Contact us Buy Me a Coffee

Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Negotiation Chat — nova

Return to Nova
Negotiation chats provided by Valéry Marchive and Julien Mousqueton.

Chat ID: QVBDIEhvbWUgSGVhbHRoIFNlcnZpY2VAbm92YQ

Initial Ransom
$ 15,000,000
Negotiated Ransom
$ 2,000,000
Ransom Paid
Yes
Victim
hello, we found your Readme, what is the next? please send data Tree
Hello, Welcome, First of All the Price to unlock the files and Stop Leak is 15M USD (BTC), Please Upload 2 files for decryptor test, we unlist the company from blog for now.
Gang
Uploaded tree_[Redacted].txt
Gang
Victim
Uploaded : Encrypted.zip
Uploaded : Decrypt.zip
Gang
Harry up because we need to handle the case quickly without noice
Gang
Victim
hello iam back, the price is very high, we can't handle it, we can offer 500k for now
First, you should know that this price was determined by our team through an analysis of your company's revenues. We can offer a discount of 500k, bringing the price down to $14.5 million.
Gang
You should know that you will face penalties if we leak more and much more data.
Gang
Hello?
Gang
We will return your company to Blog sir
Gang
Victim
We will discuss this with management and return
Victim
hello, the management offer 1M as final price
14.5M final price we can't lower
Gang
Victim
we can't handle that amount, its too much
3M but we close the case today.
Gang
Victim
the management offer 1.3M as final price
Alright 2M, we will not low it more, this is final decision.
Gang
Victim
ok I will return shortly
Victim
hello?
Hello we are here, you taking long to answer)
Gang
Victim
the management accepted that amount, first and foremost we want to ensure : 1 - decryptor program to decrypt all the encrypted files 2 - security report to how you hack and gain access to our systems 3 - delete the full data
Yes no problem, should we send BTC address now?
Gang
Hello?
Gang
Victim
yes please leave your btc wallet address, we need at least 4 days to collect to transfer that amount
Take your time, btc : (Hidden)
Gang
Victim
https://blockchair.com/bitcoin/address/(hidden)
we receive 50USD, Please send to the wallet, transection confirmed.
Gang
Victim
done we sent the full amount
Uploaded : 3c14548e_[Redacted]-recover-pack.zip
Gang
Thank you for working with Nova, this chat will be opened for 3 days and then will be closed for support assist, glad to work, Nova Team.
Gang