Sponsored by Hudson Rock – Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

Negotiation Analytics

Back to negotiation chats

What the ransom-chat transcripts already say about each group's real bottom line.

Negotiations parsed
287
across 31 groups
Groups with reliable samples
12
≥ 4 logged negotiations
Overall paid rate
27.2%
78 of 287 confirmed paid
Avg. negotiated discount
50.3%
off the initial demand
Total ransom paid
$17.9M
confirmed paid, all groups
Total ransom demanded
$574.8M
initial asks, before negotiation
Groups with fewer than 4 logged negotiations are counted in the totals above but left out of the ranking and table below — too small a sample to be meaningful.

Average discount off the initial demand, by group

Paid rate & avg. discount over time, industry-wide

Based on the 197 of 287 negotiations (68.6%) whose filename carries a parseable date; years with fewer than 4 logged negotiations are omitted. Shown industry-wide, not per group — per-group yearly samples are too thin to be meaningful.

Negotiation volume & outcomes

Group Negotiations Paid rate Avg. discount
Akira 75 36.0% paid 52.6%
Lockbit3.0 45 6.7% paid 44.7%
Dragonforce 32 3.1% paid 46.9%
Conti 32 34.4% paid 59.9%
Revil 20 45.0% paid 68.0%
Nightspire 11 90.9% paid 35.7%
Trinity 9 33.3% paid 35.2%
Hive 8 0.0% paid 34.2%
Avaddon 7 14.3% paid 56.5%
Fog 6 50.0% paid 53.1%
Blackbasta 5 80.0% paid 39.0%
Darkside 5 60.0% paid 61.7%

Data provided by Valéry Marchive & Julien Mousqueton