Ransomware negotiation(s) with  darkside



Avatar

Is this support?

17 days ago,

Yes, of course whats ups?

17 days ago,
Avatar

Tomorrow we will publicate your data

17 days ago,
Avatar
Avatar

Tomorrow? We just got more information on this because IT didn't tell us about this site. We want to learn more about your offering.

17 days ago,

Tomorrow, of course , we done attack week ago, you didnt came online, tomorrow we will add local mass media, and attack your infrastructure by IP. thats our plan, on today, because you didnt start dialog with us.

17 days ago,
Avatar
Avatar

We didn't even know what was going on and we were misinformed. We can't pay by tomorrow since we're just learning about this. Can you give us more time so that we can handle this appropriately?

17 days ago,

Your price is settled up, you are small client for us. Make your choice today - you will be listed, or close question with us.

17 days ago,
Avatar

In case of close question nobody will now about this issue.

17 days ago,
Avatar
Avatar

We can't pay $600,000 by tomorrow. We're not sure what we can pay but we will certainly see what is available. Can you show us some data that you have?

17 days ago,
Avatar

Do we have your word that you will not list us tomorrow?

17 days ago,

We have full dumped your network by data, of course we can show

17 days ago,
Avatar

After payment you will get full file tree of stolen data.

17 days ago,
Avatar

After payment you will get: decrypt your system (network) file tree of data, and i will explain your black holes, (network audit) discount we cant make, sorry. You came too late on dialog, thats your problem.

17 days ago,
Avatar

We will not list your tomorrow, in case of agreement.

17 days ago,
Avatar

Sorry thats our buisness, we are only interested in to take money.

17 days ago,
Avatar
Avatar

Okay, that is understood, but can we see anything that you have taken?

17 days ago,

You are very small client, see your infrastructure, after agreement and payment 1) we will decrypt instantly your network 2) if you need - provide file tree , with all taken files 3) delete data from our servers Some random files for proof: https://www.sendspace.com/file/[redacted] https://www.sendspace.com/delete/[redacted]/c5421cf9271e05e7b323e000d9283ec8 pass: [redacted] Don`t waste our time, how we don`t wasting your. Rules for all clients same. Thank for understanding

17 days ago,
Avatar
Avatar

We're not here to waste time. We're sorry for joining late. We'll review and get back to you.

16 days ago,

Files where randomizded.

16 days ago,
Avatar

When will be done payment?? Or We should continue attacks ?

16 days ago,
Avatar
Avatar

We are still reviewing the information. We only found out about the $600,000 price. Our intention is not to push this to the side, but we need some time to figure out what we can afford. This is the first time we are dealing with this type of issue.

16 days ago,

Whats your offer?

16 days ago,
Avatar

I know your resources very well, after your offer i will explain you what is what

16 days ago,
Avatar
Avatar

We have a meeting set for tomorrow morning to discuss finances. Can we get back to you in the morning?

16 days ago,

yes price you can see, i dont know about you want to talk, search money. and we will do things, in other cay we are not interested in dialog.

16 days ago,
Avatar

money money, can help you

16 days ago,
Avatar

Dont waste your time, as our. Its not our politic how we working, if you have money, we can talk ,if you dont have, than we can go by sides. we doesnt work like this

16 days ago,
Avatar

Price you can see in your administration panel.

16 days ago,
Avatar
Avatar

Yes, but we will get back to you in the morning after the meeting. Is this okay?

16 days ago,

Yes, OK.

16 days ago,
Avatar
Avatar

As promised, we spoke today and can make an initial offer. It's been a tough year for us and we're a tiny company. We hope you can see that. Based on a few loans we received, we can pay you $110,000. If this price is not suitable, then we'll need to look at outside sources for cash. We're a small shop and don't have access to easy funding.

15 days ago,

Then if your business doesnt gaving you profit, you should think about - close business like this.

15 days ago,
Avatar

We can do our best, give you some discount, but not big like you want

15 days ago,
Avatar
Avatar

We just need a price we can afford. What type of discount can you give us?

15 days ago,

10%.

15 days ago,
Avatar
Avatar

So $540,000?

15 days ago,
Avatar

If that's the case, then we really have a lot of work to do here. We can't take on so much debt considering our size.

15 days ago,
Avatar

Are there any other files you can provide us so that we have more bargaining power with lenders?

15 days ago,

We have already given files and a good discount.

15 days ago,
Avatar
Avatar

You're asking 5x more than what we can afford to pay. We're putting ourselves on the line and potentially in more debt as we speak with lenders. We can't take all this on if we don't know what we're paying for. All we need is some help from you.

15 days ago,

Last evidence pack, other requests will be regarded as a waste of our time. The package contains a variety of documents from different directories ------- 457 Megabytes Download : https://bashupload.com/JrSuB/[redacted].rar Password : FKL59MBY}c?Uox~d$4QCNnVAE0@yOvmC

15 days ago,
Avatar
Avatar

We're looking. Thanks

14 days ago,
Avatar

We see the data but we can't just print money and pay. We really need a few days to see what other funding options we have. Can we get back to you early next week with our options?

13 days ago,

OK.

13 days ago,
Avatar
Avatar

Thanks

13 days ago,
Avatar

We will have more news for you later today

9 days ago,
Avatar

Your price is still not possible for us but we do have a better offer for you. We have an initial agreement with a funding source and can pay you $200,000. You are asking a lot from a company of our size and we are giving you all we can. Please let us know

9 days ago,

Thanks for your offer, last what we can offer - is change price right now to 250 000 USD , and you will pay money in 24 hours, other offers we don`t have, because time cost money. We are doing very big discount for you. After payment you will get - full decrypt of your systems, and we will delete all your data from our servers.

9 days ago,
Avatar
Avatar

Yes, this is a very big discount indeed. It's still more money than what we have but we'll get back to you ASAP tomorrow once we review. Thank you.

9 days ago,

We pleasure your opinion - tomorrow we waiting payment from your side. Discount is very big - we never do discounts like this - we work on mathematical algorithms. As well this discount where decided by team - its not agreement by one person. We done our best. We changing price right now, tomorrow we waiting for payment. Have a nice day

9 days ago,
Avatar

Refresh page, price changed - tomorrow we waiting for money. Good luck

9 days ago,
Avatar
Avatar

We held an emergency meeting. The lender was not happy but they are discussing this and they understand the urgency. We told them that we need to hear from them today but they have to get their own approval first. Can we reach out to you tomorrow with their decision? We really don't want to let this slip away.

8 days ago,

We told, our rules, please guys be serious, situation by your side, not by our. We already get agreement in our team about price witch we done, it`s very good discount we know that in your hands have possibility to pay amount of money witch we getting agreement. Price where settled up, you can start pay by parts, it`s not problem.

8 days ago,
Avatar
Avatar

We completely understand. We just can't commit to a price until we speak to the lender, because they're in control of the money. They'll have news for us tomorrow.

8 days ago,
Avatar

Alright. The lender agreed! They're going to wire us the money tomorrow and our bitcoin broker will be able to pay you early next week. Can you confirm what we'll receive from you?

7 days ago,

Your payment currency is XMR (monero) not bitcoins.

7 days ago,
Avatar
Avatar

Can you confirm what we will receive from you?

7 days ago,

Yes. - Windows decryptor. - Deleting data and blog post. - Support for 2 days after decryption.

7 days ago,
Avatar
Avatar

Okay we will be able to pay monero next week

7 days ago,

What date?

7 days ago,
Avatar
Avatar

Aiming for the 27th

6 days ago,

Ok

6 days ago,
Avatar

If you don't contact us within the next 24 hours we will publish your data

1 day ago,
Avatar

This information is provided by Valéry Marchive & Julien Mousqueton