Avaddon — 20210112
Dated recordFrom extortion.wiki, the ransomware negotiation research archive
A validated static rendering of 25 messages in source-array order. Transcript text is preserved without editorial additions.
- Actor
- Avaddon
- Record date
- Jan 12, 2021
- Messages
- 25
- Participants
- Avaddon, Victim
Preserved messages
Actor / other Victim
Select a message number for a stable citation link. Text remains selectable; hard-wrapped source lines are joined for reading, intentional blank-line paragraph breaks remain, and written URLs remain inert.
-
Message 001 Avaddon Actor / other Hello, will you take the decryption or not?
-
Message 002 Victim Victim Hello There! I need help my test decryption not working
-
Message 003 Victim Victim u still there? Ready to pay!
-
Message 004 Victim Victim by now Github Decrypted my files, thanks!
-
Message 005 Avaddon Actor / other Hi sir
-
Message 006 Avaddon Actor / other What do you mean "by now Github Decrypted my files, thanks!"?
-
Message 007 Avaddon Actor / other Only we have a decryptor, no github decryptors will help you!
-
Message 008 Avaddon Actor / other Do not rejoice, you will not be able to unblock all your servers, only we can unblock your servers, you better pay, we even reduced the price for you from $ 1,000,000 to $ 200,000, you now better buy a decryption, and finish this business already
-
Message 009 Victim Victim Hey You know the guy that publish the free decryptor on githut and You seen it?
-
Message 010 Avaddon Actor / other we have already released a patch, so it won't help you another time)
-
Message 011 Avaddon Actor / other the more we doubt that you have decrypted files, because the decryptor can decrypt files under very specific conditions
-
Message 012 Avaddon Actor / other Have you seen the release of your important documents on our blog?
-
Message 013 Victim Victim I would like to know if You will come after me again.
-
Message 014 Victim Victim We cannot pay that even though! It is outrageous! We are drowing on debt, no payment will be released to You, We have no assurance of decryption as many customers of yours are complaining of issues decrypting their files after payment as well.;
-
Message 015 Victim Victim We have no problem starting from scratch, Our only concern is been hit a second time like One customer of Yours did.
-
Message 016 Avaddon Actor / other ok, enjoy leaking files on your blog. Our clients have no problems with decrypting files, you need to listen to negotiators less and then you will have no problems
-
Message 017 Victim Victim We don't want to listen to them That is Why i come in here myself!
-
Message 018 Victim Victim I am begging You
-
Message 019 Avaddon Actor / other and why are you writing here?
-
Message 020 Victim Victim Cause There is no place else to write. We Want to rear from You
-
Message 021 Avaddon Actor / other It's good that you contacted us yourself. Look, we are a serious organization and every month Avaddon General Decryptor is bought by hundreds of clients and there are no problems with decryption. Those comments that you read can be written by anyone, even people who have never worked with us, in order to lower our reputation. But this is pointless, since thousands of customers who bought our decryptor will refute information about the about poor performance ability of our software.
-
Message 022 Avaddon Actor / other If we do not agree on a price for the buyback and you do not pay, then we will wait until you fully restore your entire online infrastructure and we deliver a SECOND IMPACT, and believe me, this blow will be more destructive, you will lose a lot more money and get more problems. as there will be a second wave of data leakage which will be measured by terabytes of data. We are ready to discuss the new price with you and remove your company data from our data breach blog. After payment, we will give you a decryptor that will decrypt absolutely all PCs / servers on your network, delete the files (we will provide proofs that the files have been deleted) and provide you with a list of vulnerabilities, with the help of this list you can eliminate all the vulnerabilities in your network and this situation cannot happen again with you in the future
-
Message 023 Victim Victim Will You be Our consultant perhaps? Will You tell Us how you got in because We failed to diagnose the entry point, We just found the binary. Vulnerabilities are discovered everyday and yet We failed to fix Ours with your penetration at Our Network. How low can We get on a ransom? We already lost so much, If you hit Us one more time We will no option but declare bankruptcy.
-
Message 024 Avaddon Actor / other In what sense will I be your consultant?
-
Message 025 Avaddon Actor / other Look, you could write to us right away, we would have settled this issue and you resumed your work a few weeks ago, but for some reason you did not want to do this... Yes sir, vulnerabilities are found every day, but there were many holes in your network, we are ready to point you to them and tell you what to do so that they are closed, we will help you secure your network and if in the future you keep our advice it will be practically impossible to crack, but You will receive instructions on how to close the holes and secure your network only after payment. We understand that financial losses are possible in your business now and we understand perfectly well what will happen if we deliver the SECOND IMPACT, the second blow will mean an absolute collapse for you. We do not want to do this (we even reduced the price for you from 1kk to 200k), but we will have to if we do not now agree with you on the price for the buyback. Make a meeting with the management or people who are responsible for finances in your company, explain to them the current situation and what awaits you in the future, if we do not agree on the price for the ransom and offer us your price, we are waiting for an answer from you, because time is ticking, and for you, time is money.