Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are impacting your business

Negotiation Chat – Hive

Chat ID: 20211004

Hello and welcome to Hive. How may I help you?
4 October 05:53
Gang Avatar
Victim Avatar
i saw a text file and it had login info to come here.
6 October 22:30
To decrypt your files you will need to pay $500,000.
6 October 22:33
Gang Avatar
The price is not a subject to discuss.
6 October 22:33
Gang Avatar
Victim Avatar
i think theres a mix up or something. i am apr supply like it says here, but weve never had that much revenue. could there be a mixup? $500,000 would be impossible for me to pay
6 October 22:40
Victim Avatar
is anyone here?
7 October 14:03
The price isn't negotiable.
7 October 20:11
Gang Avatar
Victim Avatar
What happens if I can't pay?
7 October 22:05
Nothing. You will not be able to decrypt. Your exfiltrated files will be disclosed. We will make calls to your partners and customers to notify them about the incident.
7 October 22:25
Gang Avatar
Victim Avatar
does exfiltrated files mean you took files from me?
7 October 23:02
yes, not so much, but it will be enough to confirm the incedent
7 October 23:03
Gang Avatar
Victim Avatar
what files did you take?
7 October 23:05
Victim Avatar
can you show me what files you have?
8 October 20:05
Victim Avatar
how can i know you can fix my files?
9 October 00:03
Victim Avatar
did you take any files?
9 October 00:03
Victim Avatar
is anyone here
9 October 00:03
You are able to upload encrypted files and a key file locates at C:\*.key.* Encrypted files must not contain important info in it.
9 October 00:29
Gang Avatar
Victim Avatar
k Ill upload them
9 October 00:30
Victim Avatar
there
9 October 00:33
Victim Avatar
can u open these
9 October 00:46
I have uploaded decrypted file
9 October 12:23
Gang Avatar
Victim Avatar
ok that file worked
9 October 15:45
Victim Avatar
how do i know which files you took from me?
9 October 15:45
You will get an access to your exfiltrated files storage
9 October 15:47
Gang Avatar
Victim Avatar
can you prove that you took any files?
9 October 16:46
Yes, we will do that in few hours.
9 October 17:41
Gang Avatar
Done, you can check it.
9 October 19:25
Gang Avatar
Victim Avatar
this is a list of files from my computer. are you saying you have these? how can i know this for sure?
9 October 20:41
Select any without important info in it and we will upload it for you
9 October 20:42
Gang Avatar
Victim Avatar
2021 show discounts.xlsx [redacted] VENDOR NOTES.docx [redacted] customer sales April – June 2019.xlsx
9 October 22:53
Okay, few min
9 October 22:53
Gang Avatar
Victim Avatar
thanks
9 October 22:59
Done
9 October 23:07
Gang Avatar
Victim Avatar
thanks
9 October 23:34
Hello, the timer is almost gone. We will publish your data soon.
15 October 15:00
Gang Avatar
Victim Avatar
alright. im gathering up all my funds and will let you know how much i can pay
15 October 15:57
Victim Avatar
i can pay you $84,600.
15 October 17:02
Victim Avatar
i dont need a program to fix my files, but id like to keep my files from being published on the net if possible
15 October 17:02
To convince you to pay we can make calls to your partners and customers to notify them about the incident.
15 October 17:53
Gang Avatar
Victim Avatar
i can pay. i said i have 84,600
15 October 18:21
The price is $500,000.
15 October 18:24
Gang Avatar
Victim Avatar
ill need time to find more money.
15 October 18:47
I'll wait
15 October 18:48
Gang Avatar
Victim Avatar
okay. if my files or name is posted before i pay, i wont pay. i don't know what this timer is counting down to
15 October 18:50
I have extended it
15 October 18:52
Gang Avatar
Victim Avatar
thanks
15 October 19:01
You have to make a decision.
20 October 23:00
Gang Avatar
Victim Avatar
okay. i got a SBA 7(a) loan and put up all my assets as collateral so i can pay you. it hasn't funded yet, but should in the morning. when it does, i'll have a total of $112,838 that i can pay you. i know the price if $500k, but i just dont have that much money.
21 October 02:20
Victim Avatar
if this is enough, please explain how i get the money to you. thanks
21 October 02:22
Victim Avatar
hello? is $112,838 enough? if so, how do i pay?
21 October 16:24
To decrypt your files and to prevent them to be disclosed you will need to pay $500,000.
21 October 16:43
Gang Avatar
The price is not a subject to discuss.
21 October 16:43
Gang Avatar
Victim Avatar
im trying to get as much money as possible and as fast as possible. im going to need more time. ill keep working on this through the weekend and see how much more i can get. i wont be able to find over 300k and pay in an hour
21 October 16:50
Victim Avatar
thanks. the timer expires on Sunday. Even i can find all the money by then, i won't be able to pay until monday. it would be helpful to not have to worry about the timer until tuesday to give me time to figure out the bitcoin
21 October 17:01
Okay
21 October 17:07
Gang Avatar
Victim Avatar
thank you
21 October 17:18
Okay, I'll give you time
21 October 16:51
Gang Avatar
Hello?
29 October 02:06
Gang Avatar
Victim Avatar
Hi! I'm here. I was able to get more money. Waiting for confirmation of the amount. I'll let ya know asap
29 October 02:08
Okay.
29 October 02:09
Gang Avatar
Victim Avatar
hi. i have confirmation from my team that we have $275,800 available. i contacted a couple of bitcoin sellers so should be able to figure that part out as well. is this enough that we could pay?
29 October 15:11
Okay, I agree
29 October 18:56
Gang Avatar
At the time of transfer, the amount have to be equal $275,800 in BTC.
30 October 02:57
Gang Avatar
Victim Avatar
I will transfer the funds to bitcoin company on monday.
30 October 03:28
Victim Avatar
The timer will run out before then, but I'm guessing that it shouldn't be a problem. Thank you for your help
30 October 03:34 Read
Okay.
30 October 03:51
Gang Avatar
What is ETA on the payment?
2 November 17:05
Gang Avatar
Victim Avatar
Hi there! My bank is scrutinizing the wire transfer from me to coinbase. They are asking a lot of questions because they say these types of transfers are related to fraud. I'm telling them that I'm investing in bitcoin, so it should be okay. I'll let you know.
2 November 17:16
Okay.
2 November 17:18
Gang Avatar
It's time to pay
12 November 22:31
Gang Avatar