Akira — 20231112

Select a message number for a stable citation link. Text remains selectable; hard-wrapped source lines are joined for reading, intentional blank-line paragraph breaks remain, and written URLs remain inert.

1. Message 001 From Victim Victim Date Not recorded

   > hello

2. Message 002 From Victim Victim Date Not recorded

   > Hello

3. Message 003 From Victim Victim Date Not recorded

   > [redacted]

4. Message 004 From Victim Victim Date Not recorded

   > We would like to un-encrypt our files

5. Message 005 From Akira Actor / other Date Not recorded

   > Hello. You've reached Akira support chat. Currently, we are preparing the list of data we took from your network. For now you have to know that dealing with us is the best possible way to settle this quick and cheap. Keep in touch and be patient with us. We will reach out to you soon. Do you have a permission to conduct a negotiation on behalf of your organization? Once we get a response you will be provided with all the details.

6. Message 006 From Victim Victim Date Not recorded

   > yes

7. Message 007 From Akira Actor / other Date Not recorded

   > Wait a moment.

8. Message 008 From Akira Actor / other Date Not recorded

   > List.7z // 1.37 MB

9. Message 009 From Akira Actor / other Date Not recorded

   > These files were taken from your network prior to encryption. You can pick 2-3 random files from the list and we will upload them to this chat as a proof of possession. To prove that we can properly decrypt your data you can upload 2-3 encrypted files to our chat and we will upload decrypted copies back.

10. Message 010 From Victim Victim Date Not recorded

    > how do I open this?

11. Message 011 From Victim Victim Date Not recorded

    > nevermind.

12. Message 012 From Victim Victim Date Not recorded

    > [redacted].jpg.akira // 135 KB

13. Message 013 From Victim Victim Date Not recorded

    > [redacted].jpg.akira // 328 KB

14. Message 014 From Victim Victim Date Not recorded

    > [redacted].jpg.akira // 136 KB

15. Message 015 From Victim Victim Date Not recorded

    > Here you go

16. Message 016 From Akira Actor / other Date Not recorded

    > We upload them decrypted soon.

17. Message 017 From Akira Actor / other Date Not recorded

    > [redacted].jpg // 134 KB

18. Message 018 From Akira Actor / other Date Not recorded

    > [redacted].jpg // 135 KB

19. Message 019 From Akira Actor / other Date Not recorded

    > [redacted].jpg // 328 KB

20. Message 020 From Akira Actor / other Date Not recorded

    > Here are the decrypted files. Do you need files for proof?

21. Message 021 From Akira Actor / other Date Not recorded

    > So, we've gone through your files to define your financial abilities. We've been looking through your bank statements, net income, cyber liability limits, financial audits - all the info that might help us calculate our demand to you. We're willing to set a $250,000 price for ALL the services we offer: 1) full decryption assistance; 2) evidence of data removal; 3) security report on vulnerabilities we found; 4) guarantees not to publish or sell your data; 5) guarantees not to attack you in the future. Let me know whether you're interested in a whole deal or in parts. This will affect the final price.

22. Message 022 From Victim Victim Date Not recorded

    > Can you please send us these files from the list that you sent?

23. Message 023 From Victim Victim Date Not recorded

    > [redacted].xlsx [redacted].csv [redacted].pdf [redacted].pdf [redacted].XLS [redacted].pptx

24. Message 024 From Akira Actor / other Date Not recorded

    > Sure. We will provide them soon.

25. Message 025 From Akira Actor / other Date Not recorded

    > [redacted].7z // 5.03 MB

26. Message 026 From Akira Actor / other Date Not recorded

    > Here are the files you can review. We asked for 2-3 files and are giving you back 4 of 6.

27. Message 027 From Victim Victim Date Not recorded

    > Hello?

28. Message 028 From Akira Actor / other Date Not recorded

    > Are you ready to proceed to payment details?

29. Message 029 From Akira Actor / other Date Not recorded

    > Hello. Will you have a deal with us or we can move to announcing your leak? Let us know.

30. Message 030 From Victim Victim Date Not recorded

    > Thank you for the unlocked files and the files from the list that we requested. We have been reviewing everything and discussing our next steps and the truth of the matter is that we don’t have 250,000 just lying around to send to you. What is the best number you can provide so that we can resolve this as quickly as possible?

31. Message 031 From Akira Actor / other Date Not recorded

    > What is your counter offer?

32. Message 032 From Victim Victim Date Not recorded

    > All we have on hand at the moment is 25,000 USD that we can send. Is there any way that you can provide us a number that we can maybe work with given what we have currently? At least we can then see if it’s doable to gather any more. We don’t think there’s anyway that we are going to be able to get close to the 250,000 number, but we are trying to gather as much as we can.

33. Message 033 From Akira Actor / other Date Not recorded

    > 10% of our demand? Are you sure? We will post your data and delete this chat later if you don't reconsider this modest offer within 24 hours.

34. Message 034 From Victim Victim Date Not recorded

    > I’m sorry. I appreciate that you feel $25,000 is not acceptable. We do want your services, and we are trying to gather what we can. However, getting capital together is extremely difficult as awe are not a high cashflow business. We may be able to generate a bit more, but I’m not sure. Can you provide us with a more reasonable number given our financial situation? Can you accept $50,000?

35. Message 035 From Akira Actor / other Date Not recorded

    > No we can't. Only 6 figure amount will be considered and at the moment it is $225,000.

36. Message 036 From Victim Victim Date Not recorded

    > We appreciate the reduction, but the truth of the matter is that we still don't have 225,000. We are still trying to find funds anywhere we can, but our bank is going to want to know exactly where the money is going and they won't allow us to use the funds for something like this. Our only option is to try and gather the funds elsewhere. With that being said, we are actively trying to gather more, but is 225,000 your absolute best number?

37. Message 037 From Akira Actor / other Date Not recorded

    > If your next step will be above six number sum, I'll ask my team if there any additional discount possible.

38. Message 038 From Victim Victim Date Not recorded

    > Thank you for the consideration. My team is working on seeing what more we can do. At the moment I’ve only been able to pull together $75k. We just Need more time.

39. Message 039 From Akira Actor / other Date Not recorded

    > Update us on Monday.

40. Message 040 From Victim Victim Date Not recorded

    > Hello, we've been working on this all weekend and here's what we've been able to do, we can come up to the 6 figure number and offer 100,000, but this is all we will probably have for quite some time. PLease consider our offer and let's gt a deal done.

41. Message 041 From Akira Actor / other Date Not recorded

    > The upper management has decided to provide you with $30,000 discount coming down to $220,000 amount. You can handle this sum with no harm to your business, let's get this over.

42. Message 042 From Victim Victim Date Not recorded

    > While we appreciate the further reduction, we simply don't have that much onhand and it's going to take quite some time to get any more than we currently have.

43. Message 043 From Akira Actor / other Date Not recorded

    > You have until Friday.

44. Message 044 From Victim Victim Date Not recorded

    > We are really wanting to get this done quickly, but we simply don't have what you are asking for and we don't know where or how we are going to get any more than the 100,000 that we've offered. We've used up all of our sources of cash. We can send you all of this now, but I don't know when or if we'll have anymore.

45. Message 045 From Akira Actor / other Date Not recorded

    > You still have time until Friday to get more funds. Let's see what you will get and decide how to continue our deal.

46. Message 046 From Victim Victim Date Not recorded

    > We are still trying to raise further funds, but we aren't having a lot of luck. We'll let you know where we are at tomorrow.

47. Message 047 From Akira Actor / other Date Not recorded

    > Ok, standing by.

48. Message 048 From Victim Victim Date Not recorded

    > Ok, so we now have 150,000 and just want to get this done and behind us. THis is basically splitting the difference between your price and our's. Please consider our offer, help us out, and let us get on with our business. THanks for your consideration

49. Message 049 From Akira Actor / other Date Not recorded

    > Hello

50. Message 050 From Akira Actor / other Date Not recorded

    > The leadership has agreed to accept your offer. Here is the BTC wallet ID for payment: [redacted]

    How soon are you going to fund our wallet?

51. Message 051 From Victim Victim Date Not recorded

    > We are getting the approvals from our bank first and then we will be ready to send the payment. The unfortunate part is that it's the weekend and our bank may not respond until Monday. We will get the request in and let you know once we are sending the funds.

52. Message 052 From Akira Actor / other Date Not recorded

    > Waiting for an update on Monday.

53. Message 053 From Victim Victim Date Not recorded

    > Payment has been sent to your wallet. Can you confirm and send us what we agreed to pay for?

54. Message 054 From Akira Actor / other Date Not recorded

    > Wait a bit.

55. Message 055 From Akira Actor / other Date Not recorded

    > We confirm the receipt. Please wait for the items.

56. Message 056 From Akira Actor / other Date Not recorded

    > unlocker.7z // 3.04 MB

57. Message 057 From Akira Actor / other Date Not recorded

    > unlocker.exe -p="path_to_unlock" unlocker.exe -s="C:\paths.txt" where "paths.txt" is a list of paths for the decryptor, each path on a new line same arguments work with the esxi decryptor

58. Message 058 From Akira Actor / other Date Not recorded

    > We will send the rest withing 24 hours.