Akira — 20231227
Dated recordFrom extortion.wiki, the ransomware negotiation research archive
A validated static rendering of 74 messages in source-array order. Transcript text is preserved without editorial additions.
- Actor
- Akira
- Record date
- Dec 27, 2023
- Messages
- 74
- Participants
- Akira, Victim
Preserved messages
Actor / other Victim
Select a message number for a stable citation link. Text remains selectable; hard-wrapped source lines are joined for reading, intentional blank-line paragraph breaks remain, and written URLs remain inert.
-
Message 001 From Victim Victim Date Not recorded > hello
-
Message 002 From Victim Victim Date Not recorded > hello
-
Message 003 From Victim Victim Date Not recorded > hello please help ME
-
Message 004 From Victim Victim Date Not recorded > hi
-
Message 005 From Victim Victim Date Not recorded > is somebody there
-
Message 006 From Victim Victim Date Not recorded > we are very small company...
-
Message 007 From Victim Victim Date Not recorded >??
-
Message 008 From Victim Victim Date Not recorded >???
-
Message 009 From Victim Victim Date Not recorded > hemlo Mister
-
Message 010 From Victim Victim Date Not recorded > Please helo please help
-
Message 011 From Victim Victim Date Not recorded > is somebody there
-
Message 012 From Victim Victim Date Not recorded > Hello....
-
Message 013 From Victim Victim Date Not recorded > It is our existence... please please help us
-
Message 014 From Victim Victim Date Not recorded > Hello
-
Message 015 From Victim Victim Date Not recorded > mister
-
Message 016 From Victim Victim Date Not recorded > hello
-
Message 017 From Victim Victim Date Not recorded > hellooo
-
Message 018 From Victim Victim Date Not recorded > akira
-
Message 019 From Victim Victim Date Not recorded > team
-
Message 020 From Victim Victim Date Not recorded > helooooo
-
Message 021 From Victim Victim Date Not recorded > akira
-
Message 022 From Victim Victim Date Not recorded > hello
-
Message 023 From Victim Victim Date Not recorded > 😭😭😭😭
-
Message 024 From Victim Victim Date Not recorded > hellooo
-
Message 025 From Victim Victim Date Not recorded > is u there??
-
Message 026 From Victim Victim Date Not recorded > hellooo
-
Message 027 From Victim Victim Date Not recorded > helloooo
-
Message 028 From Victim Victim Date Not recorded > helloooo
-
Message 029 From Akira Actor / other Date Not recorded > Hello. You've reached an Akira support chat. Currently, we are preparing the list of data we took from your network. For now you have to know that dealing with us is the best possible way to settle this quick and cheap. Keep in touch and be patient with us. We will reach out to you soon.
Do you have a permission to conduct a negotiation on behalf of your organization? Once we get a response you will be provided with all the details.
-
Message 030 From Victim Victim Date Not recorded > yes i am the owner of the company. Its a family business.
-
Message 031 From Victim Victim Date Not recorded > we are a small company with not many people and all my family members work here. you didnt hack a big company. this situation is very bad for us and to be honest we dont have much money because work is not going good.
-
Message 032 From Victim Victim Date Not recorded > PLEASE.....😭😭😭😭
-
Message 033 From Akira Actor / other Date Not recorded > Wait for details.
-
Message 034 From Victim Victim Date Not recorded > hello sir
-
Message 035 From Akira Actor / other Date Not recorded > We didn't take your data. We are the ones who can properly decrypt your data and restore your infrastructure in a short period of time. After payment you will receive a decryptor for each of your systems and manual on how to use it for particular file/system. If you face any problems during decryption process, we will be here to support. You will receive a security report that includes information about how we were able to penetrate your network, as well as exclusive first-hand information about the state of your network, the vulnerabilities that we found. What's more, you'll receive high-quality technical recommendations on eliminating any vulnerabilities and strengthening your network to secure your internal and external infrastructure. You will also receive written guarantees that we will keep this conversation private, and delete this chat later. We won't come back for more money after payment and we won't attack you again. The price is $100,000. To prove that we can properly decrypt your data you can upload 2-3 encrypted files up to 10 MB each to our chat and we will upload decrypted copies back.
-
Message 036 From Victim Victim Date Not recorded > 100,000$ is way too much. We as a family run business dont earn that kind of money. i wish i could pay it but there is no way we can afford that. we have already money problems right now and i can barely pay my employees salaries. you are about to destroy my families and my whole life. why do you attack a small business like us and not a big coorperation? everybody im my office is devistated and some are even crying because of this situation. the only thing i can do is please pay a maximum of 5,000$. i am sorry but i really cant afford more. please do it for my family and hard working honest employees. dont destroy our lives. we all need this company.
-
Message 037 From Victim Victim Date Not recorded > PLEASE.....
-
Message 038 From Akira Actor / other Date Not recorded > unlocker.7z // 1.24 MB
-
Message 039 From Akira Actor / other Date Not recorded > unlocker.exe -p="path_to_unlock" unlocker.exe -s="C:\paths.txt" where "paths.txt" is a list of paths for the decryptor, each path on a new line ESXi commands 1) chmod +x unlocker 2)./unlocker -p="/vmfs/volumes"
-
Message 040 From Victim Victim Date Not recorded > thx u very much ✌️✌️✌️✌️✌️
-
Message 041 From Akira Actor / other Date Not recorded > You are welcome!
-
Message 042 From Victim Victim Date Not recorded > sorry for bothering you but i am trying it the whole time but i cant make it work. can you please explain what i exactly have to do?
-
Message 043 From Victim Victim Date Not recorded > 😭😭😭😭
-
Message 044 From Akira Actor / other Date Not recorded > You have instructions. Tell me at what stage you are having troubles.
-
Message 045 From Victim Victim Date Not recorded > thx u very nuch......u are my Angel
-
Message 046 From Victim Victim Date Not recorded > i can not repair the database
-
Message 047 From Akira Actor / other Date Not recorded > Provide more details. What kind of error did you get?
-
Message 048 From Victim Victim Date Not recorded > 😭😭😭😭😭😭😭😭
-
Message 049 From Victim Victim Date Not recorded > we sqlserver can not attach the database
-
Message 050 From Victim Victim Date Not recorded > is it normal??
-
Message 051 From Victim Victim Date Not recorded > [redacted].jpg // 4.82 MB
-
Message 052 From Victim Victim Date Not recorded > before decode
-
Message 053 From Victim Victim Date Not recorded > before decode
-
Message 054 From Victim Victim Date Not recorded > [redacted].jpg // 5.71 MB
-
Message 055 From Victim Victim Date Not recorded > what gone wrong? PLEASE PLEASE HELP
-
Message 056 From Victim Victim Date Not recorded > we thought the server had hung up and restarted the server. could it possibly be related to this?
-
Message 057 From Victim Victim Date Not recorded > and some files is ending with arika.file
-
Message 058 From Victim Victim Date Not recorded > I have a question because I am trying to fix something the whole time but I can’t. We thought that the server was down so we restarted it. Could it be possible that during that progress some files that started to be encrypted got damaged and can’t be decrypted now? Because my most important.mdf files don’t work anymore. Could you please assist me?
-
Message 059 From Victim Victim Date Not recorded > PLEASE
-
Message 060 From Victim Victim Date Not recorded > 😭😭😭😭😪😪😪
-
Message 061 From Victim Victim Date Not recorded > 😭😭😭😭😭
-
Message 062 From Victim Victim Date Not recorded > do u have an idea??
-
Message 063 From Victim Victim Date Not recorded >??
-
Message 064 From Akira Actor / other Date Not recorded > Yes, the interruption of decryption process could damage files. Send me logs and I will ask my tech team.
-
Message 065 From Victim Victim Date Not recorded > how u penerate our nrtwork? can u give me info please...
-
Message 066 From Akira Actor / other Date Not recorded > Initial access to your network was purchased on the dark web.
-
Message 067 From Victim Victim Date Not recorded > how can i find it?
-
Message 068 From Victim Victim Date Not recorded > how it happen?
-
Message 069 From Victim Victim Date Not recorded > access about email, router,client?
-
Message 070 From Victim Victim Date Not recorded > how can i make beter or save?
-
Message 071 From Victim Victim Date Not recorded > Thank you for your answers and patience with us
-
Message 072 From Victim Victim Date Not recorded > Is there a new access, do I understand it correctly?
-
Message 073 From Akira Actor / other Date Not recorded > You have already get decryptors for free. I've provided you with more than enough info.
-
Message 074 From Victim Victim Date Not recorded > thx 🥰