extortion.wiki THE RANSOMWARE DOCUMENTARY ARCHIVE
Menu

242 negotiations · 332 notes · snapshots Jul 06, 2026 / Jun 26, 2026

Avaddon — 20210518_2

Dated record

From extortion.wiki, the ransomware negotiation research archive

A validated static rendering of 24 messages in source-array order. Transcript text is preserved without editorial additions.

Actor
Avaddon
Record date
May 18, 2021
Messages
24
Participants
Avaddon, Victim

Preserved messages

Actor / other Victim

Select a message number for a stable citation link. Text remains selectable; hard-wrapped source lines are joined for reading, intentional blank-line paragraph breaks remain, and written URLs remain inert.

  1. Message 001 From Victim Victim Date

    привет

  2. Message 002 From Avaddon Actor / other Date

    Hello! Chat in English.

  3. Message 003 From Victim Victim Date

    hi

  4. Message 004 From Victim Victim Date

    how can i change my avatar?

  5. Message 005 From Victim Victim Date

    how much?

  6. Message 006 From Avaddon Actor / other Date

    Where are you from?

  7. Message 007 From Victim Victim Date

    Kazakhstan

  8. Message 008 From Victim Victim Date

    we don't have so big money you asking

  9. Message 009 From Avaddon Actor / other Date

    Wait a bit, we'll get back to you soon.

  10. Message 010 From Victim Victim Date

    ok

  11. Message 011 From Avaddon Actor / other Date

    tell me what kind of company are you?

  12. Message 012 From Avaddon Actor / other Date

    what do you do? do you have your own website? We do not work in the CIS countries and if we make sure that you are a company located in the CIS, then we will decrypt you for free.

  13. Message 013 From Victim Victim Date

    we are small wellding company who has finance problems at the moment.

  14. Message 014 From Avaddon Actor / other Date

    Hey! We need proof of your identity. If you provide us with a photo of your documents and face, we will give you a decryptor free of charge.

  15. Message 015 From Avaddon Actor / other Date

    Make a photo of your passport against your face. Then make a photo of the passport on the background of the monitor with encrypted files, you can open the properties of the file. Send us a photo through the service https://www.sendspace.com/

  16. Message 016 From Victim Victim Date

    ok. Thanks.

  17. Message 017 From Victim Victim Date

    https://www.sendspace.com/file/[redacted]

  18. Message 018 From Victim Victim Date

    here is a link to photos

  19. Message 019 From Avaddon Actor / other Date

    We apologize for this situation, this is an accident. We do not work in the CIS countries.

  20. Message 020 From Avaddon Actor / other Date

    You can download the decryptor on your payment page, update it. Run the decryptor according to the instructions.

  21. Message 021 From Victim Victim Date

    thanks.

  22. Message 022 From Victim Victim Date

    i wonder how you getting access?))))

  23. Message 023 From Avaddon Actor / other Date

    About vulnerabilities in your network. These are weak passwords and old operating systems, the operating systems that you used have vulnerabilities, with the help of them an attack was carried out on your network. Use strong passwords and hide them as best as possible and update all your OS to the latest versions.

  24. Message 024 From Victim Victim Date

    thanks a lot!!