{ "chat_id": "20210630", "messages": [ { "party": "REvil", "content": "hi", "timestamp": "21 days ago" }, { "party": "Victim", "content": "Hi, are you able to help us understand what happened?", "timestamp": "20 days ago" }, { "party": "REvil", "content": "Hello , you network encrypted and data was stolen", "timestamp": "20 days ago" }, { "party": "Victim", "content": "ok, we understand. Will you please tell us how you got into our network?", "timestamp": "20 days ago" }, { "party": "REvil", "content": "We will tell only after payment", "timestamp": "20 days ago" }, { "party": "Victim", "content": "Hi, you said our data was stolen. What do you mean? How much was taken? Thank you.", "timestamp": "19 days ago" }, { "party": "REvil", "content": "near 140Gb of data", "timestamp": "19 days ago" }, { "party": "REvil", "content": "You can check in your logs , we upload data in our cloud and transfer data to our servers .", "timestamp": "19 days ago" }, { "party": "Victim", "content": "thanks for the information. Would you please provide a sample of the data? We need to review this and show our management. Thank you", "timestamp": "19 days ago" }, { "party": "REvil", "content": "wait for answer", "timestamp": "19 days ago" }, { "party": "REvil", "content": "examples", "timestamp": "19 days ago" }, { "party": "Victim", "content": "Thanks for the files. Management is reviewing them. Our team needs to understand how the decryption software works. Does the same decryptor work on every machine?", "timestamp": "18 days ago" }, { "party": "REvil", "content": "One decoder, you can decode all machines", "timestamp": "18 days ago" }, { "party": "Victim", "content": "Thanks! The machines have different encrypted file extensions. How does that work for the decryptor tool? Do you need all of the extensions? Please explain how that works.", "timestamp": "18 days ago" }, { "party": "REvil", "content": "we send universal decryptor and all instruction", "timestamp": "18 days ago" }, { "party": "Victim", "content": "You do not need extensions from us?", "timestamp": "18 days ago" }, { "party": "REvil", "content": "no , you will get universal decryptor for all extension", "timestamp": "18 days ago" }, { "party": "Victim", "content": "Thanks for the information. We are working with you to try to understand the process. We have a lot to review given this situation. It is now the weekend. Would you please add more time to the clock? Thank you for your help.", "timestamp": "18 days ago" }, { "party": "REvil", "content": "of course", "timestamp": "18 days ago" }, { "party": "REvil", "content": "update", "timestamp": "18 days ago" }, { "party": "Victim", "content": "Hi, our team has questions about the trial decryption. Does the file we upload need a certain extension? Can it come from any machine? thanks", "timestamp": "16 days ago" }, { "party": "REvil", "content": "Hello you can send test file to this chat", "timestamp": "16 days ago" }, { "party": "Victim", "content": "Thank you. We will locate a few files to test. Also, the current price is much too high for us to pay. As you can see in the files you took, we have many financial problems including a recent bankruptcy, and we do not have insurance. Please help us with a lower price.", "timestamp": "15 days ago" }, { "party": "REvil", "content": "My boss can offer 20% discount if your pay fast", "timestamp": "15 days ago" }, { "party": "Victim", "content": "Thank you for the discount. We want to work with you but this is still much too expensive. Will your boss please give us a larger discount since we have all of those financial problems? Thanks", "timestamp": "15 days ago" }, { "party": "REvil", "content": "We know your financial problems, but we also know how much you earn.\n20% is all we have to offer", "timestamp": "15 days ago" }, { "party": "Victim", "content": "Ok, would you please give us more time on the clock so we can try to reach an agreement with you. This is a difficult situation for our team and we are in good faith trying to reach a resolution. Thank you", "timestamp": "15 days ago" }, { "party": "REvil", "content": "2 days added", "timestamp": "15 days ago" }, { "party": "Victim", "content": "Hi, thanks for the extra time. Would you please decrypt this png file. Thanks", "timestamp": "14 days ago" }, { "party": "REvil", "content": "file", "timestamp": "14 days ago" }, { "party": "Victim", "content": "Thanks for the decryption test. Please understand we are not in the financial position to pay this high price. Will you please ask your boss again what he can do to help us?", "timestamp": "13 days ago" }, { "party": "REvil", "content": "20% discount if you pay fast", "timestamp": "13 days ago" }, { "party": "REvil", "content": "so - time ending . What we should do?", "timestamp": "12 days ago" }, { "party": "Victim", "content": "The price with only a 20% discount is still $2million USD. This is much too high for us to afford. We do not have insurance. Are you able to give us a higher discount? Thanks!", "timestamp": "12 days ago" }, { "party": "REvil", "content": "Make an interesting offer and my boss will consider it.", "timestamp": "12 days ago" }, { "party": "Victim", "content": "Hi, we talked to our management and they asked a couple questions today. Do we get all of our data back before you delete it? Will you tell us exactly when and how you got into our network? Please let us know..", "timestamp": "11 days ago" }, { "party": "REvil", "content": "Everything can be restored in a few hours. You will also receive a complete list of files.", "timestamp": "11 days ago" }, { "party": "REvil", "content": "Yes, we can help you secure your network", "timestamp": "11 days ago" }, { "party": "Victim", "content": "Hi. Our management is still evaluating the situation and the costs. If we can come to a reasonable agreement, would it be possible to pay in bitcoin? Our understanding is that XMR is more difficult for us to get. We have to keep our costs down.", "timestamp": "10 days ago" }, { "party": "Victim", "content": "Hi. Our management is still evaluating the situation and the costs. If we can come to a reasonable agreement, would it be possible to pay in bitcoin? Our understanding is that XMR is more difficult for us to get. We have to keep our costs down.", "timestamp": "10 days ago" }, { "party": "REvil", "content": "Of course", "timestamp": "10 days ago" }, { "party": "REvil", "content": "hi, Tomorrow we upload your data to auction .and after sale start spam attack to your partner with your data", "timestamp": "13 minutes ago" } ] }