{ "chat_id": "20210329", "messages": [ { "party": "Victim", "content": "price is error ?", "timestamp": "5 days ago" }, { "party": "Victim", "content": "how much btc ?", "timestamp": "5 days ago" }, { "party": "REvil", "content": "Hello.This amount was formed after a detailed audit of your company and\n it fully corresponds to your level and size of your company.\nThe system works as follows: you transfer the amount in crypt currency Monero (XMR) to the wallet specified on your page.\nAfter payment you receive:\n- Universal decryptor for your all network\n- 100% confidentiality of this incident and all terms of the transaction on our part.", "timestamp": "5 days ago" }, { "party": "Victim", "content": "Ten million ?", "timestamp": "5 days ago" }, { "party": "Victim", "content": "it's the first time i see the price , it's very exaggeration", "timestamp": "5 days ago" }, { "party": "Victim", "content": "what's is the lowest price ?", "timestamp": "5 days ago" }, { "party": "REvil", "content": "wait for answer.", "timestamp": "5 days ago" }, { "party": "REvil", "content": "Nope. You need to pay the requested amount of money. It is not a market.", "timestamp": "5 days ago" }, { "party": "REvil", "content": "You pay for fullfill decryption your files and we tell you about your \nvulnerabilities and how to fix them. Otherwise you will face new \ndifferent attacks, sooner or later it will lead to leaks of your and \nyour client's data and other valuable data again and again.", "timestamp": "5 days ago" }, { "party": "REvil", "content": "We recommend that you transfer this information to the management.\nWe are ready for dialogue if you want to solve this problem.\nWe will not drag out negotiations.\nWe know the level of damage done to your network.\nAlso, our team received a large amount of important information that \nwill become publicly available if you do not pay or try to make too low \noffers.\nFor our part, we are ready to provide a 20% discount if payment reaches us by Wednesday.This is our goodwill gesture.", "timestamp": "5 days ago" }, { "party": "REvil", "content": "http://dnpscnbaix6nkwvystl3yxglz7nteicqrou3t75tpcc5532cztc46qyd.onion/posts/[redacted]?s=[redacted]", "timestamp": "3 days ago" }, { "party": "REvil", "content": "When the time expires, this post will be published.", "timestamp": "3 days ago" }, { "party": "Victim", "content": "maybe more discount ?", "timestamp": "3 days ago" }, { "party": "Victim", "content": "I must have more bargaining chips to convince the boss", "timestamp": "3 days ago" }, { "party": "Victim", "content": "Excessive amounts must be paid by the Board of Directors, and it takes too much time", "timestamp": "3 days ago" }, { "party": "REvil", "content": "You can submit your proposal and my boss will review it.\nThe faster the payment arrives, the more discount we will give you.\nAs proof, we can provide any of your data.", "timestamp": "3 days ago" }, { "party": "Victim", "content": "Have any R&D information or personal information?", "timestamp": "3 days ago" }, { "party": "REvil", "content": "The data provided should be sufficient to understand what we own.\nWe have been download personal information from 2015.\nMy boss is not ready to drag out this dialogue.\nMake an offer and my boss will consider it.", "timestamp": "3 days ago" }, { "party": "Victim", "content": "Can you give me some data?", "timestamp": "3 days ago" }, { "party": "Victim", "content": "I will discuss with my boss", "timestamp": "3 days ago" }, { "party": "Victim", "content": "The more destructive the better", "timestamp": "3 days ago" }, { "party": "Victim", "content": "hello?", "timestamp": "2 days ago" }, { "party": "REvil", "content": "wait for answer.", "timestamp": "2 days ago" }, { "party": "REvil", "content": "We don't have time to download tens of gigabytes of information.\nWe will give you an example of 1/10000 of your file tree.\nMy boss is open to your suggestions, but we don't expect little money from you.", "timestamp": "2 days ago" }, { "party": "REvil", "content": "File.", "timestamp": "2 days ago" }, { "party": "Victim", "content": "Decrypt password?", "timestamp": "2 days ago" }, { "party": "Victim", "content": "i need more file list", "timestamp": "2 days ago" }, { "party": "Victim", "content": "The more the better", "timestamp": "2 days ago" }, { "party": "Victim", "content": "I must tell my boss this is serious", "timestamp": "2 days ago" }, { "party": "Victim", "content": "He didn\u2019t realize the severity", "timestamp": "2 days ago" }, { "party": "REvil", "content": "Password: 123123\nThis is enough to understand that we have a lot of valuable information.\n Tell your boss that it is very serious. The data received from your \ntrusts is enough to deliver you problems for many years.\nOur advice, do not pull the time to not repeat the fate of the SolarWind.", "timestamp": "2 days ago" }, { "party": "Victim", "content": "I need more evidence, this is a global paralysis", "timestamp": "2 days ago" }, { "party": "REvil", "content": "We have provided you with sample proof of what has been downloaded from your network.\nYou understand the seriousness of the situation for your company, and you need to explain this to your boss.\nYou are losing money every day.\nYour time is running out, and very soon we will publish your data on the blog, it will bring you even more problems.\nIt is in your interests to quickly agree on the ransom amount and pay \nquickly, and we will give you a discount. We are waiting for suggestions\n from you.", "timestamp": "2 days ago" }, { "party": "Victim", "content": "I don't have enough chips", "timestamp": "2 days ago" }, { "party": "Victim", "content": "You have worked so hard, and the results are not far away\nWhat I need is the trust and support of the boss\nBut if we talk no results, we can\u2019t continue", "timestamp": "2 days ago" }, { "party": "REvil", "content": "What results do you want to tell about? We've done enough to keep you in trouble for years to come.", "timestamp": "2 days ago" }, { "party": "REvil", "content": "Now we are waiting for a clear proposal from you.\nIf it is not received tomorrow, Forbes and the WSJ will report a breach in your headquarters systems and all servers.", "timestamp": "1 day ago" }, { "party": "Victim", "content": "I am very actively trying to resolve this matter\nBut the data you gave me didn\u2019t allow me to convince my boss", "timestamp": "1 day ago" }, { "party": "REvil", "content": "Then we'll do it.", "timestamp": "1 day ago" }, { "party": "Victim", "content": "What you need is money\nWhat I need is my job and the trust of my boss\nBut you don't give me a bargaining chip to talk to my boss\nI'm really in difficulty like this", "timestamp": "1 day ago" }, { "party": "REvil", "content": "So your boss has to get in touch with us himself. You're an incompetent negotiator.", "timestamp": "1 day ago" }, { "party": "Victim", "content": "....", "timestamp": "1 day ago" }, { "party": "REvil", "content": "Are we gonna talk about money? There will be no more dates, don't ask more about it.", "timestamp": "1 day ago" } ] }