Akira — 20250328

Select a message number for a stable citation link. Text remains selectable; hard-wrapped source lines are joined for reading, intentional blank-line paragraph breaks remain, and written URLs remain inert.

1. Message 001 From Victim Victim Date Not recorded

   > Hello, we found notes on our systems and can’t get into our files. The text file said to download this browser and contact someone at this link. What is going on and how do we get our data and systems back up and going?

2. Message 002 From Akira Actor / other Date Not recorded

   > Hello. You've reached an Akira support chat. Currently, we are preparing the list of data we took from your network. For now you have to know that dealing with us is the best possible way to settle this quick and cheap. Keep in touch and be patient with us. We will reach out to you soon. Do you have a permission to conduct a negotiation on behalf of your organization? Once we get a response you will be provided with all the details.

3. Message 003 From Victim Victim Date Not recorded

   > Yes, I have permission to speak with you from our leadership. Please provide us with the details when you have a chance.

4. Message 004 From Akira Actor / other Date Not recorded

   > List.rar // 104 KB

5. Message 005 From Akira Actor / other Date Not recorded

   > These files were taken from your network prior to encryption. You can pick 2-3 random files up to 10 MB each from the list and we will upload them to this chat as a proof of possession. To prove that we can properly decrypt your data you can upload 2-3 encrypted files up to 10 MB each to our chat and we will upload decrypted copies back. We're looking through your financial papers to come up with a reasonable demand to you. We offer: 1) full decryption assistance; 2) evidence of data removal; 3) security report on vulnerabilities we found; 4) guarantees not to publish or sell your data; 5) guarantees not to attack you in the future. Let me know whether you're interested in a whole deal or in parts. This will affect the final price.

6. Message 006 From Victim Victim Date Not recorded

   > We have reviewed the file listing you sent and we'd like to request the following files be sent to us:

7. Message 007 From Victim Victim Date Not recorded

   > D:\DATA\[redacted].com\[redacted].xlsx

8. Message 008 From Victim Victim Date Not recorded

   > D:\DATA\[redacted].com\[redacted].xlsx

9. Message 009 From Victim Victim Date Not recorded

   > D:\DATA\[redacted].com\[redacted].txt

10. Message 010 From Akira Actor / other Date Not recorded

    > Please wait.

11. Message 011 From Akira Actor / other Date Not recorded

    > Files.rar // 14.6 KB

12. Message 012 From Akira Actor / other Date Not recorded

    > Here are the files. Do you want to test our decryption tool?

13. Message 013 From Akira Actor / other Date Not recorded

    > Are you going to work with us?

14. Message 014 From Akira Actor / other Date Not recorded

    > You have 24 hours to give us your decision regarding this deal. If you stay silent, we will announce the breach on our blog.

15. Message 015 From Victim Victim Date Not recorded

    > Hello, we are wanting to get this to some sort of resolution, but I don't see where you've even asked for anything yet. Can you provide us with that and please stop sending emails out to employees? We will communicate with you here and only here.

16. Message 016 From Akira Actor / other Date Not recorded

    > We're willing to set a $850,000 price for ALL the services we offer. We accept payments in BTC. To gain bitcoins you need to go to any exchange platform as binance or coinbase. Here are the guides: https://www.coinbase.com/how-to-buy/bitcoin https://www.binance.com/en/how-to-buy/bitcoin You also can buy bitcoin from any local brokers. If you withdraw funds from your bank account, then you have to inform the bank that you need this money for investment purposes only. If you need to test our decryption tool, today is the your last chance to provide encrypted files.

17. Message 017 From Victim Victim Date Not recorded

    > Okay, we do not have anywhere near that amount, and our executive team wants to know that you can actually fix our servers and files if we pay you. How do we send you files?

18. Message 018 From Akira Actor / other Date Not recorded

    > The price is justified. To prove that we can properly decrypt your data you can upload 2-3 encrypted files up to 10 MB each to our chat and we will upload decrypted copies back.

19. Message 019 From Victim Victim Date Not recorded

    > Okay, the files are attached.

20. Message 020 From Victim Victim Date Not recorded

    > [redacted].xml.akira // 3.67 KB

21. Message 021 From Victim Victim Date Not recorded

    > [redacted].ps1.akira // 805 Bytes

22. Message 022 From Victim Victim Date Not recorded

    > [redacted].txt.akira // 13.9 KB

23. Message 023 From Akira Actor / other Date Not recorded

    > Please wait.

24. Message 024 From Akira Actor / other Date Not recorded

    > Decrypted.7z // 5 KB

25. Message 025 From Akira Actor / other Date Not recorded

    > Here are the files. Are you ready to proceed with payment?

26. Message 026 From Victim Victim Date Not recorded

    > Okay, whats your bottom dollar? We want to move on from this.

27. Message 027 From Akira Actor / other Date Not recorded

    > We've already provided the price. It is $850,000. Are you interested in the whole deal?

28. Message 028 From Victim Victim Date Not recorded

    > What do you mean by whole deal? We cannot afford anywhere near this 850k amount you’ve asked for. If you have better pricing for various parts of the whole deal, I can take it to our next meeting.

29. Message 029 From Akira Actor / other Date Not recorded

    > 1) Full decryption assistance $600,000; 2) evidence of data removal $350,000; 3) security report on vulnerabilities we found $35,000; Guarantees are included to the option 2. It looks like our negotiations are dragging on. Let us know your decision asap, as we need to close the case.

30. Message 030 From Akira Actor / other Date Not recorded

    > What's your decision?

31. Message 031 From Victim Victim Date Not recorded

    > Okay, we've set up a board meeting for Monday afternoon. It's the earliest we could get everyone together because of the holiday weekend. We want to work with you to have our data deleted, and ask if that is your best price for that? The 350,000 is a lot of money and we highly doubt the Board will go for that.  What is the lowest price you'll accept for our data removal, to make our meeting easier to facilitate.

32. Message 032 From Akira Actor / other Date Not recorded

    > This is the lowest. Show the list of files to your board. That will force them to make the right decision. Also tell them that the files we took, will be published on darknet, if they refuse to pay what we ask.

33. Message 033 From Akira Actor / other Date Not recorded

    > Decisions?

34. Message 034 From Victim Victim Date Not recorded

    > Management made it clear during the Board meeting yesterday that 350,000 is way above our threshold to pay. Our CEO is aware of a larger company run by a good friend which had the same issue last year, and the settled for $20,000 for what you call the whole deal. So to just delete our data, the expectation is it shouldn't even be that high. If we could do the whole deal for 20,000, we could probably close it this week - if we could figure out how to buy and send bitcoin.

35. Message 035 From Akira Actor / other Date Not recorded

    > This friend seems to be trying to eliminate a competitor. We will not accept this offer and will make an announcement of the incident soon. If you receive an advice from another friend, please let us know asap.

36. Message 036 From Victim Victim Date Not recorded

    > You didn’t acknowledge the 20,000 we have on hand to pay you. Will you accept this? Otherwise we need you to work with us, we cannot come anywhere close to the amount you are demanding.

37. Message 037 From Akira Actor / other Date Not recorded

    > We're not going to discuss 5 figure sums. Don't waste our time.

38. Message 038 From Victim Victim Date Not recorded

    > Well, we do not have funds to get to your number. We need you to work with us in realistic amounts that can be achieved. If you actually want to reach an agreement.

39. Message 039 From Akira Actor / other Date Not recorded

    > $290,000 for the option 2 is the best what we can do. Let us know today, if you are interested. Otherwise, we will have to cancel the deal.