extortion.wiki THE RANSOMWARE DOCUMENTARY ARCHIVE
Menu

242 negotiations · 332 notes · snapshots Jul 06, 2026 / Jun 26, 2026

Avaddon — 20210430

Dated record

From extortion.wiki, the ransomware negotiation research archive

A validated static rendering of 103 messages in source-array order. Transcript text is preserved without editorial additions.

Actor
Avaddon
Record date
Apr 30, 2021
Messages
103
Participants
Avaddon, Victim

Preserved messages

Actor / other Victim

Select a message number for a stable citation link. Text remains selectable; hard-wrapped source lines are joined for reading, intentional blank-line paragraph breaks remain, and written URLs remain inert.

  1. Message 001 From Avaddon Actor / other Date

    Hello from Avaddon Team.Price for you is $300,000. We have downloaded a lot of critical data, which will be published on our news website (http://avaddongun7rngel.onion) if you do not make a payment. After the payment we will decrypt all your systems, give you listing of files that we have taken, remove data from our servers and give you proofs of deletion. Also we will provide you with security report, so you can fix all your vulnerabilities and be safe again.

  2. Message 002 From Avaddon Actor / other Date

    We are ready to talk to you and discuss on this matter....

  3. Message 003 From Victim Victim Date

    hi

  4. Message 004 From Victim Victim Date

    is anyone here?

  5. Message 005 From Avaddon Actor / other Date

    Hello!

  6. Message 006 From Victim Victim Date

    wnat to talk to you about this situation

  7. Message 007 From Victim Victim Date

    your price is very expensive for us

  8. Message 008 From Victim Victim Date

    300.000$ is our 3 year budget

  9. Message 009 From Victim Victim Date

    tell us the real possible price and we ready to pay

  10. Message 010 From Avaddon Actor / other Date

    How much can you pay at most?

  11. Message 011 From Victim Victim Date

    give me 5 minute

  12. Message 012 From Victim Victim Date

    i will talk with my chief

  13. Message 013 From Avaddon Actor / other Date

    ok

  14. Message 014 From Victim Victim Date

    redy to pay 3000$

  15. Message 015 From Avaddon Actor / other Date

    This is a joke?

  16. Message 016 From Avaddon Actor / other Date

    Your price is $ 300,000.

  17. Message 017 From Victim Victim Date

    300.000$ is a joke

  18. Message 018 From Victim Victim Date

    becauuse we havn't this amount of money

  19. Message 019 From Victim Victim Date

    3000$ we can pay or go ahead to reainstall all our systems

  20. Message 020 From Victim Victim Date

    search on map our country Armenia

  21. Message 021 From Victim Victim Date

    300.000 is out country budget how we can pay this kind of money?

  22. Message 022 From Avaddon Actor / other Date

    Perhaps the price is too high for you and we are ready to make a small discount.

  23. Message 023 From Avaddon Actor / other Date

    But on $ 3,000 we will never agree.

  24. Message 024 From Avaddon Actor / other Date

    Reinstalling all systems and restoring the workflow will take a very long time and you will incur heavy losses. The best option would be to pay and get back to normal quickly.

  25. Message 025 From Victim Victim Date

    yes you are right

  26. Message 026 From Victim Victim Date

    we will lose money while trying to reainstall all systems and getting back informtion from external backups

  27. Message 027 From Victim Victim Date

    but don't lose so much as you want

  28. Message 028 From Victim Victim Date

    3000$ ready to pay, agree or not?

  29. Message 029 From Avaddon Actor / other Date

    We have a lot of your important files that we will publish on our blog if you do not cooperate with us.

  30. Message 030 From Victim Victim Date

    I know all this

  31. Message 031 From Victim Victim Date

    but we havn't money!

  32. Message 032 From Victim Victim Date

    what can we do?!

  33. Message 033 From Avaddon Actor / other Date

    You will never be able to get your files back without our decryptor! Only we have a unique key to decrypt your files. Don't waste time and money trying to decrypt files yourself.

  34. Message 034 From Victim Victim Date

    I know that very well

  35. Message 035 From Victim Victim Date

    I comunicate with you before

  36. Message 036 From Victim Victim Date

    I know all this processes

  37. Message 037 From Victim Victim Date

    and now that we cant decrypt our files

  38. Message 038 From Victim Victim Date

    we just can reinstall all systemss and restore backups but it will take too long for us

  39. Message 039 From Avaddon Actor / other Date

    We are ready to make a very big discount for you. If you pay within 67 hours, we will offer you a 50% discount. Then the price will again be $ 300,000.

  40. Message 040 From Victim Victim Date

    so we ready to pay as much as we can

  41. Message 041 From Avaddon Actor / other Date

    Now you need to pay $ 150,000.

  42. Message 042 From Victim Victim Date

    what's your name?

  43. Message 043 From Avaddon Actor / other Date

    It does not matter.

  44. Message 044 From Victim Victim Date

    you know our country?

  45. Message 045 From Victim Victim Date

    how the small firm in Armenia can pay you 150.000?

  46. Message 046 From Victim Victim Date

    my house cost 15.000$ in all

  47. Message 047 From Avaddon Actor / other Date

    Sir, you are offering us a ridiculous price, it does not suit us at all. Before we set you a price of $150,000, we analyzed your profitability and your capabilities in general, this price was taken not from the sky, but according to specific criteria, and by analysis.

  48. Message 048 From Victim Victim Date

    what can I say, your analysis is wrong...

  49. Message 049 From Victim Victim Date

    last time a year ago I paid 1700$ for your decrypting key

  50. Message 050 From Avaddon Actor / other Date

    And we will tell you that $ 15,000 is still not enough, and we do not agree to such a small amount. Suggest more or we will use other methods. We can share your financial statements, your employee and customer data, and more in the public domain. Use DDOS. We can completely ruin the reputation of your business. Then you will have a lot of problems and you will suffer a lot of damage. You choose...

  51. Message 051 From Victim Victim Date

    I don't event suggest 15.000$, because I havn't

  52. Message 052 From Avaddon Actor / other Date

    We want to talk to your boss.

  53. Message 053 From Victim Victim Date

    I called him, will be here in 15 minutes

  54. Message 054 From Victim Victim Date

    Hi, I'm CEO

  55. Message 055 From Victim Victim Date

    my name is [redacted]

  56. Message 056 From Victim Victim Date

    ready to cooperate with you...

  57. Message 057 From Avaddon Actor / other Date

    Hello, [redacted]!

  58. Message 058 From Avaddon Actor / other Date

    Are you already aware of the situation?

  59. Message 059 From Victim Victim Date

    yes, of course

  60. Message 060 From Victim Victim Date

    but unfortunately your requirements are in not compatible with the budget of our company...

  61. Message 061 From Avaddon Actor / other Date

    How much can you offer? As we already wrote, the amount of $ 15,000 or $ 20,000 does not interest us.

  62. Message 062 From Victim Victim Date

    :)

  63. Message 063 From Victim Victim Date

    and how much you want if you don't agree with 15.000 or 20.000?

  64. Message 064 From Avaddon Actor / other Date

    You're not serious! You do not understand the magnitude of the problems for your company. Are you ready to incur losses and ruin your reputation or will you cooperate and offer a higher amount?

  65. Message 065 From Avaddon Actor / other Date

    We have already offered you a very large discount, which we do not do for other clients. We have made a 50% discount for you.

  66. Message 066 From Victim Victim Date

    I asked how much you want?

  67. Message 067 From Victim Victim Date

    I perfectly understand all the risks

  68. Message 068 From Avaddon Actor / other Date

    The price for you is $ 150,000.

  69. Message 069 From Avaddon Actor / other Date

    After the expiration of the time, the price will double and then it will be $ 300,000.

  70. Message 070 From Victim Victim Date

    it's not serious my company is not able to pay you that kind of money let my IT specialists stay awake for several days and restore archives or pay you this money as they want

  71. Message 071 From Victim Victim Date

    by

  72. Message 072 From Avaddon Actor / other Date

    You cannot recover files without our unique key.

  73. Message 073 From Avaddon Actor / other Date

    You have 66 hours to start working with us or you will have a lot of problems.

  74. Message 074 From Avaddon Actor / other Date

    After 7 o'clock your amount to double. This is the last chance to pay at such a low price.

  75. Message 075 From Avaddon Actor / other Date

    Hi guys are you there?

  76. Message 076 From Avaddon Actor / other Date

    Contact us if you see this, it looks like we have a misunderstanding.

  77. Message 077 From Victim Victim Date

    hi

  78. Message 078 From Victim Victim Date

    what you mean?

  79. Message 079 From Avaddon Actor / other Date

    Sir, we found out that one of the branches of your network is located in Armenia, our policy of work does not allow working in the CIS countries, so we will give you a decryptor general with which you can decrypt your entire network. We strongly apologize for this unpleasant incident and would like to say that we will help you restore your systems even if you have any problems.

  80. Message 080 From Victim Victim Date

    really? this is a great news

  81. Message 081 From Victim Victim Date

    despite the fact that we already recover most of our information, we will be thankful if you give us the key

  82. Message 082 From Avaddon Actor / other Date

    You can download the decryptor.

  83. Message 083 From Victim Victim Date

    from where? give link please

  84. Message 084 From Victim Victim Date

    is it free software?

  85. Message 085 From Avaddon Actor / other Date

    http://avaddonbotrxmuyl.onion/[redacted]/buy

  86. Message 086 From Victim Victim Date

    look like it's work...

  87. Message 087 From Victim Victim Date

    can you also help us to understand how you did that?

  88. Message 088 From Victim Victim Date

    we want to found out loophole in our network

  89. Message 089 From Avaddon Actor / other Date

    Weak passwords.

  90. Message 090 From Victim Victim Date

    but how you could come in to our network?

  91. Message 091 From Avaddon Actor / other Date

    I will clarify this point.

  92. Message 092 From Victim Victim Date

    we will wait for your clarifying ant will be very thankful for your support

  93. Message 093 From Avaddon Actor / other Date

    Ok

  94. Message 094 From Avaddon Actor / other Date

    You guys should do penetration tests more often. Hire a professional company and they will find all loopholes in your network. It will cost you few ten thousends but you will be safe.

  95. Message 095 From Avaddon Actor / other Date

    Update all services with outside internet, especially Ms Exchange server.

  96. Message 096 From Victim Victim Date

    you used zerologon exploit?

  97. Message 097 From Avaddon Actor / other Date

    We cannot say anything more for security reasons for personal purposes.

  98. Message 098 From Victim Victim Date

    ok, we understood, thanks for information, we will upgrade our exchange server and do several things for security

  99. Message 099 From Avaddon Actor / other Date

    Ok guys, excuse us again, I hope you didn't report this to the police?:)

  100. Message 100 From Victim Victim Date

    ))

  101. Message 101 From Avaddon Actor / other Date

    What does it mean?:)

  102. Message 102 From Victim Victim Date

    don't worry about that

  103. Message 103 From Avaddon Actor / other Date

    Ok sir, good luck