Ransomware negotiation(s) with
fog
Do you need our help?
Friday, 17 May 2024 08:30:51
We would like to know what you are looking for from us. Your note says you copied data so we would like to understand what data you took.
Thursday, 23 May 2024 03:55:28
[provides a compressed 7zp files list]
this is what we took
Admin 11:10:55
We can decrypt your systems in a couple of hours for only $400,000. Just send us 3 random encrypted files to be sure - we'll decrypt them for free.
Admin 11:57:37
Okay, we are working on that for you. Can you confirm that list is all of the data that you took?
Admin 23:45:48
Yes this is all we took
Friday, 24 May 2024 08:37:03
Thank you. We are working on the files but will probably not have an update until after the weekend
Friday, 24 May 2024 19:43:14
Hello. Have you managed to review?
Monday, 27 May 2024 07:57:09
Sorry we are working through one last item and it's late here. We will respond by tomorrow.
Monday, 27 May 2024 12:30:14
We need you to speed up.
Monday, 27 May 2024 13:45:56
Are you able to send us the following files from that list?
Tuesday, 28 May 2024 03:25:26
Directory of E:\[redacted 1st directory]
Tuesday, 28 May 2024 03:25:45
Directory of E:\[redacted 2nd directory]
Tuesday, 28 May 2024 03:25:56
Directory of E:\[redacted 3rd directory]
Tuesday, 28 May 2024 03:26:02
[provides provides 3 files]
these are the files from the directories you that gave
Admin 07:38:02
For the first directory, are you able to provide us this file? [redacted]\[redacted].docx
Wednesday, 29 May 2024 00:23:06
It looks like the full file path was originally cutoff when we requested it
Wednesday, 29 May 2024 00:23:28
[provides provides 1 more file]
Admin 07:00:33
lets get closer to a resolution here. Are you ready to make a transaction and get all this resolved?
Admin 14:54:02
We are going to have a bit more discussion today and over the weekend but should be in a good place to discuss more next week
Thursday, 30 May 2024 05:26:24
Does this work?
Thursday, 30 May 2024 05:26:34
I will be waiting for numbers from you on Monday.
Thursday, 30 May 2024 07:54:29
https://privnote.com/[redacted] use the id on the link to access a new chat to discuss the price and payment
Thursday, 30 May 2024 11:04:54
I will be waiting for you there on Monday or earlier
Thursday, 30 May 2024 11:05:19
tell me when you access the new chat
Thursday, 30 May 2024 11:05:30
This information is provided by Valéry Marchive & Julien Mousqueton
