Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Negotiation Chat – Nightspire

These negotiation chats are offered to you by Valéry Marchive and Julien Mousqueton.

Chat ID: 20251218084018

Victim Avatar
We found your note. Who are you and what do you want?
Send us your UUID
Gang Avatar
Victim Avatar
Sorry do you mean this? NSPIRE*9NIA
What can I help you?
Gang Avatar
Victim Avatar
My team is asking who you are and what do you want?
Actually we need $150k US Dollars for your decryption key and data safety.
Gang Avatar
we have All your clients' information (Contacts, Drawings, Invoices ...)*Your data also contains russians on your clients...All your employeer's data
Gang Avatar
Victim Avatar
My teams is asking specifically if you can provide any examples like a list of files or actual files taken?
Victim Avatar
My team is also asking what amount you are looking for to resolve this matter, and what we get once a payment is made?
These images are some examples you want.All your files are zipped on our storage.
Gang Avatar
It's better for you to make us to not to unzip all your files for leak or selling.150k is not big price for your company, even for you.The faster you pay, the less price you can pay.
Gang Avatar
[IMG01.jpg] [IMG02.jpg] [IMG03.jpg] [filelist.7z.txt]
Gang Avatar
Victim Avatar
Thank you for the update, I will get this information over to my team.
Victim Avatar
My team is also wanting to know if you can prove the decryption key works?
Send us Test Files. After some tests, we'll provide decryption key.But these files must not contain sensitive & recent information.
Gang Avatar
Victim Avatar
OK, be back soon.
If no payment is made in this week, your hacked news will be posted on our onion site.Then next week, your clients' information and drawings will be sent to below competitors.
Gang Avatar
* Manufacturing in US* Manufacturing in US* Group Ltd in UK** * GmbH in Germany- *** und ** GmbH in Germany* in US
Gang Avatar
Victim Avatar
Here are the files
Victim Avatar
[testfile1.nspire] [testfile2.nspire] [testfile3.nspire]
[*** 6.26.25.xlsx]
Gang Avatar
This file contains financial data. We cannot share the whole file. We're sending the screenshoot of this file
Gang Avatar
https://gofile.io/d/**heck the decrypted files
Gang Avatar
Victim Avatar
Thank you.
Are you ready to pay?
Gang Avatar
Victim Avatar
I will get these over to my team to review. Thank you for working with us.
Just remember. Next week, your data will be posted on our site
Gang Avatar
Victim Avatar
I wanted to follow-up with you as we are wanting to work with you to resolve this matter.Our team will be meeting Monday afternoon to discuss next steps.Can you please give us until Monday evening or Tuesday morning to get back with you?
Ok. I hope there will be any goods deal at Tuesday evening.Actually, changes will be made from Wednesday morning.
Gang Avatar
How was your meeting? Any deals made?
Gang Avatar
Victim Avatar
My team is wanting to work with you to resolve this matter.However, the initial demand is more than we can offer at this time.My team is wondering if you can offer us a discount?
Victim Avatar
My team is also concerned about the SQL database, working correctly.They asked if you would be willing to decrypt one file from the SQL server to confirm it works?
What's your best offer to close this deal?
Gang Avatar
And about files, we've already shown enoughly and exactly about decryption.Let's clear our agreement price first
Gang Avatar
Victim Avatar
Thank you for the information. My team wants to work with you to resolve this matter.I was informed that we can offer you $22,500.00 USD for the decryption key, the deletion of our data and details on how you got into our network.
Victim Avatar
If this is acceptable, we should be able to make payment within 48 hours.Again, we want to work with you, but the initial demand is more than we can offer at this time.
Victim Avatar
Is our offer acceptable?
$22500 is too low priceAt that price, we cannot even provide decryption keyWhat about $120000?
Gang Avatar
Victim Avatar
Thank you for the update, I will provide the update to our team and get back with you as soon as possible.
It's the last day we've said. If no deals made until Tomorrow evening, your data will be posted on Thursday 00:00. It's our last warning.
Gang Avatar
Victim Avatar
Thank you for discount but my team is advising that is more than we can offer at this time.I was informed that we can offer you $42,750.00 USD for the decryption key, the deletion of our data and details on how you got into our network.
Victim Avatar
If this is acceptable, we should be able to make payment within 48 hours.Again, we want to work with you to resolve this matter quickly. However, based on the assets currently available it will take additional time to acquire funding, if this is not acceptable.
What about $110000?
Gang Avatar
Victim Avatar
Thank you for discount but my team is advising that is more than we can offer at this time.I was informed that we can offer you $51,650.00 USD for the decryption key, the deletion of our data and details on how you got into our network.
Victim Avatar
If this is acceptable, we should be able to make payment within 48 hours.Again, we want to work with you to resolve this matter quickly. Please work with us to resolve this.We are a small business with limited assets and funding.
What about 105000 US Dollars?
Gang Avatar
Victim Avatar
Thank you for discount but my team is advising that we cannot agree to that based on our current available funds.I was informed that we can offer you $56,500.00 USD for the decryption key, the deletion of our data and details on how you got into our network.
Victim Avatar
If this is acceptable, we should be able to make payment within 48 hours.
Victim Avatar
Please work with us as we are doing our best to work with you. We are a small business with limited assets and funding this is impacting on our ability to pay our employees.If this is not acceptable, we will need to look into loan options that will slow down our ability to make payment quickly and may or may not be possible.Will you accept our offer?
With $100000, we'll provide the decryption key file, accesses which allowed us and anything you want to know
Gang Avatar
We've reduced so much and this is the last amount we can ofer. We've already shown our best to you
Gang Avatar
Victim Avatar
I will let my team know and get back with you.
It's not so high price for you>And 9 Hours left until Thursday 00:00.
Gang Avatar
Victim Avatar
It may take me until the morning to be able to get back to you. Again, we want to work with you to resolve this matter, can you give me a litttle extra time.
Ok. But then, at that time, I hope you to not to say your little price again.
Gang Avatar
Victim Avatar
Thank you for discount but my team is advising that amount is still high for us.I was informed that we can offer you $75,000.00 USD for the decryption key, the deletion of our data and details on how you got into our network.
Victim Avatar
If this is acceptable, we should be able to make payment within 48 hours.
Victim Avatar
Please work with us as we are doing our best to work with you. We are a small business and with this increase we will most likely lay off employees around Christmas.We are doing the best we can to work with you.Will you accept our offer?
I'm sure that your company can pay $100000 as payment. Do not modify price anymore and lets make deal at $100000. That will be fine.
Gang Avatar
Victim Avatar
My team has advised me that we can agree to your terms, and we accept your offer of $100,000.00 USD for the decryption key, the deletion of our data and details on how you got into our network.
Victim Avatar
If you can confirm this and provide details on payment. We should be able to get this done with in the next 48 hours.
We want payment in BTC
Gang Avatar
Victim Avatar
Any more details?
what do u want more?If you send money 100k USD to our BTC address, we'll follow all the activities you want
Gang Avatar
Victim Avatar
Sorry I am not seeing the BTC address?
Shall I share it now?
Gang Avatar
Victim Avatar
If you agree to the 100,000 USD then yes, so I can start the process on our side.
wait a minbc1***
Gang Avatar
Here's our wallet addressWe're waiting on here
Gang Avatar
Victim Avatar
Thank you I will get this over to the team and get the process started.
when will this payment made? today?
Gang Avatar
Victim Avatar
working on it now
Victim Avatar
I was advised the payment was sent can you please confirm it.
it's now on pending.
Gang Avatar
Victim Avatar
Ok please confirm once completed.I double checked and was informed we sent the full amount, Please confirm once recieved.
We're on here
Gang Avatar
Victim Avatar
i was told they are working on it.
So, what service do you want?Decryption key & data erase & reach out the access
Gang Avatar
what do you want more?
Gang Avatar
Victim Avatar
decryption key, the deletion of our data and details on how you got into our network
So, choose your way for your decryption.We'll send delete log of your files at tomorrow morning timeAbout access, we exploited the [How NIGHTSPIRE ENCRYPTED]Choose your way for solutions.
Gang Avatar
Victim Avatar
I am not sure what you mean by Choose your way?
Victim Avatar
We need the decryption key for our systems.
Victim Avatar
Also my team is asking if you can confirm which vulnerability was exploited.