{ "chat_id": "C2A3C7249797F5ED", "messages": [ { "timestamp": "2024-07-06T21:03:37.765307Z", "content": "Hey you guys got us. How did you get in?", "party": "victim" }, { "timestamp": "2024-07-06T21:07:00.548496Z", "content": "anyone there?", "party": "victim" }, { "timestamp": "2024-07-06T21:07:35.631915Z", "content": "yes", "party": "dragonforce" }, { "timestamp": "2024-07-06T21:09:21.759828Z", "content": "We are ready to help you solve your problem.", "party": "dragonforce" }, { "timestamp": "2024-07-06T21:11:35.843567Z", "content": "how do we get that data back? But just a heads up we are currently downsizing .", "party": "victim" }, { "timestamp": "2024-07-06T21:13:33.844142Z", "content": "We understand your situation. Do you know that you also lost more than 100 GB of data?", "party": "dragonforce" }, { "timestamp": "2024-07-06T21:14:24.054921Z", "content": "That could be possible", "party": "victim" }, { "timestamp": "2024-07-06T21:16:46.224555Z", "content": "Would you like us to provide you with a list of these files?", "party": "dragonforce" }, { "timestamp": "2024-07-06T21:17:30.088187Z", "content": "Sure", "party": "victim" }, { "timestamp": "2024-07-06T21:20:00.246571Z", "content": " do you have that list of files?", "party": "victim" }, { "timestamp": "2024-07-06T21:20:29.710396Z", "content": "We'll upload it to you now. For privacy reasons, we have not made an announcement on our blog yet.", "party": "dragonforce" }, { "timestamp": "2024-07-06T21:28:08.466204Z", "content": "tree.zip filesize:255819", "party": "dragonforce" }, { "timestamp": "2024-07-06T21:28:27.947508Z", "content": "You can select 3 files that are not too large so that we can provide confirmation.", "party": "dragonforce" }, { "timestamp": "2024-07-06T21:30:59.993235Z", "content": "\u2502 \u2502 \u2502 \u2502 \u251c\u2500\u2500 7 - Tender Submission \u2502 \u2502 \u2502 \u2502 \u2502 \u251c\u2500\u2500 [redacted] - Terms & Conditions.pdf", "party": "victim" }, { "timestamp": "2024-07-06T21:32:02.151836Z", "content": "\u2502 \u2502 \u2502 \u2502 \u251c\u2500\u2500 6 - Drawings - DXF \u2502 \u2502 \u2502 \u2502 \u2502 \u251c\u2500\u2500 OD10 ID4.53 P4.5 T0.375 1598656583.dxf", "party": "victim" }, { "timestamp": "2024-07-06T21:32:35.161263Z", "content": "Tunneling Co - Shroud Assembly_210514.3 \u2502 \u2502 \u2502 \u2502 \u2514\u2500\u2500 1 - Screw Conveyor Quote Documents- GP MFG \u2502 \u2502 \u2502 \u2502 \u251c\u2500\u2500 2 - Tender Documents \u2502 \u2502 \u2502 \u2502 \u2502 \u251c\u2500\u2500 Shroud Assembly.PDF", "party": "victim" }, { "timestamp": "2024-07-06T21:38:08.736506Z", "content": "[redacted].pdf filesize:53419", "party": "dragonforce" }, { "timestamp": "2024-07-06T21:38:24.146502Z", "content": "OD10 ID4.53 P4.5 T0.375 1598656583.dxf filesize:500", "party": "dragonforce" }, { "timestamp": "2024-07-06T21:38:32.796038Z", "content": "Shroud Assembly.PDF filesize:849082", "party": "dragonforce" }, { "timestamp": "2024-07-06T21:44:13.524015Z", "content": "how did you guys get in our network?", "party": "victim" }, { "timestamp": "2024-07-06T21:45:34.747322Z", "content": "The price is 400 000$. Payment in BTC.", "party": "dragonforce" }, { "timestamp": "2024-07-06T21:47:38.764541Z", "content": "We cant go that high but Ill talk to my boss", "party": "victim" }, { "timestamp": "2024-07-06T21:48:44.693936Z", "content": "We will be waiting for your word.", "party": "dragonforce" }, { "timestamp": "2024-07-08T01:41:31.583431Z", "content": "Hello", "party": "victim" }, { "timestamp": "2024-07-08T01:41:45.202358Z", "content": "We were talking on the tox", "party": "victim" }, { "timestamp": "2024-07-08T01:41:56.11953Z", "content": "Are you here????", "party": "victim" }, { "timestamp": "2024-07-08T02:52:41.840361Z", "content": "Hello are you here?", "party": "victim" }, { "timestamp": "2024-07-08T05:04:09.437624Z", "content": "Hello, I want to pay but don\u2019t have what your asking ", "party": "victim" }, { "timestamp": "2024-07-08T08:22:14.152603Z", "content": "Hello. You have not yet made a counteroffer to us. How much are you willing to pay?", "party": "dragonforce" }, { "timestamp": "2024-07-08T09:28:13.427297Z", "content": "15k", "party": "victim" }, { "timestamp": "2024-07-08T09:32:28.63417Z", "content": "I mean, what kind of serious offer are you ready to make? 15k this is not a serious conversation.", "party": "dragonforce" }, { "timestamp": "2024-07-08T12:27:43.463808Z", "content": "Again I don\u2019t have 200k you saw what we have, you have seen it all, you know I\u2019m not lying, there is no way that I can come up with such amount ", "party": "victim" }, { "timestamp": "2024-07-08T12:28:29.343339Z", "content": "We barely survive. We haven\u2019t paid paychecks for two weeks you hacked the network you saw it all you saw all of our financials.", "party": "victim" }, { "timestamp": "2024-07-08T12:29:01.432871Z", "content": "There is no way I can bring 200k not even remotely close to it", "party": "victim" }, { "timestamp": "2024-07-08T12:50:50.404381Z", "content": "The amount that you were told is 400k and not 200k", "party": "dragonforce" }, { "timestamp": "2024-07-08T13:05:00.214346Z", "content": "Ha?! 400k??? Sir there is no way on this planet that I can come up with such amount of cash, I cannot get near this number no matter how long this chat will be ", "party": "victim" }, { "timestamp": "2024-07-08T13:05:58.931851Z", "content": "If you\u2019re locked on 400k then I\u2019m out of options here, I\u2019ll use old back and try to survive with them", "party": "victim" }, { "timestamp": "2024-07-08T13:07:04.190089Z", "content": "We have reviewed your network and studied your company. Based on this information, we have calculated the amount. If you would like to propose another amount, it should be reasonable, not $15k.", "party": "dragonforce" }, { "timestamp": "2024-07-08T13:29:47.451747Z", "content": "You\u2019re kidding me right? If you seen it all and really studying our financials, you would never come up with such amount something that we don\u2019t have access to no matter what we will do, All of our credit cards are maxed out and we are negative in all bank accounts you hacked our network you saw it all", "party": "victim" }, { "timestamp": "2024-07-08T13:31:08.518433Z", "content": "We haven\u2019t paid paychecks for 2 weeks due to Cash flow issues", "party": "victim" }, { "timestamp": "2024-07-08T13:31:20.688034Z", "content": "So 400k I don\u2019t have sir. ", "party": "victim" }, { "timestamp": "2024-07-08T13:40:14.4315Z", "content": "Then you can offer another adequate amount and we will consider it. Not 15k.", "party": "dragonforce" }, { "timestamp": "2024-07-08T14:29:57.079091Z", "content": "Please tell me what\u2019s your bottom line here", "party": "victim" }, { "timestamp": "2024-07-08T14:32:03.061886Z", "content": "Do you want to offer me a job?", "party": "dragonforce" }, { "timestamp": "2024-07-08T14:48:16.956208Z", "content": "What? Sir, I want to close this today, 15k that\u2019s all I\u2019m able to bring , you saw what we have you have seen it all", "party": "victim" }, { "timestamp": "2024-07-08T14:55:19.658686Z", "content": "Yes, we saw what you have, and based on this we said the price. My management wants us to publish an announcement of this incident and turn on the timer. Tell me the price that I can tell the management. Publishing an announcement creates a lot of problems, especially in such cases. We would like to resolve the issue through negotiations, without a public statement.", "party": "dragonforce" }, { "timestamp": "2024-07-08T15:02:21.099381Z", "content": "Posting the data will not bring 400k to the table you can post it now if you wish, this is most definitely not my concern , what your asking is something I cannot get close to, I don\u2019t have access to the cash your asking, 15k is what I can offer 16k max ", "party": "victim" }, { "timestamp": "2024-07-08T15:04:24.816897Z", "content": "Have you searched Google for information about us?", "party": "dragonforce" }, { "timestamp": "2024-07-08T15:08:37.065381Z", "content": "No idea who you guys are, and I really don\u2019t care, I would like to close this today and go separate ways ", "party": "victim" }, { "timestamp": "2024-07-08T15:09:17.519639Z", "content": "I want to pay, but what your asking is not realistic ", "party": "victim" }, { "timestamp": "2024-07-08T15:13:25.927087Z", "content": "Google it. There is a lot of information about us there. Publishing even an announcement on a blog attracts a lot of attention to the company. Government agencies and special services. We would like to help you avoid problems. We are even ready to reduce the cost to 350k.", "party": "dragonforce" }, { "timestamp": "2024-07-08T15:22:49.989338Z", "content": "Please publish the data. As I said it\u2019s not an issue for me. Please do it now, this will not bring 350k to the table cash that I don\u2019t have access to. I understand that this os your business but what your asking is not in my reality, I cannot even go loans all of our cards are 100% maxed out, you saw it all you hacked our network, you know I don\u2019t lie, I don\u2019t have access to the cash your asking ", "party": "victim" }, { "timestamp": "2024-07-08T15:26:14.100095Z", "content": "Please work with me and I\u2019ll pay, but the amount your asking is out of my reach ", "party": "victim" }, { "timestamp": "2024-07-08T15:28:02.821785Z", "content": "The amount you mention is also unrealistic. If you want to resolve the issue, name the real amount.", "party": "dragonforce" }, { "timestamp": "2024-07-08T16:02:18.299228Z", "content": "Sir, you have seen our situation, you have seen it all, I don\u2019t have access to funds, 15k-16k is the max I can do, all of our accounts are 100% dry, I used all my savings to survive the covid, and since then our business went down drastically, I\u2019m 2 weeks behind on payroll, you saw it all I don\u2019t lie", "party": "victim" }, { "timestamp": "2024-07-08T16:02:40.936324Z", "content": "No bank will give us a loan in our situation ", "party": "victim" }, { "timestamp": "2024-07-08T16:07:48.975322Z", "content": "You can think about ways to solve this problem. You know what we require.", "party": "dragonforce" }, { "timestamp": "2024-07-08T16:18:22.723917Z", "content": "Please reduce the amount and I\u2019ll pay, I will never be able to get to your numbers ", "party": "victim" }, { "timestamp": "2024-07-08T16:24:55.653863Z", "content": "Tell me how much you can pay. Not 15k. We have already reduced it from 400k to 350k.", "party": "dragonforce" }, { "timestamp": "2024-07-08T16:31:48.608618Z", "content": "As I said 15-16k again I understand that\u2019s your business but I\u2019m sure you checked and saw our financials you saw it all! There is no way on this planet that I can get to your numbers 15-16k that\u2019s all I can bring I don\u2019t lie and you know it , we are in debt since Covid hit - we never recovered from it", "party": "victim" }, { "timestamp": "2024-07-08T16:40:31.457064Z", "content": "Covid was a long time ago. Now the world has changed and the situation in the world is already different. The amount you name does not correspond to your company. I suggest you Google it again, we have a certain strategy and we stick to it. There are articles confirming this. We will not settle for too small a sum. I think you're pretending you don't understand this.", "party": "dragonforce" }, { "timestamp": "2024-07-08T18:41:34.73049Z", "content": "100k", "party": "victim" }, { "timestamp": "2024-07-08T18:41:50.397897Z", "content": "To close this today and now", "party": "victim" }, { "timestamp": "2024-07-08T18:56:18.333693Z", "content": "The wallet and the amount of BTC have been adjusted to make this payment.", "party": "dragonforce" }, { "timestamp": "2024-07-08T19:06:02.946139Z", "content": "This key will unlock all files and machines here?", "party": "victim" }, { "timestamp": "2024-07-08T19:07:31.094538Z", "content": "Yes. All.", "party": "dragonforce" } ] }