Ransomware negotiation(s) with
avaddon
My files are encrypted, I just found this note. What do I do next?
02:52 18.05.2021
Hello! You have been infected by the Avaddon
ransomware. Price for you is $400,000. To receive a general decryptor,
you need to pay the amount indicated to you in the BTC on the landing
page. After paying the ransom, you will receive a general decryptor that
will decrypt absolutely all PCs and servers on your network. We will
also provide you with a list of vulnerabilities in your network so that a
similar situation does not happen to you in the future. We also
guarantee the anonymity of the and attack no one will recognize this
incident. We are ready to talk to you and discuss on this matter.
02:59 18.05.2021
What did you take? May I have a list of files to show my boss?
17:23 18.05.2021
wait few min
17:46 18.05.2021
We will prepare a small archive for you today and send it to you.
17:47 18.05.2021
Hello guys
05:25 19.05.2021
Sorry for taking so long.
05:25 19.05.2021
https://www.sendspace.com/file/[redacted]
05:26 19.05.2021
Password: [redacted]
05:26 19.05.2021
Thank you, we are downloading now and will reach out soon
23:06 19.05.2021
Specify when you will?
23:19 19.05.2021
Any news?
17:55 22.05.2021
I understand how serious this is, but my
boss does not. Will you send a list of the files you took so I can show
them how serious this is?
17:57 25.05.2021
We can send you some random files so that
you can be sure that we have the files. We will not send the tree. But
just know that we have a lot of files and the leak is big, if you do not
understand the severity of the situation, go and read our blog.
18:28 25.05.2021
Yes, please send the files.
15:07 27.05.2021
Didn't you download the old archive? There is data.
15:10 27.05.2021
This information is provided by Valéry Marchive & Julien Mousqueton
