Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

Negotiation Chat — Akira

Return to Akira
Negotiation chats provided by Valéry Marchive and Julien Mousqueton.

Chat ID: 20260315

Initial Ransom
$150,000
Negotiated Ransom
$44,000
Ransom Paid
N/A
Victim
help required
Hello. You've reached an Akira support chat. Currently, we are preparing the list of data we took from your network. For now you have to know that dealing with us is the best possible way to settle this quick and cheap. Keep in touch and be patient with us. We will reach out to you soon. Do you have a permission to conduct a negotiation on behalf of your organization? Once we get a response you will be provided with all the details. ATTENTION! Strictly prohibited: - Deleting files with .arika extension; - Replacing or renaming .arika and .akira files; - Using third party software to recover your systems. Negotiations with Akira can only be conducted in THIS chat room. You should ignore any attempts (such as emails/social media messages, phone calls, etc.) to redirect you to another chat or email address (proton.me is often used by unauthorized individuals) on our behalf. Be careful while working with recovery agencies as they often try to use your cyber incident to stuff their pockets. There are many risks for you to lose money and get nothing in return. If you violate any of these rules, we cannot guarantee a successful recovery.
Gang
Victim
yes! Let us know further steps
Please wait.
Gang
LIST (11).txt // 1.19 MB
Gang
These files were taken from your network prior to encryption. You can pick 2-3 random files up to 10 MB each from the list and we will upload them to this chat as a proof of possession. To prove that we can properly decrypt your data you can upload 2-3 encrypted files up to 10 MB each to our chat and we will upload decrypted copies back. We're looking through your financial papers to come up with a reasonable demand to you. We offer: 1) full decryption assistance; 2) evidence of data removal and guarantees not to publish or sell your data; 3) security report on vulnerabilities we found; 4) guarantees not to attack you in the future. Let me know whether you're interested in a whole deal or in parts. This will affect the final price.
Gang
Victim
What's the full package cost?
We will let you know the price soon. Do you have any file requests?
Gang
We're willing to set a $150,000 price for ALL the services we offer. We accept payments in bitcoins. To gain bitcoins you have to go to any exchange platform as binance or coinbase. Here are the guides: https://www.coinbase.com/how-to-buy/bitcoin https://www.binance.com/en/how-to-buy/bitcoin You also can buy bitcoin from any local brokers. If you withdraw funds from your bank account, then you have to inform the bank that you need this money for investment purposes only.
Gang
Victim
we already know your credibility as its been informed by our IT Team. Let us know your ask!
The price is above. What's your decision?
Gang
Victim
we shall agree to $20K as we are now unable to proceed any of our businesses.
We're not going to discuss 5 figures. Do you have a revised offer?
Gang
Any news?
Gang
Are you going to work with us?
Gang
You have 24 hours to give us your decision regarding this deal. If you continue to drag this out, we will announce the incident on our blog without warning. If you want to avoid this, you must work quickly and inform us DAILY.
Gang
Victim
The max we can allot you is: $40K. Take it or leave it!
Stay professional please. As you can understand, we cannot accept what you are offering. It is obvious. Nevertheless, the leadership is willing to end this profitably for both parties. Double your offer and we will end this quick and painless. Here is our BTC wallet [redacted]. Let us know when ready to make payment.
Gang
Victim
That's our final! Either take it, or leave it!
Again, $40,000 won't be accepted. You can pay $60,000 to keep this incident confidential. Otherwise, we are asking you to confirm that you refuse to protect data of your clients. You have the money, we have the data you need to protect. Waiting for your decision today.
Gang
What's your progress?
Gang
Victim
$42,000!
$55,000 and shake hands.
Gang
What's your progress?
Gang
Victim
$44,000 tops!
We agree. The wallet is above. Let us know when test payment sent.
Gang
Victim
Thank you! We will do it today.
Victim
Let us know how did you gain access to our system. Phishing or any exploit?
We will provide all the information after payment. Keep us posted on your progress.
Gang
What's your progress?
Gang
Hello?
Gang
Victim
sorry, we will only start the fund transfer if you let us know the initial compromise vector.
Not phishing. If we don't receive payment within the next 24 hours, we will delete the chat and publish your data. A huge amount of personal data will be freely available on our blog.
Gang
What's your progress?
Gang
You can find your company name in our news column: https://akiral2iz6a7qgd3ayp3l6yub7xx2uep76idk3u2kollpj5z3z636bad.onion If you want this post to be removed, we have to agree on something.
Gang
Victim
We stand on our ground. Let us know the infection vector. Money will be credited to you afterwards.
Our terms won't change. You're still able to get that info after payment.
Gang
Early next week we will publish your data.
Gang