Negotiation Chat: 20260216

Hi

we need to know the next steps to this

Hello. You've reached an Akira support chat. Currently, we are preparing the list of data we took from your network. For now you have to know that dealing with us is the best possible way to settle this quick and cheap. Keep in touch and be patient with us. We will reach out to you soon. Do you have a permission to conduct a negotiation on behalf of your organization? Once we get a response you will be provided with all the details. ATTENTION! Strictly prohibited: - Deleting files with .arika extension; - Replacing or renaming .arika and .akira files; - Using third party software to recover your systems. If you violate these rules, we cannot guarantee a successful recovery.

Yes I have

Please wait for details.

List.txt.7z // 2.2 MB

These files were taken from your network prior to encryption. You can pick 2-3 random files up to 10 MB each from the list and we will upload them to this chat as a proof of possession. We're looking through your financial papers to come up with a reasonable demand to you. We offer: 1) full decryption assistance; 2) evidence of data removal and guarantees not to publish or sell your data; 3) security report on vulnerabilities we found; 4) guarantees not to attack you in the future. Let me know whether you're interested in a whole deal or in parts. This will affect the final price.

1

can show the price for option 1 only and price for option 1 + 2 toghether?

$200,000 for these 2 options.

And for option 1 only ?

$150,000.

Are these values negotiable?

For option 1, we can pay $75,000. Is that possible?

We're only going to discuss 6 figures. $135,000 and we can shake hands.

Here is our BTC wallet ID for payment: [redacted]

We propose the value of $119,000 (+/- one bitcoin). Deal?

Can we start the payment initiation process with our indicated amount?

$119,000

Assuming the value of $119,000, what guarantees do we have that you can decrypt our files?

Guys, $130,000 is the lowest. The wallet is above.

ok. $130,000

What guarantees do we have for data decryption?

You will restore your systems in less than 24 hours. If you have any troubles or questions, we will be here to assist.

Would you be willing to decrypt some of the files you left here?

To prove that we can properly decrypt your data you can upload 2-3 encrypted files up to 10 MB each to our chat and we will upload decrypted copies back.

akira_files.zip // 820 KB

Decrypted.7z // 147 KB

Here are the files. Do you want to see files from the list for proof?

Yes.

Provide names of files you want us to show you. Do it today.

files_show.txt // 360 Bytes

We sent some documents.

During the attack, the NAS firmware was damaged. Will this be replaced as well?

Files.rar // 469 KB

Here are the files. Are you ready to proceed with payment?

Two NAS were encrypted and another was deleted (only backups were inside).

In addition to servers, will NAS be decrypted as well?

Yes, the NAS will be decrypted. Ready to pay?

Give us a few more days.

What's your progress?

Waiting for trading approval to purchase BTC at the agreed amount.

After payment, how will everything happen next?

We will give you our decryption tool and instructions how to use it.

Today's date $130,000 is 1.12 BTC. This is the amount we will transfer.

How soon are you going to make payment?

Today we will give a transfer order.

Keep us posted.

The amount we are transferring is under validation because it is a considerable amount.

The chain we will use will be BTC.

Are you going to pay today?

We are still pending validation from Binance.

Too long guys.

We are working hard to make the payment.

We want to fulfill our agreement.

Speed things up.

When transferring 1.12 BTC to your wallet, you'll be asked for destination information, including your name and country. What do we write?

You can write whatever you want. Waiting for payment.

We're now sending a small amount for testing. Can you confirm?

We await your confirmation to transfer the remaining amount.

0.0005 BTC received. You can proceed with the rest amount.

We're having trouble making the transfer because it's a large amount.

We're working hard on alternatives.

Keep us posted.

Any suggestions?

You can find a broker to help you make the transaction. But you have to be quick as we are not going to wait long.

We'll send you the bitcoins. Send us the encryption key right away.

unlocker.7z // 2.1 MB

unlocker.exe -p="path_to_unlock" unlocker.exe -s="C:\paths.txt" where "paths.txt" is a list of paths for the decryptor, each path on a new line ESXi commands 1) chmod +x unlocker 2) ./unlocker -p="/vmfs/volumes"

I need to change the ex_ to exe ?

Correct.

And that QNAP nas with backups and one shared folder ?

What do you mean?

We have one qnap that is asking for initialization, we need the data that was on that QNAP

Do we have any solution for this ?

Please wait.

That QNAP has been reset. Unfortunately, we can't help you with it.

Negotiation Chat — Akira