Negotiation Chat: 20260106

HELLO

We just found your file in our system.

Hello. You've reached an Akira support chat. Currently, we are preparing the list of data we took from your network. For now you have to know that dealing with us is the best possible way to settle this quick and cheap. Keep in touch and be patient with us. We will reach out to you soon. Do you have a permission to conduct a negotiation on behalf of your organization? Once we get a response you will be provided with all the details. ATTENTION! Strictly prohibited: - Deleting files with .arika extension; - Replacing or renaming .arika and .akira files; - Using third party software to recover your systems. Negotiations with Akira can only be conducted in THIS chat room. You should ignore any attempts (such as emails/social media messages, phone calls, etc.) to redirect you to another chat or email address (proton.me is often used by unauthorized individuals) on our behalf. Be careful while working with recovery agencies as they often try to use your cyber incident to stuff their pockets. There are many risks for you to lose money and get nothing in return. If you violate any of these rules, we cannot guarantee a successful recovery.

What are the next steps?

[redacted]_listing.txt.7z // 32.7 KB

These files were taken from your network prior to encryption. You can pick 2-3 random files up to 10 MB each from the list and we will upload them to this chat as a proof of possession. To prove that we can properly decrypt your data you can upload 2-3 encrypted files up to 10 MB each to our chat and we will upload decrypted copies back. We're looking through your financial papers to come up with a reasonable demand to you. We offer: 1) full decryption assistance; 2) evidence of data removal and guarantees not to publish or sell your data; 3) security report on vulnerabilities we found; 4) guarantees not to attack you in the future. Let me know whether you're interested in a whole deal or in parts. This will affect the final price.

HELLO. What is the price for the full package?

Regarding the file possesion: We believe that you have them.

[redacted].xlsx.akira // 373 KB

[redacted].docx.akira // 288 KB

[redacted].pdf.akira // 2.59 MB

Regarding the file decryption: We selected 3 different file types, so we see that the decryption is fully working.

We will let you know the price soon. Do you have any file requests?

2 - [redacted].xlsx

3 - [redacted]

Decrypted.7z // 3 MB

We see that the information is correct. When we will have an offer?

In a few minutes.

Files.rar // 523 KB

You can review. We're willing to set a $1,100,000 price for ALL the services we offer. We accept payments in BTC. To gain bitcoins you need to go to any exchange platform as binance or coinbase. Here are the guides: https://www.coinbase.com/how-to-buy/bitcoin https://www.binance.com/en/how-to-buy/bitcoin You also can buy bitcoin from any local brokers. If you withdraw funds from your bank account, then you have to inform the bank that you need this money for investment purposes only.

we see the files. you have 2075 from 320.000. the rest are encrypted by you. right?

We have a small misunderstanding here. We were encrypted by your group, but we were contacted initially by other group. They are also requiring ransom. However they claim to have all 320.000 files. They proved it with sharing with us the selected files. If we pay them, you will post us online, if we pay you, they will post us. We have no actual choice to not get posted. Thats clear.

At this point, its just who will be the first to give us our files back at the lowest price. I have a 5 figure offer from them. Make your bet. Cheapest one will be the one we are choosing.

Since your data will be posted at any case let's remove 2-4 options from the deal. 5 figures won't work with us. We can give you the tool for $650,000 if you pay quickly. Interested?

We cannot aford that. we can offer 10k for the decryptor.

its not much, but its at least something out of this deal.

Like I said, we're not going to discuss 5 figures.

Are you going to increase your offer significantly?

Hello. Whats the last price for the decryptor?

$650,000.

Decisions?

we cannot aford that. the company is operational, and the missing data is not worth the amount.

You don't need our services, correct?

we do. we cannot aford them.

You can. Your sales are above $50M previous years. Don't complicate please. Are you going to pay?

as mentioned before, the information which is still encrypted does not cost 650.000$. The company is operational. For the comfort of receiving the data fast we offered you 10.000$. We can increase that to 20.000$. We will not allocate more on this info.

Got you.

You can find your company name in our news column: https://akiral2iz6a7qgd3ayp3l6yub7xx2uep76idk3u2kollpj5z3z636bad.onion If you want this post to be removed, we have to agree on something.

Hello. I saw on ransomware.live in some of your conversation you've agreed on 5 figure bugets. Could you apply the same discounts for us?

It is pretty clear that we will not provide such discounts to you. Each case is unique. Such strategies always lead to bigger losses for our clients. We think you feel it. Let us know asap if you want to work seriously as we are working on publishing your data.

Hello. Any possibility to negotiate the decryptor?

$600,000.

thank you.

Decisions?

Alright, let us know know how did you gain access to our systems? As other ransomware Group also gained access, we need to get info on that.

You will only be able to get that info after payment.

Guys we are almost ready to leak your data. Are you sure you want this to happen?

Negotiation Chat — Akira