Akira — 20240611
Dated recordFrom extortion.wiki, the ransomware negotiation research archive
A validated static rendering of 50 messages in source-array order. Transcript text is preserved without editorial additions.
- Actor
- Akira
- Record date
- Jun 11, 2024
- Messages
- 50
- Participants
- Akira, Victim
Preserved messages
Actor / other Victim
Select a message number for a stable citation link. Text remains selectable; hard-wrapped source lines are joined for reading, intentional blank-line paragraph breaks remain, and written URLs remain inert.
-
Message 001 From Victim Victim Date Not recorded > hello?
-
Message 002 From Victim Victim Date Not recorded > hello?
-
Message 003 From Victim Victim Date Not recorded > I don't see anything. Does this work?
-
Message 004 From Victim Victim Date Not recorded > hello?
-
Message 005 From Akira Actor / other Date Not recorded > Hello. You've reached Akira support chat. Currently, we are preparing the list of data we took from your network. For now you have to know that dealing with us is the best possible way to settle this quick and cheap. Keep in touch and be patient with us. Do you have a permission to conduct a negotiation on behalf of your organization? Once we get a response you will be provided with all the details.
-
Message 006 From Victim Victim Date Not recorded > Yes
-
Message 007 From Akira Actor / other Date Not recorded > List.7z // 47 KB
-
Message 008 From Akira Actor / other Date Not recorded > These files were taken from your network prior to encryption. You can pick 2-3 random files from the list and we will upload them to this chat as a proof of possession. To prove that we can properly decrypt your data you can upload 2-3 encrypted files to our chat and we will upload decrypted copies back.
-
Message 009 From Victim Victim Date Not recorded > Can I see the following
-
Message 010 From Victim Victim Date Not recorded > User Data\[redacted].docx
-
Message 011 From Victim Victim Date Not recorded > Public\[redacted].xlsx
-
Message 012 From Victim Victim Date Not recorded > Public\[redacted].docx
-
Message 013 From Akira Actor / other Date Not recorded > Please wait.
-
Message 014 From Akira Actor / other Date Not recorded > files.rar // 38.7 KB
-
Message 015 From Akira Actor / other Date Not recorded > You can review. If you want to test our decryption tool, provide 2-3 encrypted files asap.
-
Message 016 From Victim Victim Date Not recorded > [redacted].csv.akira // 634 Bytes
-
Message 017 From Victim Victim Date Not recorded > Here are two encrypted files
-
Message 018 From Victim Victim Date Not recorded > [redacted].bat.akira // 9.63 KB
-
Message 019 From Akira Actor / other Date Not recorded > decrypted.7z // 3.03 KB
-
Message 020 From Akira Actor / other Date Not recorded > You can review the files.
-
Message 021 From Akira Actor / other Date Not recorded > We're looking through your files to calculate a fair demand to you. I will let you know the sum shortly. We offer: 1) full decryption assistance; 2) evidence of data removal; 3) security report on vulnerabilities we found; 4) guarantees not to publish or sell your data; 5) guarantees not to attack you in the future. Let me know whether you're interested in a whole deal or in parts. This will affect the final price.
-
Message 022 From Victim Victim Date Not recorded > Can we see the full price? We may not need everything but knowing the full amount will be helpful.
-
Message 023 From Akira Actor / other Date Not recorded > I'll provide soon.
-
Message 024 From Akira Actor / other Date Not recorded > We're willing to set a $220,000 price for ALL the services listed above. Let me know how you'd like to proceed.
-
Message 025 From Akira Actor / other Date Not recorded > The decryptors will cost you $150,000, the evidence of data removal is $150,000 as well. We will give you the report for free in case you will purchase any of two mentioned options. The full package is always cheaper as you can see.
-
Message 026 From Victim Victim Date Not recorded > Can you confirm if that file list that you shared is a complete list of everything that you took?
-
Message 027 From Akira Actor / other Date Not recorded > We do confirm that the list indicates everything we've obtained.
-
Message 028 From Akira Actor / other Date Not recorded > Ready to proceed?
-
Message 029 From Victim Victim Date Not recorded > We are still talking about this since we have never thought this type of thing would happen to us. Can we have the Easter weekend to think about it and then we can continue on Monday?
-
Message 030 From Akira Actor / other Date Not recorded > Yes you can but we will wait for you on Monday with an offer we can't refuse.
-
Message 031 From Victim Victim Date Not recorded > We are back. We had a lot of discussion today around what we can afford and what we are looking to obtain from you, and we are willing to offer $42,500 in hopes of having you delete the data that you took from us. We aren't a big credit union so we are hopeful that we can resolve this with you.
-
Message 032 From Akira Actor / other Date Not recorded > Thanks for the offer but as you see you are too far from us at the moment. We can come towards you but you need to understand that we won't close the case for less than 6 figure sum. I'll wait for a better offer from to be able to discuss it with my leadership.
-
Message 033 From Victim Victim Date Not recorded > 6 figures is a lot for us, but we will check to see what we can do. What is the best price you can offer us?
-
Message 034 From Akira Actor / other Date Not recorded > We've already given you the best price. Raise your offer and we will end this incident finally.
-
Message 035 From Akira Actor / other Date Not recorded > We're willing to accept $100,000 the lowest. You can go back and forth but we will not go any lower.
-
Message 036 From Victim Victim Date Not recorded > We appreciate that. Can we have some time to discuss this? This is going to be a pretty heavy decision on our side, but we will try to keep you updated
-
Message 037 From Akira Actor / other Date Not recorded > We hope to get this over with before the weekend. Standing by.
-
Message 038 From Victim Victim Date Not recorded > Okay, with some approvals from our board, we are able increase our offer to $55,250. We understand that you said $100,000 is the lowest, but we really are looking for you to work with us here.
-
Message 039 From Akira Actor / other Date Not recorded > You have to come closer to our demand if you want to resolve this. All I can do is $95,000.
-
Message 040 From Victim Victim Date Not recorded > We won't be able to see about being able to increase what we can pay until Monday at the earliest. We can get back to you then.
-
Message 041 From Akira Actor / other Date Not recorded > Waiting for your reply on Monday. Not later.
-
Message 042 From Victim Victim Date Not recorded > Okay we have been able to come closer to your amount, but it's still unattainable for us. We can offer you $62,000 and to be honest we don't believe that we will be able to really increase it anymore from here. We are tapping into all of our resources for you right now.
-
Message 043 From Akira Actor / other Date Not recorded > Hello. We appreciate this step on your part. We can't accept $62k but we're willing to come down to $90,000 and get this resolved finally.
-
Message 044 From Victim Victim Date Not recorded > $90,000 is going to be quite the challenge for us to get to. We are going to update the board with your new price, but we don't know what they will be able to do to come up with the remainder. Can you give us a day or two to try to figure this out. We want this situation to be put behind us so hopefully we have an update sooner rather than later.
-
Message 045 From Akira Actor / other Date Not recorded > Standing by.
-
Message 046 From Akira Actor / other Date Not recorded > You have 24 hours to give us your decision regarding this deal. If you stay silent, we will announce the breach on our blog.
-
Message 047 From Victim Victim Date Not recorded > We are still here. It has been difficult to come up with more money. We expect an update end of day Friday though
-
Message 048 From Akira Actor / other Date Not recorded > We have to agree to the sum before Friday. We will either come to an agreement this week or will cancel the deal. Hope you're interested in a win-win resolution.
-
Message 049 From Victim Victim Date Not recorded > Understood
-
Message 050 From Akira Actor / other Date Not recorded > You can find your company name in our news column: https://akiral2iz6a7qgd3ayp3l6yub7xx2uep76idk3u2kollpj5z3z636bad.onion If you want this post to be removed, we have to agree on something.