Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Negotiation Chat – Dragonforce

Chat ID: FDA8141B6DD392E3

Hello. You've been attacked by DragonForce as you can see. We've researched information about your company and decided to set a price of $7,000,000. Otherwise, your data will be published in our blog.
2024-11-20T02:18:01.897517Z
Gang Avatar
Victim Avatar
Can you provide the list of files you have taken? Also, what type of discounts do you offer?
2024-11-20T16:46:45.392949Z
list.zip filesize:2780416
2024-11-20T20:29:17.989461Z
Gang Avatar
If you pay quickly, we can provide a 10% discount.
2024-11-20T20:31:20.346305Z
Gang Avatar
We need an update ASAP.
2024-11-25T15:19:12.786536Z
Gang Avatar
Victim Avatar
Hello, sorry for the delay in responding. It was Thanksgiving holiday last week so a lot of people were out. Can you provide the 3 files to prove you have them? These files: Old SPF Records.txt, 01 19 23 KNP POSTING SHEET.xlsm, and Zelis Payment URL.txt.
2024-12-04T19:12:19.047574Z
Sure.
2024-12-04T19:41:47.453304Z
Gang Avatar
ashvilleeyes_test.zip filesize:58126
2024-12-04T19:42:04.731879Z
Gang Avatar
Victim Avatar
Thanks, we will review and be back in touch.
2024-12-05T14:05:43.812681Z
Keep in mind that your decryptor will be automatically deleted in 3 days. We won't extend the timer if we don't come to an agreement in these 3 days. Hurry up, please.
2024-12-05T18:18:47.365378Z
Gang Avatar