Negotiation Chat: 20260127

Hello. This is IT manager. We received your ransom note. Systems are down, files encrypted. We need the decrypt key to recover. Can we discuss?

2026-01-27

Send UUID first.

[redacted] Is it right?

Hi. Welcome. Ransom for full decryptor + master key + data deletion guarantee: 2 BTC.

We exfiltrated 1.8 TB: CAD models, proprietary algorithms, client project specs, contracts. Pay within 5 days or publish starts.

2 BTC. You mean, $22,590? That's enormous. We're a small-size engineering company. This would devastate us.

We know your size from internal docs. You have not small. 2 BTC is fair for the risk we took.

Still way too high. What's your realistic bottom line? We need to consult internally.

No bottom line yet. But if you delay, price increases. Tomorrow it becomes 2.1 BTC (+5%). Better act fast.

Understood. We'll get back soon.

Any update?

Still quiet? Timer ticking. 72 hours left before first leak batch.

Ignoring us again? Fine. We warned. Price now 2.5 BTC as promised.

More silence = more price + data release.

You think silence helps? Wrong. We post proof now to motivate.

Check our leak site: http://nspirep7orjq73k2x2fwh2mxgh74vm2now6cdbnnxjk2f5wn34bmdxad.onion/database/[redacted]

Already uploaded: 40+ files – sample CAD drawings, client bid proposals, source code snippets, financial spreadsheets.

Next batch in 24 hours: full IP folder + customer database. Pay or lose everything.

We saw the leak. Clients are furious – one already threatened to pull contract. This is catastrophic for our reputation and IP.

Please pause further publishing. We're ready to negotiate seriously now.

Finally awake. Leak paused temporarily. But damage done – your delay cost you.

New demand: 1.9 BTC. Pay quick or resume full dump.

The leaked samples are already hurting bids. We lost credibility.

We can do proof first? Decrypt 4 files to confirm tool works.

Ok. Send 4 samples. Max 10MB each. Using gofile.io and share the link.

This is the link. https://gofile.io/[redacted]

Received. Wait a mins.

Here – 4 files decrypted perfectly. Check them. Universal tool, no issues. https://gofile.io/[redacted]

Thank you. Files open fine, no corruption. We trust it works now.

Good. Now 1.9 BTC to wallet: bc1q[redacted]

48 hours max. Leak resumes if no movement.

1.9 BTC still crippling. Board emergency meeting – insurance covers partial, but max we can gather is 1 BTC from all sources.

1 BTC??? After your silence leaked our proof? No way. That amount is already lowered. Competitors would pay more for your designs.

The ongoing leak risk is worse than price. Clients calling non-stop. We push to 1 BTC. Fast payment if you accept – within 24 hours.

1BTC low after your games. But... 1.7 BTC final offer. Take or full client list + code repos next.

That amount pushes us to the edge, but better than total collapse.

We counter 1.5 BTC. Absolute max – pay immediately, NDA, no further leaks.

Ok. 1.5 BTC accepted. Your delay cost you higher than if you'd responded early.

Wallet same. Send tx hash. 36 hours.

Agreed. Thank you. Starting BTC transfer. Compliance takes 10-12 hours.

Timer paused. Update frequently.

We sent all amount to your wallet. Check this.

Hash: https://mempool.space/tx/[redacted]

Confirmed. Sending recovery files now:

https://gofile.io/[redacted]

You can fild help.txt.

Testing on test machine first.

Test success – sample model decrypts perfectly.

Proceed to production.

Any stuck files?

Fixed with retry.

100%! All data back. Systems operational.

Confirmed recovery?

Yes. Everything intact. Thank you.

Deleting exfil data now.

Purge complete – logs wiped.

https://gofile.io/[redacted] deletion_log.txt

Final? No future leaks?

Yes. Word kept. No resale, no re-attack.

This saved our company. Huge lesson.

Patch vulnerabilities. Goodbye.

Understood. Thanks.

Negotiation Chat — Nightspire