[redacted]: Please contact me as soon as possible. [redacted]@gmail.com

[redacted]:  readme.txt [ 866B ]

[redacted]: My name is [redacted] and I got a message to contact you in regards to an encryption on my computer.

[redacted]: are you the person I need to contact to help me? I sent my email and name to you as you asked.

[redacted]: What do I need to do?

[redacted]: I am authorized to speak on behalf of the company. Are you the person who sets this price for regaining access to everything?

[redacted]: hello, are you still there?

[redacted]: Is there anyone there? Please at least email me at [redacted]@gmail.com so I can continue to work through this with you.

[redacted]: Yes. I would like to fix the problem but I don't have this amount of money. Please tell me how we can resolve.

[redacted]: We would like to fix this problem but we have been out of service during Covid and do not have this amount of money. I am trying to fix and please let me know what we can do.

[redacted]: I have the ability to send 20,000 as soon as I can transfer money. I would like to get this fixed and please let me know if we can get this fixed.

[redacted]: How can we test to see if this can be fixed?

[redacted]:  [redacted].docx.[redacted] [ 15kB ]

[redacted]:  [redacted].docx.[redacted] [ 13kB ]

[redacted]: Here are two samples. Can you open them?

[redacted]: We we are not comfortable paying until you are able to decrypt these samples. Did you take data from us as well? We have a small window of time where buying your keys is useful as we are working on a rebuild. We have a meeting early tomorrow morning, so I will ask you send us: 1) your nest offer, 2 proof that you can decrypt, 3 proof of whatever you claim you stole. $800,000 is still an insane price for us, so if you want us to even consider this, please be realistic. Please send us #1, #2 and #3 as soon as you can. Thank you.

[redacted]: Are you there? Can you decrypt my files? What files did you take? I'm willing to pay you very quickly to unlock my files, but $800k is impossible. If you can prove these things and offer a realistic price, I'll pay you right away. Thank you.

[redacted]: Thank you. I'm waiting for information about what files you took. Regarding our revenue, if this happened last year at this time, paying this much wouldn't have been a problem. But with the pandemic and financial crisis, people just aren't buying cars. We have a large inventory that isn't selling and by holding onto this inventory like we are, we're actually losing more money than making money. It will take us months to crawl out of this problem to start making a profit. Revenue is not profit, as you know.

[redacted]: The boss is meeting his financial advisor to find out how much we can afford to pay. I'll let you know. In the meantime, since you say you took files from us, are you able to show us?

[redacted]: Thanks. If the price is something we can afford and we can pay, what do we get?

[redacted]: Thanks. Is this all you took?

[redacted]: What computers did you take files from? 1 tb is a lot of files. Why only 7 files as proof?

[redacted]: Can you let me know what computers files came from? Or provide a list of files?

[redacted]: Are these the computers you took files from?

[redacted]: Okay. Of all these 1 TB of files you took, you can only show me 7 files?

[redacted]: We're working on how much we can afford to pay you, but my boss is asking for some more information. Are you able to send some more files? 7 files is a tiny amount when you say you took 1 TB.

[redacted]: We reviewed the financials and we can pay you $72,380, but only if you promise to make all our files open and usable again and give back all the files you took.

[redacted]: I can see why you would think that. In reality, regardless if the files you took end up on your news site or not, I still have the same legal requirements and exposure. This was the case the second the files were taken, not if the files get posted or not. I have already begun the notifications to everyone whose data was affected, so it doesn't matter if the files are posted or not. Now, would I prefer the files not be posted, of course I would. Only because I care about my employees and my customers.

[redacted]: You need to understand that the reason I'm here is to get my files unlocked. I'm already taking a huge financial hit taking care of the legal notifications and the fees associated with that. I just want my files back and unlocked.

[redacted]: I spent all weekend with my finance guy reviewing the accounts and savings and were able to pull together $72,380. Business has not been good during the past year and what you're asking for is impossible. With COVID and the financial crisis, many people are out of work and aren't making large purchases. The people who are lucky enough to still have jobs are working from home and aren't buying new cars. I know you are the only person who can unlock the files, so this is why I'm willing to pay you the $72,380 that I have left. You can understand my situation, right?

[redacted]: I understand what you're saying and know you are a famous group. I have Googled you and know you are professionals. I know you do this all the time, but please put yourself in my shoes for a moment. There is nothing textbook about this. Nobody saw this pandemic and financial crisis coming. I had no idea that 2020 was going to be as bad as it was. I still have inventory on my lot from 13 months ago. That's unheard of in my business! I'm hoping 2021 turns around and is better, but until then, I'm just trying to survive. Car dealerships are very low margin, meaning that if I'm able to sell a few cars, the revenue doesn't necessarily cover my bills or employee salaries. I need to sell a certain level of inventory to make a profit and most months I didn't. I've had to furlough employees just to try to keep the dealership open. I'm willing to do whatever it takes and to work with you for as long as it takes, but I only have $72,380 that I can pay you to unlock my files.

[redacted]: I want to get you your money to get my files back. I know you put time and effort into this and want to get paid. We both want the same thing here. You see this, right? The only obstacle that I have that I need your help with is the high price. I just don't have that much. I worked to get $72,380 from my accounts to pay you.

[redacted]: I don't understand why the price is so high. You obviously know what my financial situation is and know that I can't possibly afford to pay you this much. For a bank to give me a loan, they'll examine my current situation, look at my debt to income ratio and see if I'm actually profitable. I already know what they're going to tell me. I'm too risky. Can't we skip all of this time wasting and let me pay you?

[redacted]: How is asking for over $400k more than what I can afford to pay you help our situation?

[redacted]: I'm meeting with a loan officer at the bank today.

[redacted]: Good news. We were approved for a loan for the amount of $45,500. This makes the total amount that I can pay you $117,880. I requested $400k, but due to my debt-to-income ratio and current liabilities, $45,500 is the most they could approve for me. I have contact other lending firms and they all tell me that's the most I can be approved for, based on my credit and current financials.

[redacted]: We've been at this over a week now. We both want the same thing, a payment to get data back. I've done all I can at this point. Please, can we agree so I can pay you? This is why you did this, right?

[redacted]: This is a long holiday weekend and if I can't pay soon, I won't be able to until mid-next week.

[redacted]: I don't understand. I've pulled all the cash from out of the business and I put my neck out on the line for a loan to come up with $117,880. I don't have any other options. $400k is impossible for me. I can pay you $117,880 right away. It will take weeks or months before I can pay anything close to $400k.

[redacted]: Are you there? Please let me know if I can pay you $117,880. I understand that you want to make good money for your work, but this is as much as I can possible pay. I can't get another loan.

[redacted]: I had to meet with a loan advisor to get more funds to pay you. I want to fix this problem and work with you but I can't afford anymore then $117,880. This is all I have. We have been out of service during Covid and I can't come up with anymore money.

[redacted]: I need to meet with the bank to see what my options are and how much more I can borrow. Monday is a federal holiday and the bank is closed. I'll meet with them first thing in the morning on Tuesday and I'll let you know.

[redacted]: How do I pay you? Would the bank pay you?

[redacted]: Okay I'll start looking into bitcoin as well. I'll have an update tomorrow

[redacted]: I found a good bitcoin site. I have a call with the bank in a little bit and I'll let you know how it goes.

[redacted]: It took some convincing, but I was able to get a $27,000 addendum to my previous loan. With the total loan amount of $72,500 and everything from my accounts, I can pay you $144,880. I have a bitcoin wallet account all set up and ready to use.

[redacted]: There have been no sales since this attack. You have locked up all the computers, leaving me not able to operate at all. This is why I've been working on getting a loan and begging and borrowing money from anyone I can.

[redacted]: Thank you. I really want to pay you to get my computers unlocked.

[redacted]: I understand. We both want the same thing. We both want a payment so I can get my files back. I'm short $55k and have no other options.

[redacted]: Okay, thank you. I'll need more time to find the funds. In addition to getting my files unlocked, what else does a payment get me?

[redacted]: What about the files you took? You will give that back as well? How does that work? Will you be able to provide proof that you deleted all the files?

[redacted]: I'm trying today to collect more money for you.

[redacted]: I'm sorry to say this, but I still only have $144,880. I'm short a little more than $55k. The bank refuses to lend me more. I tried a couple special financing companies, but after running my credit, refuse to lend me any funds. I've asked friends and family and all are hurting more than me and can't help. I just don't know what to do now.

[redacted]: I don't feel comfortable splitting up the payments. I rather pay you once and be done forever.

[redacted]: I know you must do this all day, but I just don't see how $144,880 isn't enough to unlock my files.

[redacted]: I'll need more time to collect more money. I don't have a lot of options left. The business is closed down because of this attack. I'll see what I can do. If I can't pay, can I come back here in a couple of month when I have the money? Will you still be here?

[redacted]: Because I'm scarred to death about paying all I have today and this still going on. No offense to you at all when I say this, but this has been the worst experience of my life. All I want is for this to be over. The stress and anxiety has been unbearable.

[redacted]: I'm working on collecting more money for you today.

[redacted]: Okay, I got $162,792. This is from an extra $17,912. $9,500 was from a personal loan, $3,655 is from personal savings and $4,757 is from a collection the workers did. This puts me at $162,792 that I can pay you. I literally have nothing else to give. I owe a huge debt of gratitude to my workers for their help and need to pay them back ASAP. I have a bitcoin wallet account ready, all I need to do is transfer the funds from the bank. Please let me know.

[redacted]: Thank you. I'm working on getting the money transferred from my bank to the bitcoin account.

[redacted]: After I pay, you will give me a tool to unlock all my files, right? You will also give back all the files you took, prove you deleted them and give me information about how you got in so I can make sure this doesn't happen again?

[redacted]: Hi. I had trouble with my bank. They didn't allow me to transfer the funds to a my bitcoin wallet because they suspected fraud. I got it cleared up and the wire has started, but it hasn't arrived yet. Because it didn't arrive today, it won't arrive until Monday morning. Is this okay??? Before I transfer the money to you, I will reconfirm your wallet.

[redacted]: All ready to send you $162,792. Is your BTC wallet still [redacted]? If it changed, please let me know.

[redacted]: Okay, sending $162,792 to [redacted]

[redacted]: Just confirming, [redacted]. You said it's new, but it's the same one you provided last week. It's still the correct wallet?

[redacted]: Yes

[redacted]: https://www.blockchain.com/btc/tx/[redacted]

[redacted]: Do you see the payment?

[redacted]: Thanks

[redacted]: 1.rar, [redacted].rar and [redacted]2.rar are empty. Can you send via sendspace?

[redacted]: 1.rar has the decryption tool in it. It's not opening. Please resend via sendspace. Thank you!

[redacted]: What is the password for 1.rar? (the decryption tool)

[redacted]: Thank you! [redacted].rar and [redacted]2.rar are empty. Can you send via sendspace?

[redacted]: Hello? Two of the .rar files you sent via qaz.com were ZERO bytes. Please resend [redacted].rar and [redacted]2.rar via sendspace. Thank you