Darkside — You must pay $ 250000 5.51 BTC (+20%) or 603.89 XMR
Dated recordFrom extortion.wiki, the ransomware negotiation research archive
A validated static rendering of 63 messages in source-array order. Transcript text is preserved without editorial additions.
- Actor
- Darkside
- Record date
- Apr 13, 2021
- Messages
- 63
- Participants
- Darkside, Victim
Preserved messages
Actor / other Victim
Select a message number for a stable citation link. Text remains selectable; hard-wrapped source lines are joined for reading, intentional blank-line paragraph breaks remain, and written URLs remain inert.
-
Message 001 From Victim Victim Date Is this support?
-
Message 002 From Darkside Actor / other Date Yes, of course whats ups?
-
Message 003 From Darkside Actor / other Date Tomorrow we will publicate your data
-
Message 004 From Victim Victim Date Tomorrow? We just got more information on this because IT didn't tell us about this site. We want to learn more about your offering.
-
Message 005 From Darkside Actor / other Date Tomorrow, of course, we done attack week ago, you didnt came online, tomorrow we will add local mass media, and attack your infrastructure by IP. thats our plan, on today, because you didnt start dialog with us.
-
Message 006 From Victim Victim Date We didn't even know what was going on and we were misinformed. We can't pay by tomorrow since we're just learning about this. Can you give us more time so that we can handle this appropriately?
-
Message 007 From Darkside Actor / other Date Your price is settled up, you are small client for us. Make your choice today - you will be listed, or close question with us.
-
Message 008 From Darkside Actor / other Date In case of close question nobody will now about this issue.
-
Message 009 From Victim Victim Date We can't pay $600,000 by tomorrow. We're not sure what we can pay but we will certainly see what is available. Can you show us some data that you have?
-
Message 010 From Victim Victim Date Do we have your word that you will not list us tomorrow?
-
Message 011 From Darkside Actor / other Date We have full dumped your network by data, of course we can show
-
Message 012 From Darkside Actor / other Date After payment you will get full file tree of stolen data.
-
Message 013 From Darkside Actor / other Date After payment you will get: decrypt your system (network) file tree of data, and i will explain your black holes, (network audit) discount we cant make, sorry. You came too late on dialog, thats your problem.
-
Message 014 From Darkside Actor / other Date We will not list your tomorrow, in case of agreement.
-
Message 015 From Darkside Actor / other Date Sorry thats our buisness, we are only interested in to take money.
-
Message 016 From Victim Victim Date Okay, that is understood, but can we see anything that you have taken?
-
Message 017 From Darkside Actor / other Date You are very small client, see your infrastructure, after agreement and payment 1) we will decrypt instantly your network 2) if you need - provide file tree, with all taken files 3) delete data from our servers
Some random files for proof: https://www.sendspace.com/file/[redacted] https://www.sendspace.com/delete/[redacted]/c5421cf9271e05e7b323e000d9283ec8 pass: [redacted]
Don`t waste our time, how we don`t wasting your. Rules for all clients same.
Thank for understanding
-
Message 018 From Victim Victim Date We're not here to waste time. We're sorry for joining late. We'll review and get back to you.
-
Message 019 From Darkside Actor / other Date Files where randomizded.
-
Message 020 From Darkside Actor / other Date When will be done payment?? Or We should continue attacks?
-
Message 021 From Victim Victim Date We are still reviewing the information. We only found out about the $600,000 price. Our intention is not to push this to the side, but we need some time to figure out what we can afford. This is the first time we are dealing with this type of issue.
-
Message 022 From Darkside Actor / other Date Whats your offer?
-
Message 023 From Darkside Actor / other Date I know your resources very well, after your offer i will explain you what is what
-
Message 024 From Victim Victim Date We have a meeting set for tomorrow morning to discuss finances. Can we get back to you in the morning?
-
Message 025 From Darkside Actor / other Date yes price you can see, i dont know about you want to talk, search money. and we will do things, in other cay we are not interested in dialog.
-
Message 026 From Darkside Actor / other Date money money, can help you
-
Message 027 From Darkside Actor / other Date Dont waste your time, as our. Its not our politic how we working, if you have money, we can talk,if you dont have, than we can go by sides. we doesnt work like this
-
Message 028 From Darkside Actor / other Date Price you can see in your administration panel.
-
Message 029 From Victim Victim Date Yes, but we will get back to you in the morning after the meeting. Is this okay?
-
Message 030 From Darkside Actor / other Date Yes, OK.
-
Message 031 From Victim Victim Date As promised, we spoke today and can make an initial offer. It's been a tough year for us and we're a tiny company. We hope you can see that. Based on a few loans we received, we can pay you $110,000. If this price is not suitable, then we'll need to look at outside sources for cash. We're a small shop and don't have access to easy funding.
-
Message 032 From Darkside Actor / other Date Then if your business doesnt gaving you profit, you should think about - close business like this.
-
Message 033 From Darkside Actor / other Date We can do our best, give you some discount, but not big like you want
-
Message 034 From Victim Victim Date We just need a price we can afford. What type of discount can you give us?
-
Message 035 From Darkside Actor / other Date 10%.
-
Message 036 From Victim Victim Date So $540,000?
-
Message 037 From Victim Victim Date If that's the case, then we really have a lot of work to do here. We can't take on so much debt considering our size.
-
Message 038 From Victim Victim Date Are there any other files you can provide us so that we have more bargaining power with lenders?
-
Message 039 From Darkside Actor / other Date We have already given files and a good discount.
-
Message 040 From Victim Victim Date You're asking 5x more than what we can afford to pay. We're putting ourselves on the line and potentially in more debt as we speak with lenders. We can't take all this on if we don't know what we're paying for. All we need is some help from you.
-
Message 041 From Darkside Actor / other Date Last evidence pack, other requests will be regarded as a waste of our time. The package contains a variety of documents from different directories ------- 457 Megabytes Download: https://bashupload.com/JrSuB/[redacted].rar
Password: FKL59MBY}c?Uox~d$4QCNnVAE0@yOvmC
-
Message 042 From Victim Victim Date We're looking. Thanks
-
Message 043 From Victim Victim Date We see the data but we can't just print money and pay. We really need a few days to see what other funding options we have. Can we get back to you early next week with our options?
-
Message 044 From Darkside Actor / other Date OK.
-
Message 045 From Victim Victim Date Thanks
-
Message 046 From Victim Victim Date We will have more news for you later today
-
Message 047 From Victim Victim Date Your price is still not possible for us but we do have a better offer for you. We have an initial agreement with a funding source and can pay you $200,000. You are asking a lot from a company of our size and we are giving you all we can. Please let us know
-
Message 048 From Darkside Actor / other Date Thanks for your offer, last what we can offer - is change price right now to 250 000 USD, and you will pay money in 24 hours, other offers we don`t have, because time cost money. We are doing very big discount for you. After payment you will get - full decrypt of your systems, and we will delete all your data from our servers.
-
Message 049 From Victim Victim Date Yes, this is a very big discount indeed. It's still more money than what we have but we'll get back to you ASAP tomorrow once we review. Thank you.
-
Message 050 From Darkside Actor / other Date We pleasure your opinion - tomorrow we waiting payment from your side. Discount is very big - we never do discounts like this - we work on mathematical algorithms. As well this discount where decided by team - its not agreement by one person. We done our best. We changing price right now, tomorrow we waiting for payment.
Have a nice day
-
Message 051 From Darkside Actor / other Date Refresh page, price changed - tomorrow we waiting for money. Good luck
-
Message 052 From Victim Victim Date We held an emergency meeting. The lender was not happy but they are discussing this and they understand the urgency. We told them that we need to hear from them today but they have to get their own approval first. Can we reach out to you tomorrow with their decision? We really don't want to let this slip away.
-
Message 053 From Darkside Actor / other Date We told, our rules, please guys be serious, situation by your side, not by our. We already get agreement in our team about price witch we done, it`s very good discount we know that in your hands have possibility to pay amount of money witch we getting agreement. Price where settled up, you can start pay by parts, it`s not problem.
-
Message 054 From Victim Victim Date We completely understand. We just can't commit to a price until we speak to the lender, because they're in control of the money. They'll have news for us tomorrow.
-
Message 055 From Victim Victim Date Alright. The lender agreed! They're going to wire us the money tomorrow and our bitcoin broker will be able to pay you early next week. Can you confirm what we'll receive from you?
-
Message 056 From Darkside Actor / other Date Your payment currency is XMR (monero) not bitcoins.
-
Message 057 From Victim Victim Date Can you confirm what we will receive from you?
-
Message 058 From Darkside Actor / other Date Yes. - Windows decryptor. - Deleting data and blog post. - Support for 2 days after decryption.
-
Message 059 From Victim Victim Date Okay we will be able to pay monero next week
-
Message 060 From Darkside Actor / other Date What date?
-
Message 061 From Victim Victim Date Aiming for the 27th
-
Message 062 From Darkside Actor / other Date Ok
-
Message 063 From Darkside Actor / other Date If you don't contact us within the next 24 hours we will publish your data