Ransomware negotiation(s) with  avaddon



Avatar

My files are encrypted, I just found this note. What do I do next?

02:52 18.05.2021

Hello! You have been infected by the Avaddon ransomware. Price for you is $400,000. To receive a general decryptor, you need to pay the amount indicated to you in the BTC on the landing page. After paying the ransom, you will receive a general decryptor that will decrypt absolutely all PCs and servers on your network. We will also provide you with a list of vulnerabilities in your network so that a similar situation does not happen to you in the future. We also guarantee the anonymity of the and attack no one will recognize this incident. We are ready to talk to you and discuss on this matter.

02:59 18.05.2021
Avatar
Avatar

What did you take? May I have a list of files to show my boss?

17:23 18.05.2021

wait few min

17:46 18.05.2021
Avatar

We will prepare a small archive for you today and send it to you.

17:47 18.05.2021
Avatar

Hello guys

05:25 19.05.2021
Avatar

Sorry for taking so long.

05:25 19.05.2021
Avatar

https://www.sendspace.com/file/[redacted]

05:26 19.05.2021
Avatar

Password: [redacted]

05:26 19.05.2021
Avatar
Avatar

Thank you, we are downloading now and will reach out soon

23:06 19.05.2021

ok

23:18 19.05.2021
Avatar

Specify when you will?

23:19 19.05.2021
Avatar

Any news?

17:55 22.05.2021
Avatar
Avatar

I understand how serious this is, but my boss does not. Will you send a list of the files you took so I can show them how serious this is?

17:57 25.05.2021

We can send you some random files so that you can be sure that we have the files. We will not send the tree. But just know that we have a lot of files and the leak is big, if you do not understand the severity of the situation, go and read our blog.

18:28 25.05.2021
Avatar
Avatar

Yes, please send the files.

15:07 27.05.2021

Didn't you download the old archive? There is data.

15:10 27.05.2021
Avatar

This information is provided by Valéry Marchive