Ransomware negotiation(s) with  dragonforce



Avatar

Hey you guys got us. How did you get in?

2024-07-06T21:03:37.765307Z
Avatar

anyone there?

2024-07-06T21:07:00.548496Z

yes

2024-07-06T21:07:35.631915Z
Avatar

We are ready to help you solve your problem.

2024-07-06T21:09:21.759828Z
Avatar
Avatar

how do we get that data back? But just a heads up we are currently downsizing .

2024-07-06T21:11:35.843567Z

We understand your situation. Do you know that you also lost more than 100 GB of data?

2024-07-06T21:13:33.844142Z
Avatar
Avatar

That could be possible

2024-07-06T21:14:24.054921Z

Would you like us to provide you with a list of these files?

2024-07-06T21:16:46.224555Z
Avatar
Avatar

Sure

2024-07-06T21:17:30.088187Z
Avatar

do you have that list of files?

2024-07-06T21:20:00.246571Z

We'll upload it to you now. For privacy reasons, we have not made an announcement on our blog yet.

2024-07-06T21:20:29.710396Z
Avatar

tree.zip filesize:255819

2024-07-06T21:28:08.466204Z
Avatar

You can select 3 files that are not too large so that we can provide confirmation.

2024-07-06T21:28:27.947508Z
Avatar
Avatar

│ │ │ │ ├── 7 - Tender Submission │ │ │ │ │ ├── [redacted] - Terms & Conditions.pdf

2024-07-06T21:30:59.993235Z
Avatar

│ │ │ │ ├── 6 - Drawings - DXF │ │ │ │ │ ├── OD10 ID4.53 P4.5 T0.375 1598656583.dxf

2024-07-06T21:32:02.151836Z
Avatar

Tunneling Co - Shroud Assembly_210514.3 │ │ │ │ └── 1 - Screw Conveyor Quote Documents- GP MFG │ │ │ │ ├── 2 - Tender Documents │ │ │ │ │ ├── Shroud Assembly.PDF

2024-07-06T21:32:35.161263Z

[redacted].pdf filesize:53419

2024-07-06T21:38:08.736506Z
Avatar

OD10 ID4.53 P4.5 T0.375 1598656583.dxf filesize:500

2024-07-06T21:38:24.146502Z
Avatar

Shroud Assembly.PDF filesize:849082

2024-07-06T21:38:32.796038Z
Avatar
Avatar

how did you guys get in our network?

2024-07-06T21:44:13.524015Z

The price is 400 000$. Payment in BTC.

2024-07-06T21:45:34.747322Z
Avatar
Avatar

We cant go that high but Ill talk to my boss

2024-07-06T21:47:38.764541Z

We will be waiting for your word.

2024-07-06T21:48:44.693936Z
Avatar
Avatar

Hello

2024-07-08T01:41:31.583431Z
Avatar

We were talking on the tox

2024-07-08T01:41:45.202358Z
Avatar

Are you here????

2024-07-08T01:41:56.11953Z
Avatar

Hello are you here?

2024-07-08T02:52:41.840361Z
Avatar

Hello, I want to pay but don’t have what your asking

2024-07-08T05:04:09.437624Z

Hello. You have not yet made a counteroffer to us. How much are you willing to pay?

2024-07-08T08:22:14.152603Z
Avatar
Avatar

15k

2024-07-08T09:28:13.427297Z

I mean, what kind of serious offer are you ready to make? 15k this is not a serious conversation.

2024-07-08T09:32:28.63417Z
Avatar
Avatar

Again I don’t have 200k you saw what we have, you have seen it all, you know I’m not lying, there is no way that I can come up with such amount

2024-07-08T12:27:43.463808Z
Avatar

We barely survive. We haven’t paid paychecks for two weeks you hacked the network you saw it all you saw all of our financials.

2024-07-08T12:28:29.343339Z
Avatar

There is no way I can bring 200k not even remotely close to it

2024-07-08T12:29:01.432871Z

The amount that you were told is 400k and not 200k

2024-07-08T12:50:50.404381Z
Avatar
Avatar

Ha?! 400k??? Sir there is no way on this planet that I can come up with such amount of cash, I cannot get near this number no matter how long this chat will be

2024-07-08T13:05:00.214346Z
Avatar

If you’re locked on 400k then I’m out of options here, I’ll use old back and try to survive with them

2024-07-08T13:05:58.931851Z

We have reviewed your network and studied your company. Based on this information, we have calculated the amount. If you would like to propose another amount, it should be reasonable, not $15k.

2024-07-08T13:07:04.190089Z
Avatar
Avatar

You’re kidding me right? If you seen it all and really studying our financials, you would never come up with such amount something that we don’t have access to no matter what we will do, All of our credit cards are maxed out and we are negative in all bank accounts you hacked our network you saw it all

2024-07-08T13:29:47.451747Z
Avatar

We haven’t paid paychecks for 2 weeks due to Cash flow issues

2024-07-08T13:31:08.518433Z
Avatar

So 400k I don’t have sir.

2024-07-08T13:31:20.688034Z

Then you can offer another adequate amount and we will consider it. Not 15k.

2024-07-08T13:40:14.4315Z
Avatar
Avatar

Please tell me what’s your bottom line here

2024-07-08T14:29:57.079091Z

Do you want to offer me a job?

2024-07-08T14:32:03.061886Z
Avatar
Avatar

What? Sir, I want to close this today, 15k that’s all I’m able to bring , you saw what we have you have seen it all

2024-07-08T14:48:16.956208Z

Yes, we saw what you have, and based on this we said the price. My management wants us to publish an announcement of this incident and turn on the timer. Tell me the price that I can tell the management. Publishing an announcement creates a lot of problems, especially in such cases. We would like to resolve the issue through negotiations, without a public statement.

2024-07-08T14:55:19.658686Z
Avatar
Avatar

Posting the data will not bring 400k to the table you can post it now if you wish, this is most definitely not my concern , what your asking is something I cannot get close to, I don’t have access to the cash your asking, 15k is what I can offer 16k max

2024-07-08T15:02:21.099381Z

Have you searched Google for information about us?

2024-07-08T15:04:24.816897Z
Avatar
Avatar

No idea who you guys are, and I really don’t care, I would like to close this today and go separate ways

2024-07-08T15:08:37.065381Z
Avatar

I want to pay, but what your asking is not realistic

2024-07-08T15:09:17.519639Z

Google it. There is a lot of information about us there. Publishing even an announcement on a blog attracts a lot of attention to the company. Government agencies and special services. We would like to help you avoid problems. We are even ready to reduce the cost to 350k.

2024-07-08T15:13:25.927087Z
Avatar
Avatar

Please publish the data. As I said it’s not an issue for me. Please do it now, this will not bring 350k to the table cash that I don’t have access to. I understand that this os your business but what your asking is not in my reality, I cannot even go loans all of our cards are 100% maxed out, you saw it all you hacked our network, you know I don’t lie, I don’t have access to the cash your asking

2024-07-08T15:22:49.989338Z
Avatar

Please work with me and I’ll pay, but the amount your asking is out of my reach

2024-07-08T15:26:14.100095Z

The amount you mention is also unrealistic. If you want to resolve the issue, name the real amount.

2024-07-08T15:28:02.821785Z
Avatar
Avatar

Sir, you have seen our situation, you have seen it all, I don’t have access to funds, 15k-16k is the max I can do, all of our accounts are 100% dry, I used all my savings to survive the covid, and since then our business went down drastically, I’m 2 weeks behind on payroll, you saw it all I don’t lie

2024-07-08T16:02:18.299228Z
Avatar

No bank will give us a loan in our situation

2024-07-08T16:02:40.936324Z

You can think about ways to solve this problem. You know what we require.

2024-07-08T16:07:48.975322Z
Avatar
Avatar

Please reduce the amount and I’ll pay, I will never be able to get to your numbers

2024-07-08T16:18:22.723917Z

Tell me how much you can pay. Not 15k. We have already reduced it from 400k to 350k.

2024-07-08T16:24:55.653863Z
Avatar
Avatar

As I said 15-16k again I understand that’s your business but I’m sure you checked and saw our financials you saw it all! There is no way on this planet that I can get to your numbers 15-16k that’s all I can bring I don’t lie and you know it , we are in debt since Covid hit - we never recovered from it

2024-07-08T16:31:48.608618Z

Covid was a long time ago. Now the world has changed and the situation in the world is already different. The amount you name does not correspond to your company. I suggest you Google it again, we have a certain strategy and we stick to it. There are articles confirming this. We will not settle for too small a sum. I think you're pretending you don't understand this.

2024-07-08T16:40:31.457064Z
Avatar
Avatar

100k

2024-07-08T18:41:34.73049Z
Avatar

To close this today and now

2024-07-08T18:41:50.397897Z

The wallet and the amount of BTC have been adjusted to make this payment.

2024-07-08T18:56:18.333693Z
Avatar
Avatar

This key will unlock all files and machines here?

2024-07-08T19:06:02.946139Z

Yes. All.

2024-07-08T19:07:31.094538Z
Avatar

This information is provided by Valéry Marchive