Ransomware negotiation(s) with  conti



Avatar

hi, I need to decrypt my files

08/11/2021, 20:11:24
Avatar

the ID I found on my pc is ---BEGIN ID--- [redacted] ---END ID---

08/11/2021, 20:11:49
Avatar

can you help me ?

08/11/2021, 20:15:19

Hello! Can we help you, name your company and the person who communicates with us, are you authorized to negotiate?

08/11/2021, 22:23:58
Avatar
Avatar

hi, my name is [redacted] and I can negotiate with you

08/11/2021, 22:28:35
Avatar

i'm an IT Consultant that the company call for this case

08/11/2021, 22:37:36

name your company?

08/11/2021, 22:38:44
Avatar
Avatar

[redacted]

08/11/2021, 22:39:00
Avatar

sorry, in Italy it is sleeping time ....

08/11/2021, 23:43:38
Avatar

have you any answer for us ?

08/11/2021, 23:43:56
Avatar

hi, any news for us ?

09/11/2021, 07:53:03
Avatar

Hi, are you online?

09/11/2021, 14:12:20

Hello [redacted] Group

09/11/2021, 18:37:33
Avatar

Your network was hacked, infrastructure encrypted and we downloaded many private information from your servers. Important! We have instructions and follow them, they do not change. Important! Read carefully: 1. The BASE PRICE for decrypt and non-recoverable deletion is $1,200,000. 2. We have 14 days to negotiate! the end of the term, the BASE PRICE will be doubled & we will publish you for the purpose of selling access to your network and datas of your company. 3. But there is also a positive point in our conditions, if you pay quickly during the week, then the discount will be from the BASE PRICE of -30%. 4. The DISCOUNT PRICE (14 days from that date) will be: $840,000 5. BTC Wallet: [redacted] 6. To make sure that the decoder works, you can give us some files that do not contain important information, and we decode them to show performance. 7. As for the evidence that we have private information from your network, we can provide some of the tree files taken from you. You will select 5 files and we will provide them to you as evidence.

09/11/2021, 18:39:08
Avatar

[redacted]_SAMPLE_TREE.zip [ 344kB ]

09/11/2021, 18:39:51
Avatar

http://continewsnv5otx5kaoje7krkto2qbu3gtqef22mnr7eaxw3y6ncz3ad.onion/[redacted]

09/11/2021, 18:40:25
Avatar
Avatar

thanks for your message. your request is very high, and it is impossibile for us to have so much money.

09/11/2021, 20:01:35

Evaluate our offer, it is balanced and realistic, we understand your desire to reduce the costs of this incident. But let's be realistic, we have blocked all your infrastructure and threaten to publish data that in the long run + not installed infrastructure will make your losses many times the amount we ask. Let's go ahead, people who tell the management of your company that they can reduce the price - make mistakes, this will not happen. Our price is final. It will only grow. Ahead of the pullout of your data. You need to discuss this well before pulling time and then biting your elbows why the price has risen so much.

09/11/2021, 20:09:03
Avatar

We are waiting and ready for negotiations.

09/11/2021, 20:12:23
Avatar
Avatar

I did not write to you because we want to save, but because it is a sum of money that is not possible. we understand our problem, and thank you for answering us

09/11/2021, 20:13:18
Avatar

with such a large sum of money our company goes bankrupt

09/11/2021, 20:13:51
Avatar

if the company closes the data is no longer needed by anyone. we don't need them anymore, and you don't get paid if we close

09/11/2021, 20:15:35
Avatar

we have availability for a maximum of 3 - 4 BTC, in addition we have to ask the banks for money and this is not possible in 14 days

09/11/2021, 20:17:46

4. The DISCOUNT PRICE (14 days from that date) will be: $840,000

09/11/2021, 20:24:35
Avatar

http://continewsnv5otx5kaoje7krkto2qbu3gtqef22mnr7eaxw3y6ncz3ad.onion/[redacted]

09/11/2021, 20:24:45
Avatar
Avatar

I fully understand your position, but you too must understand that it is not possible for us to recover all this money in 14 days

09/11/2021, 20:34:17
Avatar

please, let's try to find a meeting point

09/11/2021, 20:34:44
Avatar

we are offering 200.000 $

09/11/2021, 20:38:05

What amount are you offering now? Name her $

09/11/2021, 20:38:20
Avatar
Avatar

i hope you can accept, so we can close quickly

09/11/2021, 20:55:11
Avatar

I believe that $ 200,000 is a very important amount of money for both of us

09/11/2021, 20:57:21
Avatar

I believe that $ 200,000 is a very important amount of money for both of us

09/11/2021, 20:57:22

This information is provided by Valéry Marchive