can you provide further examples of the information as the random samples are not moving management.
18/05/2021, 20:53:35
We will send you 30% of the file tree, you will select any 3 pcs of non-sensitive information and we will provide them to you as evidence.
18/05/2021, 22:35:11
Ok
18/05/2021, 23:07:56
Checking in
19/05/2021, 17:31:19
Wait.
20/05/2021, 00:03:59
30%_DATA_[redacted].txt.7z [ 794kB ]
20/05/2021, 00:11:40
Pass: 123123
20/05/2021, 00:11:55
Let's not delay the negotiations. This has a negative effect on the fact of publishing you. Be more active.
20/05/2021, 22:04:04
We should have an offer to you shortly as management has been discussing.
20/05/2021, 23:48:37
Make a reasonable offer based on our offer.
21/05/2021, 00:17:36
Can you provide the following three files
21/05/2021, 03:24:01
1../SRV[redacted]/E/[redacted]/SALES/Contractor/[redacted]/[redacted]/[redacted]\ Miscellaneous\ Control\ Equipment/5\ -\ Submittals/[redacted]/[redacted]\ Hydro\ Testing.pdf
2../SRV[redacted]/E/[redacted]/SALES/Contractor/[redacted]/1\ ARCHIVE\ -\ OLD\ PROJECTS/2006-2010\ Fiscal\ Years/[redacted]\ -\ [redacted]/[redacted]/Proposal/Complete\ Proposal_RFQ\ [redacted]_[redacted]_122106.pdf
3../SRV[redacted]/E/[redacted]/SALES/Contractor/[redacted]\ [redacted]/[redacted]\ Generating\ [redacted]\ Steam\ Bypass\ [redacted]/FW\ [redacted]\ Generating\ [redacted\ -\ Request\ for\ Proposal\ -\ Steam\ Bypass\ [redacted].msg
21/05/2021, 03:24:09
[redacted]_proof1.7z [ 1.6MB ]
21/05/2021, 13:51:11
Pass: 123123
21/05/2021, 13:52:00
Let's not delay the negotiations. This has a negative effect on the fact of publishing you. Be more active.
21/05/2021, 13:56:08
Management is requesting more time to formulate an offer. Thank you for your patience
21/05/2021, 20:43:10
How long do you need? You wanted to agree quickly, but you yourself are delaying the negotiations.
21/05/2021, 20:51:38
After many discussions with management, they have settled at $150K for the amount. This is based on the valuation of the information provided and other risk factors in the environment. Management hopes to settle quickly, can we agree
22/05/2021, 15:08:38
Your offer has been rejected. Make a more reasonable offer based on our offer.
22/05/2021, 15:49:04
150.000 and 1.500.000 why do you think we should agree to 1\10? Your proposal is not even close to what you can talk about and think about.
22/05/2021, 15:51:00
We are willing to negotiate to a fair settlement. What number can you offer?
22/05/2021, 22:29:40
Well, we see constructive dialogue and make a discount. Your new price is $1.350.000
23/05/2021, 19:53:19
We will discuss as a management team and get back in touch shortly.
24/05/2021, 00:40:33
Management has informed me that $200K is what we can offer. Hopefully we can get this to closure.
24/05/2021, 15:32:39
Well, we see constructive dialogue and make a discount. Your new price is $1.300.000
24/05/2021, 21:10:43
do you delay negotiations, do you have constructive proposals?
25/05/2021, 17:22:22
Based on the valuation of the data, we are at $200K. We hope you will be able to accept your offer
26/05/2021, 17:49:21
Well, we see constructive dialogue and make a discount. Your new price is $900.000. Your next step.
27/05/2021, 17:02:06
Evaluate our steps. You can negotiate with us. But offering funny amounts is not the best way for you. It leads to publication.
27/05/2021, 17:03:22
Let me talk with my bosses
27/05/2021, 20:53:26
do you delay negotiations, do you have constructive proposals?
29/05/2021, 22:27:15
My bosses have told me $225K is all we can do. Hopefully we can agree on this one.
01/06/2021, 17:39:48
Well, we see constructive dialogue and make a discount. Your new price is $875.000. Your next step.
01/06/2021, 22:25:36
Management has informed me that $250K is the highest we can go to settle our affairs. They also have informed me that while the decryption key would be nice, they do not need it.
03/06/2021, 16:11:52
Offer $250,000 rejected. Make the best offer. Your new price is $850.000. Your next step.
03/06/2021, 20:16:00
$250K is all we can offer.
05/06/2021, 00:25:11
Offer $250,000 rejected. Make the best offer. Your new price is $850.000. Your next step.
05/06/2021, 00:44:50
Do not delay the negotiations, this will negatively affect the publication.
07/06/2021, 01:12:34
My bosses have told me $250K is all we can do.
07/06/2021, 16:06:17
Offer $250,000 rejected. Make the best offer. Your new price is $850.000. Your next step.
07/06/2021, 20:54:56
Do not delay the negotiations, this will negatively affect the publication.
07/06/2021, 20:55:03
I have given you the best offer I can. I wish I could do more.
07/06/2021, 21:06:17
If we don't agree by Tuesday, publications will begin Wednesday. All deadlines are out. Your tactics will lead to a deplorable result for you.
12/06/2021, 01:30:38
Offer $250,000 rejected. Make the best offer. Your new price is $850.000. Your next step.
12/06/2021, 01:30:50
Publications will begin Wednesday. All deadlines are out. Your tactics will lead to a deplorable result for you.
14/06/2021, 20:31:41
$250K is the best offer. Hopefully we can agree to settle our affairs.
15/06/2021, 06:24:09
Publications will begin Wednesday. All deadlines are out. Your tactics will lead to a deplorable result for you.
15/06/2021, 12:00:44
Look, we discussed everything and decided. The minimum we can agree to in your case is $350,000. Either we make a deal or we publish you. There's no time to pull conversations.
16/06/2021, 20:03:41
Let me talk with my boss
16/06/2021, 21:24:38
Can you send us the wallet
17/06/2021, 18:13:54
to confirm, we will receive the decryptor, the data (file tree), shred log, not to be posted, and a security report. We are waiting on the wallet upon your confirmation
17/06/2021, 23:15:30
we are ready to move forward once confirmed
18/06/2021, 04:16:51
Correct. The wallet for the payment is:
[redacted]
18/06/2021, 10:08:54
The wallet has been funded
19/06/2021, 07:14:37
https://bitref.com/[redacted]
19/06/2021, 07:14:46
[redacted]_decryptor.exe [ 103kB ]
19/06/2021, 09:24:55
Decryptor:
1) Launch the decryptor under Administrative rights
2) Wait till the decryptor window is closed
3) if any of the files haven't changed the extension back to the original - repeat 1 and 2
19/06/2021, 09:25:07