{ "chat_id": "", "messages": [ { "party": "Anonymous ", "content": "", "timestamp": "2023-08-02 22:54:31" }, { "party": "Anonymous ", "content": "Hello! If you are reading this message, your files \nare encrypted and your data is compromised.In order for YOU to quickly \nand without additional losses FOR YOU to regain control over your data, \nstrictly follow the proposed scenario:1. ONLY an AUTHORIZED \nrepresentative authorized to enter into financial agreements and \nnegotiate on behalf of the entire company should participate in \nnegotiations on your part.All other persons not endowed with such \nauthority (system administrators, cleaners, and others) who enter into \nnegotiations can cause significant harm, primarily for your own \ncompany.2. Confirm that you are an authorized representative of your \ncompany and briefly describe your situation.3. Stay online throughout \ntoday until further instructions.4. If you did not receive our answer \nduring the day, then indicate the time, country and city in the time \nzone of which you are located. Set a time convenient for you for \nfollow-up negotiations.5. Keep calm and be patient, they will definitely\n answer you and help you with the recovery of your data.6. Remember that\n mutual respect is the key to successful negotiations.", "timestamp": "2023-08-19 04:33:16" }, { "party": "Client ", "content": "Hello,", "timestamp": "2023-08-21 13:25:23" }, { "party": "Client ", "content": "We got infected and you asked to contact you.", "timestamp": "2023-08-21 13:25:46" }, { "party": "Anonymous ", "content": "Hello", "timestamp": "2023-08-21 13:42:46" }, { "party": "Anonymous ", "content": "you have not given me confirmation that you are authorized to negotiate on behalf of the company.", "timestamp": "2023-08-21 13:43:36" }, { "party": "Anonymous ", "content": "you must understand that based on your answers, appropriate decisions will be made that will affectthroughout your company. ", "timestamp": "2023-08-21 13:43:49" }, { "party": "Anonymous ", "content": "So you're authorized to negotiate?", "timestamp": "2023-08-21 13:44:01" }, { "party": "Client ", "content": "I'm authorized to ask your intentions. We're in \n[redacted], and we're not used to this kind of situation. I'll\n pass on to my manager, who will decide what to do next. This is the 1st\n step for him.", "timestamp": "2023-08-21 13:55:04" }, { "party": "Anonymous ", "content": "ok", "timestamp": "2023-08-21 13:56:03" }, { "party": "Anonymous ", "content": "So that we do not have a misunderstanding and, as a result, undesirable consequences for you, follow these 3 rules: ", "timestamp": "2023-08-21 13:56:12" }, { "party": "Anonymous ", "content": "1 Always answer my questions. If you don't have an \nanswer and need to consult with management, tell me so. 2 Never end \nnegotiations unilaterally. This may serve as a signal to me that you \nrefuse to cooperate with us. 3 If the negotiations are completed today, \nbe sure to indicate the time of the next meeting.", "timestamp": "2023-08-21 13:56:24" }, { "party": "Anonymous ", "content": "Now I will give you a step-by-step plan of further \nactions. Follow it strictly, as it is the shortest way to the to the \nsuccessful completion of the case.", "timestamp": "2023-08-21 13:56:55" }, { "party": "Anonymous ", "content": "The next steps will be:", "timestamp": "2023-08-21 13:57:28" }, { "party": "Anonymous ", "content": "1. We assign you a ransom amount that you must accept*.", "timestamp": "2023-08-21 13:57:37" }, { "party": "Client ", "content": "ok", "timestamp": "2023-08-21 13:57:40" }, { "party": "Anonymous ", "content": "2. you convert the approved amount into BTC or XMR.", "timestamp": "2023-08-21 13:57:45" }, { "party": "Anonymous ", "content": "3. You send us 2 encrypted files to check their reverse decryption**.", "timestamp": "2023-08-21 13:58:13" }, { "party": "Anonymous ", "content": "4. we decrypt them and send them to you.", "timestamp": "2023-08-21 13:58:22" }, { "party": "Anonymous ", "content": "5. you make sure the decryptor works and give us confirmation.", "timestamp": "2023-08-21 13:58:33" }, { "party": "Anonymous ", "content": "6. we give you a wallet to transfer BTC or XMR.", "timestamp": "2023-08-21 13:58:44" }, { "party": "Anonymous ", "content": "7. You make a trial amount transfer and wait for confirmation.", "timestamp": "2023-08-21 13:58:54" }, { "party": "Anonymous ", "content": "8. After our confirmation, you transfer the entire amount.", "timestamp": "2023-08-21 13:59:05" }, { "party": "Anonymous ", "content": "9. We send you the key and detailed instructions.***", "timestamp": "2023-08-21 13:59:15" }, { "party": "Anonymous ", "content": "10. your data stored by us will be deleted.", "timestamp": "2023-08-21 13:59:24" }, { "party": "Anonymous ", "content": "11. we provide you with a penetration report indicating the exploited vulnerabilities.****", "timestamp": "2023-08-21 13:59:32" }, { "party": "Anonymous ", "content": "notes:", "timestamp": "2023-08-21 13:59:45" }, { "party": "Anonymous ", "content": "* we know about your income so do not humiliate \nyourself.Discounts can only be granted to those companies that have \napplied to us in a timely manner and strictly comply with all our \ninstructions.**Files must not be important, and their maximum size must \nbe no more than 5 MB each.*** We will keep in touch with you until your \nnetwork is fully restored.**** The report is provided to everyone who \npaid the full amount of the ransom.", "timestamp": "2023-08-21 14:00:20" }, { "party": "Client ", "content": "1?", "timestamp": "2023-08-21 14:01:49" }, { "party": "Anonymous ", "content": "This is the general plan.I will discuss the specific \namount of the ransom only with an authorized person who owns the right \nto conclude financial agreements.", "timestamp": "2023-08-21 14:03:36" }, { "party": "Anonymous ", "content": "if such a person is in touch with you, then tell him this and let him join our negotiations.", "timestamp": "2023-08-21 14:06:26" }, { "party": "Anonymous ", "content": "I'm still here and waiting for your representative for further negotiations", "timestamp": "2023-08-21 18:29:30" }, { "party": "Anonymous ", "content": "Your silence will only make things worse for \nyourself.We have more than 60 GB of your private data at our \ndisposal.Urgently appoint an authorized representative and enter into \nnegotiations.Otherwise, we will sell your data to a third party", "timestamp": "2023-08-22 10:26:45" }, { "party": "Anonymous ", "content": "As I warned you, your data is for sale.While the \ntimer is running, no one else can see your files.After the time expires,\n your data will be available to our buyers, but it will not be available\n to you.Enter into negotiations quickly and we will stop this.", "timestamp": "2023-08-23 10:02:51" }, { "party": "Anonymous ", "content": "http://cloak7jpvcb73rtx2ff7kaw2kholu7bdiivxpzbhlny4ybz75dpxckqd.onion/", "timestamp": "2023-08-23 10:03:18" }, { "party": "Anonymous ", "content": "[redacted]", "timestamp": "2023-08-23 10:03:32" }, { "party": "Anonymous ", "content": "[redacted]", "timestamp": "2023-08-23 10:03:44" }, { "party": "Anonymous ", "content": "[redacted]", "timestamp": "2023-08-23 10:04:37" }, { "party": "Anonymous ", "content": "[redacted]", "timestamp": "2023-08-23 13:44:20" }, { "party": "Anonymous ", "content": "Why are you keeping silent?you are running out of time.", "timestamp": "2023-08-24 17:08:44" }, { "party": "Client ", "content": "[redacted].com hi sir this data need also", "timestamp": "2023-08-27 03:14:55" }, { "party": "Client ", "content": "http://[redacted].onion my link not working so i contact this way", "timestamp": "2023-08-27 03:16:54" }, { "party": "Client ", "content": "pls need decrypt tool", "timestamp": "2023-08-27 03:25:30" }, { "party": "Client ", "content": "pls help me", "timestamp": "2023-08-27 06:32:44" }, { "party": "Anonymous ", "content": "Hello!To help you I need to understand who I'm \ndealing with?Have you been authorized to negotiate on behalf of the \nentire company?", "timestamp": "2023-08-27 11:38:31" }, { "party": "Anonymous ", "content": "As for [redacted].com, I can tell you that we can also solve this issue.Pass this on to your management.", "timestamp": "2023-08-27 11:45:52" }, { "party": "Anonymous ", "content": "Get the point. Without the participation of your \nleadership, we will not be able to conclude an agreement with you.It is \nup to your bosses to decide whether or not they should pay us to decrypt\n the files and return the data.Therefore, I strongly recommend that you \ntell them about it. Let them give you a representative.This is the only \nway we will find a way out of this situation.", "timestamp": "2023-08-27 12:09:24" }, { "party": "Client ", "content": "how much price ", "timestamp": "2023-08-27 12:56:03" }, { "party": "Client ", "content": "[redacted].com", "timestamp": "2023-08-27 12:56:05" }, { "party": "Anonymous ", "content": "wait a bit, I'll make some clarifications on this", "timestamp": "2023-08-27 14:45:16" }, { "party": "Anonymous ", "content": "for those who want to recover files on [redacted].com. I have a question. How did you get access to this chat?", "timestamp": "2023-08-27 15:23:53" }, { "party": "Anonymous ", "content": "After your answer, we will move on to discussing the price.", "timestamp": "2023-08-27 15:25:08" }, { "party": "Anonymous ", "content": "Why did you stop communicating?Files on your computers won't decrypt themselves", "timestamp": "2023-08-28 11:30:22" }, { "party": "Anonymous ", "content": "we are ready to cooperate.Give me an answer and we will move on to the question of price", "timestamp": "2023-08-28 15:26:38" }, { "party": "Anonymous ", "content": "Please note that data on [redacted].com will also \nappear on our resource soon.You can write to me if you don't want this \nto happen.", "timestamp": "2023-08-29 16:28:31" }, { "party": "Anonymous ", "content": "I appeal to the leaders and representatives of [redacted] The privacy period for your data on our website is about to expire.After the expiration of the time, your data will become publicly available.But you won't be able to download them yourself.We will start receiving offers to sell your data from our partners.these are the new inputs:", "timestamp": "2023-08-30 15:17:43" }, { "party": "Anonymous ", "content": "[redacted]", "timestamp": "2023-08-30 15:17:58" }, { "party": "Anonymous ", "content": "[redacted]", "timestamp": "2023-08-30 15:18:08" }, { "party": "Anonymous ", "content": "Now I turn to the representatives of \n[redacted].comYour data has also been put up on our website for the sale\n of such material.Since I don't know how you got into THIS chat, I can \nassume that you do not want to publicly discuss your business here.I \ngive you a chance to solve your questions here:", "timestamp": "2023-08-30 15:29:30" }, { "party": "Anonymous ", "content": "[redacted]@cock.li", "timestamp": "2023-08-30 15:30:12" }, { "party": "Client ", "content": "i tried contect no responceyour side", "timestamp": "2023-09-03 13:22:00" }, { "party": "Client ", "content": "hello", "timestamp": "2023-09-03 15:40:01" }, { "party": "Anonymous ", "content": "hello", "timestamp": "2023-09-04 10:07:25" }, { "party": "Anonymous ", "content": "a message has been sent to your email", "timestamp": "2023-09-04 10:07:41" }, { "party": "Client ", "content": "not received anything pls replay my gmail", "timestamp": "2023-09-04 12:39:05" }, { "party": "Anonymous ", "content": "do you want me to put your email here?", "timestamp": "2023-09-04 13:05:21" } ] }