Conti — 20210805
Dated recordFrom extortion.wiki, the ransomware negotiation research archive
A validated static rendering of 47 messages in source-array order. Transcript text is preserved without editorial additions.
- Actor
- Conti
- Record date
- Aug 05, 2021
- Messages
- 47
- Participants
- Conti, Victim
Preserved messages
Actor / other Victim
Select a message number for a stable citation link. Text remains selectable; hard-wrapped source lines are joined for reading, intentional blank-line paragraph breaks remain, and written URLs remain inert.
-
Message 001 From Victim Victim Date Is anyone here? What do we have to do now?
-
Message 002 From Conti Actor / other Date Hello. In addition to encrypting your files, we also downloaded important data from your network. We can provide you with a list of the files that we took from you, from this list you can choose any 2 files to make sure that we have the physical presence of your files. You can also select any 2 files and send them to us and we will decrypt them for you to make sure that your decrypted key is working. In order to avoid disclosure of your data on our website contunews.icu, get the decrypt key and security advice, you must pay a ransom of $ 3.000.000
-
Message 003 From Victim Victim Date So you locked our files and took them? And we have to pay three million dollars to overcome this?
-
Message 004 From Victim Victim Date [redacted] Invoice for Transaction_ 549.pdf.[redacted] [ 10kB ]
-
Message 005 From Victim Victim Date Uploaded one file for you. Can you fix it and send the list?
-
Message 006 From Conti Actor / other Date [redacted] Invoice for Transaction_ 549.pdf [ 9kB ]
-
Message 007 From Conti Actor / other Date That's right, you have to pay $3 million to avoid publishing the files and get the decryption. We sent you the decrypted file. We will also send you a list of the files we took.
-
Message 008 From Victim Victim Date Thank you for sending this over. When will you send over the list of files that you took that you mentioned yesterday?
-
Message 009 From Conti Actor / other Date Hello, we haven't forgotten about you. We will send in the near future
-
Message 010 From Victim Victim Date Ok thank you, I appreciate the update. We are discussing the amount internally and will stand by for when the list is ready.
-
Message 011 From Conti Actor / other Date log.txt [ 3.8MB ]
-
Message 012 From Victim Victim Date Thanks we'll take a look tomorrow
-
Message 013 From Victim Victim Date These are all of the files?
-
Message 014 From Conti Actor / other Date Yes, these are all the files. We didn't take many files, but enough to publish and send to those who may be very interested in them in case our negotiations are not successful.
-
Message 015 From Victim Victim Date Okay thank you for the information, we will speak tomorrow
-
Message 016 From Conti Actor / other Date Ok
-
Message 017 From Victim Victim Date Hi is someone here?
-
Message 018 From Victim Victim Date We reviewed the data that you send and appreciate the full list in the text file. We are still trying to access internally the extent of the damage with our files that are locked. The board did tell me that there is no way we can pay $3,000,000 but we do want to work with you. Is there any way you could come down on the price and I will bring it to the board to see if they will approve?
-
Message 019 From Conti Actor / other Date We will make concessions and give you a 30% discount
-
Message 020 From Conti Actor / other Date Both you and we are well aware that you will incur losses many times greater than the amount requested if your files are published and your network is in an encrypted state. In addition, trying to recover your files yourself will result in their loss and destruction, keep in mind.
-
Message 021 From Victim Victim Date Ok thank you very much for this discount. I will prepare a meeting with the board and will get back to you as soon as possible with an update.
-
Message 022 From Conti Actor / other Date Okay.
-
Message 023 From Victim Victim Date Hi, I had a meeting with the board today and I need to have one with our finance department tomorrow afternoon. I'm really sorry for the delay, but because of how much money you are asking it requires a lot of sign off and approvals. I will write you here as soon as I finish with our finance team.
-
Message 024 From Conti Actor / other Date Ok
-
Message 025 From Victim Victim Date Are you here? I have some news
-
Message 026 From Victim Victim Date I really appreciate your patience with me the last few days and for the reduction to $2,100,000. I met with the board and the finance team over the last several days and based on the data that has been locked and what was taken we are prepared to offer you $210,550 and can send you the money before the end of the week.
-
Message 027 From Conti Actor / other Date No, we are not satisfied, these are ridiculous numbers. In 3 days we will start to publish your data on our website and send it to interested parties, also this chat will be deleted, in the future you will not be able to get a transcript. Good luck.
-
Message 028 From Victim Victim Date This was just our first offer based on what we currently know. Why are you responding to such an extreme. Everything I read online about conti said that you were good to work with and that you helped people. If you can't accept our offer, ok. But can you come down and allow me the opportunity to see if i can come up with more money? Please, we want to work with you on this to come to a quick and positive conclusion for us both.
-
Message 029 From Conti Actor / other Date Yes, we will give you that opportunity, we always make concessions. It seemed to us that you decided to play with us by naming such amounts. Have a good day and good luck.
-
Message 030 From Victim Victim Date Ok thank you! I did not mean to insult at all and I'm sorry if it came off that way. I will work to try and come up with a better number and will get back to you as soon as I can.
-
Message 031 From Conti Actor / other Date Okay, good luck.
-
Message 032 From Victim Victim Date Hello
-
Message 033 From Victim Victim Date I met with the board and the finance team again the last 24 hours and we are working hard to get you more money. We want to try and come up as much as we can because we do not want to offend you with another offer that may be to low. Can you please give us the weekend to try and pull together as much as we can and I will write you here on Monday early afternoon?
-
Message 034 From Conti Actor / other Date Hello
-
Message 035 From Conti Actor / other Date Yeah, no problem, we'll give you those deadlines. Have a good day.
-
Message 036 From Victim Victim Date Hi are you here? I have an update
-
Message 037 From Conti Actor / other Date Yes
-
Message 038 From Conti Actor / other Date What's the news?
-
Message 039 From Victim Victim Date We appreciate the extra time you gave us and got a lot more money. We're now able to pay you $325,550. We hope this can be a good concession
-
Message 040 From Conti Actor / other Date We really appreciate your efforts to get more money. These negotiations have been going on long enough, so let's settle for $500,000. After that, we'll give you the decryption key, return the files, and close this case.
-
Message 041 From Victim Victim Date I'm grateful for this! It's much closer to what we have than $2m. We may need the rest of the week to get more money, is this okay for you?
-
Message 042 From Conti Actor / other Date Yes, let's close this issue this week.
-
Message 043 From Victim Victim Date Ok I will keep checking in with you but I should hopefully have the remaining amount of funds by thursday, no later than friday. We have a full schedule today to try and identify the assets to use. I will reach out tomorrow with a further update. thank you again!
-
Message 044 From Conti Actor / other Date Okay, thank you.
-
Message 045 From Victim Victim Date Hi good morning, I just wanted to check in with you. It's looking like we're on track for Friday. We have a few meetings today and tomorrow and tomorrow afternoon we will be initiating a bank transfer which will take 24 hours to clear. I will check in with you again tomorrow to confirm everything is moving as scheduled.
-
Message 046 From Conti Actor / other Date Great. Now I will send you a bitcoin wallet, to which you need to send the amount, and then we will fulfill the conditions that we agreed on.
-
Message 047 From Conti Actor / other Date [redacted]