Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Negotiation Chat – Conti

Chat ID: 20210902

Victim Avatar
Hi Are you there? I need your help urgently kindly reply me. My system is behaving abnormally after infected by your ransomware.
2/9/2021, 9:38:39 AM
Yes, we are here. Will provide further details within next few minutes.
2/9/2021, 9:48:37 AM
Gang Avatar
As you already know - your network and all of your data were encrypted by CONTI team. Besides the encryption process we've downloaded a large pack of your internal documents and files that will be published in case our negotiations fail. How it happens can be seen on our website https://continews.best/ (TOR mirror: http://fylszpcqfel7joif.onion). The recovery price is $850000 in bitcoin. If you want to make sure we can recover all of your data - you can send us the two files of your choice and we will decrypt them free of charge. If we reach mutual agreement your will be provided with decryption tool, none of your internal data will be published and you will be provided with security tips on how to avoid further breaches. We strongly recommend to review our offer in a timely manner, you've waited too long to contact us and the press-release is already ready for publication.
2/9/2021, 9:52:32 AM
Gang Avatar
Victim Avatar
Please don't publish our data anywhere
2/9/2021, 10:01:20 AM
Victim Avatar
Tell me your demand how we can fix this thing?
2/9/2021, 10:01:58 AM
Please read the previous message once again. The recovery price is $850000 in bitcoin.
2/9/2021, 10:13:15 AM
Gang Avatar
Victim Avatar
It's so much? No Discount?
2/9/2021, 10:19:00 AM
You have been waiting to contact us for about three weeks while ignoring our emails and still ask for a discount? It's a luck that you data isn't published yet. It's way past the deadline.
2/9/2021, 10:21:54 AM
Gang Avatar
Victim Avatar
I know that I wasted so much time in thinking whether to pay or not but now I am ready to do payment atleast provide some discount please
2/9/2021, 10:27:03 AM
We can provide a 25% discount by going down to $635k if the payment will be made by the end of this week.
2/9/2021, 10:29:57 AM
Gang Avatar
Victim Avatar
Ok I am ready with this price tell me where I have to pay?
2/9/2021, 10:37:06 AM
The btc wallet for the payment is : [redacted] Let me know as soon as the payment is made.
2/9/2021, 10:40:54 AM
Gang Avatar
Victim Avatar
Thanks for the discount. Just want to ask one thing. Is your bitcoin address correct? I am getting issue while doing payment on your given address
2/9/2021, 10:58:53 AM
Yes, it is correct, but it's a segwit address. I will provide a new one within few minutes.
2/9/2021, 11:00:23 AM
Gang Avatar
You can use this one : [redacted]
2/9/2021, 11:01:23 AM
Gang Avatar
Victim Avatar
Thanks but it's not working is it segwit address or what? both the address are throwing same error. Might be because your address is new or created on blockchain and due to that I am getting the error.
2/9/2021, 11:07:11 AM
It is a new address, but that should not be an issue. What's the error code?
2/9/2021, 11:10:41 AM
Gang Avatar
Victim Avatar
Error code is "Transaction Server Failed" Might be because your address is new and empty. If you can provide me another address that have some balance probably it will work sometimes it happened due to zero or null value in blockchain if I am not wrong
2/9/2021, 11:15:17 AM
Try this one : [redacted]
2/9/2021, 11:18:14 AM
Gang Avatar
Victim Avatar
Thanks for your kind support but I think segwit it creating some issue can your provide non-segwit & non-empty address.
2/9/2021, 11:21:52 AM
Give me few minutes, I will try to find one.
2/9/2021, 11:28:50 AM
Gang Avatar
Victim Avatar
Ok no issue & Thanks once again for the discount
2/9/2021, 11:29:41 AM
That's not a common issue, have you tried to increase the fee? The blockchain network seems pretty busy today.
2/9/2021, 11:30:53 AM
Gang Avatar
Victim Avatar
I tried but it doesn't work for me. I know sometimes it happens in blockchain due to network issue so, I am not blaming you
2/9/2021, 11:33:48 AM
Victim Avatar
Btw Thanks for your amazing support service I thought that ransomware guys never respond properly but after talking to you I was wrong
2/9/2021, 11:34:50 AM
Glad to hear it. I am trying to find a suitable legacy wallet, but the fact is that we almost never use them, so it might take some time. Anyways, if you will be able to transfer the funds to any of the above wallets we will accept the deposit and provide you with a decryptor. Those three wallets are static and under our control.
2/9/2021, 11:37:05 AM
Gang Avatar
Victim Avatar
Meanwhile I will try no issue I understand your situation. If you have some more addresses and don't have any problem I will try on others if it works I will let you know
2/9/2021, 11:38:57 AM
Victim Avatar
[redacted] kindly check the payment on this address I just tried again I think funds has been transferred
2/9/2021, 11:43:32 AM
Victim Avatar
No need to check on that address again I got the error message
2/9/2021, 11:47:22 AM
[redacted] - try this.
2/9/2021, 11:54:15 AM
Gang Avatar
Victim Avatar
Same thing happening... you don't have legacy address with some balance. Blockchain network facing load issue I believe
2/9/2021, 11:57:36 AM
They are accumulated, so it basically has the parent balance. Nevermind, it seems to be a network issue due to high load, so let's just wait abit and keep trying within some interval.
2/9/2021, 12:01:02 PM
Gang Avatar
Victim Avatar
No Issue, I was also thinking the same I will try it like this only
2/9/2021, 12:03:37 PM
Victim Avatar
Can I ask few questions if you don't have any problem to answer? I am very curious to know about few things
2/9/2021, 12:04:11 PM
Sure, go ahead.
2/9/2021, 12:07:14 PM
Gang Avatar
Victim Avatar
Like why you started this ransomware business? How much you earned in this business?
2/9/2021, 12:09:03 PM
Oh, "those" questions. Unfortunately we have no interest in giving interviews, although the answers for both questions are pretty obvious, right?
2/9/2021, 12:11:38 PM
Gang Avatar
Victim Avatar
I know that everyone wants money whether it's you or me or anyone else this life runs on money. Without money no one can survive
2/9/2021, 12:13:36 PM
Victim Avatar
But do you think is this good business anyone can do it very easily because I talk to other people's they always said that ransomware guys earns lots of money. After wannacry cyber industry is changed
2/9/2021, 12:15:16 PM
I cannot provide any non-speculative answer to this question cause it's connected to an ongoing business enterprise. For now it seems to me like I am giving a public interview and as I have already told - we have no interest in spreading our position or opinion. Although I can provide you with some personal view of the situation after the payment is received and I become confident on whom I am speaking to.
2/9/2021, 12:27:44 PM
Gang Avatar
Victim Avatar
Ok no worries I understand
2/9/2021, 12:37:35 PM
I have to go offline for a while, let me know if you succeed with the payment. Seems like the bitcoin pools are feeling better based on the fact that we've managed to make several transactions today. All the provided wallets will be valid for the next 24 hours so you can choose any of them.
2/9/2021, 5:02:10 PM
Gang Avatar
Any success with the payment?
2/10/2021, 10:11:21 AM
Gang Avatar