Contact us Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Negotiation Chat — Nightspire

Negotiation chats provided by Valéry Marchive and Julien Mousqueton.

Chat ID: 20260217

Victim
Hey. UUID: [redacted]. FBI San Francisco already notified. Full screenshots sent. No payment.
2026-02-17
FBI? They won’t stop your board from reading tomorrow’s headlines.
Gang
500+ GB exfiltrated: signed client contracts with penalties, Q4 financials showing revenue drop, internal audit report listing compliance violations, customer database with 47,000 PII records.
Gang
https://gofile.io/[redacted]. This is list of files we have stolen.
Gang
Victim
You’re leaking real contracts? That’s breach of NDAs. Clients will sue us into oblivion.
Exactly. One leaked contract = lost deals worth millions. Your biggest client sees their pricing exposed? Gone.
Gang
Victim
Stop posting. This is economic sabotage. We’re escalating to SEC if financials go out.
SEC? They’ll fine you for poor controls while your stock (if public) or valuation tanks.
Gang
$150k BTC. 48 hours. Or full financial package drops: tax filings, vendor invoices, M&A due diligence folder.
Gang
We release audits and you face regulatory hell. Fines, investigations, lost trust.
Gang
Pay us or watch your next board meeting include screenshots from dark web buyers.
Gang
Victim
This is insane. $150k still impossible. We’re mid-size.
Mid-size with big secrets. $135k within 24 hours. Or customer PII batch goes to competitors first.
Gang
Yes. Imagine your top 5 clients getting spam from rivals using your stolen data.
Gang
Victim
Board saw the samples. Panic mode. $110k is max quick cash.
$110k? After we hold your audit violations? $130k. Mention feds again, back to $150k + extra leak.
Gang
Victim
Fine. Everyone terrified. $118k. No more company docs please.
$125k final. Or tomorrow full customer database CSV hits leak sites.
Gang
Victim
$120k. Drained everything – reserves, lines, exec personal. Don’t destroy us.
$120k accepted. Should’ve paid before your contracts went public.
Gang
BTC: bc1[redacted]
Gang
Send now. TXID screenshot or next batch drops in 30 min.
Gang
Victim
Transferring. 10-15 min confirms. Hold the leaks.
Victim
Sent. TXID: [redacted]
Funds received. Clean.
Gang
https://gofile.io/[redacted] This is decryption key & tool and also guide.txt
Gang
Test one machine at the first.
Gang
Victim
Files decrypting. All good.
Deletion log: https://gofile.io/[redacted] 500+ GB wiped – contracts, financials, audits, PII. No copies left.
Gang
No more leaks. Stay silent.
Gang
Victim
Thank you.