Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Negotiation Chat – Dragonforce

Chat ID: AB0404E049514B50

Victim Avatar
Where is the listing is step 1?
2025-04-10T23:16:50.760546Z
tree.txt filesize:2352921
2025-04-11T00:18:00.831244Z
Gang Avatar
Here is the list of files.
2025-04-11T00:18:16.513956Z
Gang Avatar
Victim Avatar
We will work on getting you the 3 files
2025-04-12T13:28:39.055759Z
Victim Avatar
How did you all get in?
2025-04-12T13:28:52.697488Z
Data on the method of penetration and work within the network are provided only after successful completion of negotiations. We are waiting for your files to demonstrate the test decryption.
2025-04-12T13:32:40.055477Z
Gang Avatar
Victim Avatar
Will work on that too
2025-04-13T03:05:19.964810Z
Victim Avatar
Please provide us with the following files:
2025-04-14T18:40:51.565505Z
Victim Avatar
[Redacted].pdf [Redacted].xlsx [Redacted].xlsx
2025-04-14T18:41:07.665303Z
[Redacted].xlsx filesize:1826490
2025-04-14T18:47:10.846028Z
Gang Avatar
[Redacted].pdf filesize:2490220
2025-04-14T18:47:35.671018Z
Gang Avatar
[Redacted].xlsx filesize:2774610
2025-04-14T18:48:11.168050Z
Gang Avatar
[Redacted].xlsx filesize:132809
2025-04-14T18:48:48.901797Z
Gang Avatar
Victim Avatar
We will check theses out.
2025-04-15T02:43:29.785757Z
Victim Avatar
Is this everything you have? What are you wanting from us?
2025-04-15T18:57:07.383843Z
Have you checked the decryption capability and made sure that we have the files?
2025-04-15T19:00:36.817314Z
Gang Avatar
Victim Avatar
We could only decrypt one file but it worked from what we could tell and you sent us the files we requested from the list provided.
2025-04-15T19:06:24.489669Z
We can decrypt all the data back, and we will delete the data that is received from your network. The cost will be 500,000$
2025-04-15T19:09:07.493667Z
Gang Avatar
Victim Avatar
Is that file listing you sent earlier 100% of the files?
2025-04-16T16:29:53.615706Z
This is the list that we have decided to share with you.
2025-04-16T16:39:40.995198Z
Gang Avatar
Victim Avatar
What percentage is it?
2025-04-17T01:53:31.530191Z
This is the list that we have decided to share with you.
2025-04-17T01:54:35.954113Z
Gang Avatar
Victim Avatar
That is a lot of money when we don't know everything you have
2025-04-17T15:43:03.343335Z
You have been provided with the necessary information. You can also see the countdown timer. Upon completion, the data will be published, and the decryption program will be deleted. You will not be able to recover data from recovery companies. After the timer expires, the decryptor will actually be deleted, and it will not be available for any money. These are standard terms and conditions, and you know it. The situation can be resolved quickly for the specified amount and continue working quietly. Think about it.
2025-04-17T15:51:09.306020Z
Gang Avatar
Victim Avatar
Is there any wiggle room in the amount? That would be a lot to try to produce by the time the timer reaches zero.
2025-04-17T18:48:28.757111Z
Abstract conversation does not lead to success. Name the amount and the due date. And we will discuss it with you.
2025-04-17T18:51:53.813026Z
Gang Avatar
Victim Avatar
We are having internal conversations here but it would be helpful for you all to give us a better starting point on the price
2025-04-18T19:28:05.857541Z
Starting point 500 000$
2025-04-18T19:32:21.405713Z
Gang Avatar