Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

Negotiation Chat — Dragonforce

Return to Dragonforce
Negotiation chats provided by Valéry Marchive and Julien Mousqueton.

Chat ID: 7a313d13-eb6b-4e58-b774-34f1c657f22d

Initial Ransom
$1,251,000
Negotiated Ransom
$1,167,600
Ransom Paid
N/A
Victim
We found your note. Where is the listing? Is there a link on your page somewhere?
2025-04-08T20:28:51.424478Z
[attachment: tree.txt (4533984 bytes)]
2025-04-08T20:41:38.922911Z
Gang
This is a list of files
2025-04-08T20:42:08.638245Z
Gang
At the moment, information about the incident is completely private. There are no publications yet.
2025-04-08T20:58:17.418497Z
Gang
Victim
Thank you. We are reviewing the list
2025-04-09T18:15:41.602121Z
Victim
ACH Sheet Customers 8.1.24.xlsx, Description.doc, Employee of the Year.JPG, 400143.jpeg, 1321930 HUFF.pdf
2025-04-09T19:02:13.854667Z
[attachment: ACH Sheet Customers 8.1.24.xlsx (27582 bytes)]
2025-04-09T19:11:14.457636Z
Gang
[attachment: Description.doc (21504 bytes)]
2025-04-09T19:11:20.459373Z
Gang
[attachment: Employee of the Year.JPG (71420 bytes)]
2025-04-09T19:11:28.440043Z
Gang
[attachment: 400143.jpeg (2807 bytes)]
2025-04-09T19:11:33.675575Z
Gang
[attachment: 1321930 HUFF.pdf (27068 bytes)]
2025-04-09T19:11:38.950857Z
Gang
Victim
[attachment: DecryptTest.zip (1521432 bytes)]
2025-04-11T20:43:35.209059Z
[attachment: 4712297.msg (326656 bytes)]
2025-04-11T21:14:55.742893Z
Gang
[attachment: 5800400.pdf (11648 bytes)]
2025-04-11T21:15:01.888965Z
Gang
[attachment: ACH Sheet Customers 8.9.24.xlsx (27388 bytes)]
2025-04-11T21:15:05.809785Z
Gang
[attachment: ACH Sheet Customers 8.21.24.xlsx (27408 bytes)]
2025-04-11T21:15:08.364957Z
Gang
[attachment: Managers' Handbook 5-09.doc (321536 bytes)]
2025-04-11T21:15:12.482293Z
Gang
[attachment: sample safety plan.doc (796672 bytes)]
2025-04-11T21:15:16.114719Z
Gang
Victim
Reviewing. Whats next?
2025-04-12T12:55:24.673494Z
Now we want you to pay us 15 BTC, after which we will give you a decryption tool and delete the data from our servers.
2025-04-12T12:57:29.002751Z
Gang
If negotiations are not underway, we will publish an incident announcement without publishing the data. That's how he becomes known publicly. If negotiations fail, we publish the data. You wanted privacy, but you stopped negotiating after we mentioned the terms.
2025-04-14T20:49:41.05921Z
Gang
Victim
That is a huge amount of dollars. We do not have that kind of money. We are a low margin business and these new tariffs are killing us. Please ask us for something that we can actually pay
2025-04-15T17:37:54.509846Z
And how much do you think you could pay?
2025-04-15T17:39:10.565056Z
Gang
Victim
Our business is going through massive downtrends and there is so much uncertainty with tariffs we have no idea how much our sales will drop. You are asking for over a million and we do not have that even if we wanted. Honestly we are more in the 10's of thousands. Please work with us
2025-04-16T18:14:06.725583Z
We have examined your documents. Including insurance. We can reduce the amount to 14 BTC.
2025-04-16T18:23:16.827043Z
Gang
Victim
That is going to be impossible for us. We are willing to discuss the potential of payment but at that amount it we cannot do anything
2025-04-19T14:28:56.98533Z
Abstract discussions do not bring real results. The amount that we have named is based on your documents that we have studied. You know these documents, you've seen them, we speak the same language. If you have a different view, then name it and we will discuss it. A serious suggestion, not abstract words.
2025-04-19T14:38:12.921231Z
Gang
Victim
We are meeting tomorrow to discuss your message. Will report back
2025-04-21T02:15:28.179287Z
Ok
2025-04-21T03:07:48.057451Z
Gang
Victim
We are having a difficult time deciding how to continue this discussion given you are asking for over $1 million. We cannot aford that but we do not want to upset you either. Can you show us a more reasonable amount so we can consider? How do you prove you delete our data if paid?
2025-04-23T17:08:00.885257Z
Victim
You posted us so i guess you are no longer interested
2025-04-27T16:45:24.250486Z
You knew the conditions. You have received an offer. You've decided to play games. The consequences are now your responsibility.
2025-04-28T05:20:53.894675Z
Gang