extortion.wiki THE RANSOMWARE DOCUMENTARY ARCHIVE
Menu

242 negotiations · 332 notes · snapshots Jul 06, 2026 / Jun 26, 2026

Dragonforce — AB0404E049514B50

Date not recorded

From extortion.wiki, the ransomware negotiation research archive

A validated static rendering of 28 messages in source-array order. Transcript text is preserved without editorial additions.

Actor
Dragonforce
Record date
Date not recorded
Messages
28
Participants
Attacker, Victim

Preserved messages

Actor / other Victim

Select a message number for a stable citation link. Text remains selectable; hard-wrapped source lines are joined for reading, intentional blank-line paragraph breaks remain, and written URLs remain inert.

  1. Message 001 From Victim Victim Date

    Where is the listing is step 1?

  2. Message 002 From Attacker Actor / other Date

    tree.txt filesize:2352921

  3. Message 003 From Attacker Actor / other Date

    Here is the list of files.

  4. Message 004 From Victim Victim Date

    We will work on getting you the 3 files

  5. Message 005 From Victim Victim Date

    How did you all get in?

  6. Message 006 From Attacker Actor / other Date

    Data on the method of penetration and work within the network are provided only after successful completion of negotiations. We are waiting for your files to demonstrate the test decryption.

  7. Message 007 From Victim Victim Date

    Will work on that too

  8. Message 008 From Victim Victim Date

    Please provide us with the following files:

  9. Message 009 From Victim Victim Date

    [Redacted].pdf [Redacted].xlsx [Redacted].xlsx

  10. Message 010 From Attacker Actor / other Date

    [Redacted].xlsx filesize:1826490

  11. Message 011 From Attacker Actor / other Date

    [Redacted].pdf filesize:2490220

  12. Message 012 From Attacker Actor / other Date

    [Redacted].xlsx filesize:2774610

  13. Message 013 From Attacker Actor / other Date

    [Redacted].xlsx filesize:132809

  14. Message 014 From Victim Victim Date

    We will check theses out.

  15. Message 015 From Victim Victim Date

    Is this everything you have? What are you wanting from us?

  16. Message 016 From Attacker Actor / other Date

    Have you checked the decryption capability and made sure that we have the files?

  17. Message 017 From Victim Victim Date

    We could only decrypt one file but it worked from what we could tell and you sent us the files we requested from the list provided.

  18. Message 018 From Attacker Actor / other Date

    We can decrypt all the data back, and we will delete the data that is received from your network. The cost will be 500,000$

  19. Message 019 From Victim Victim Date

    Is that file listing you sent earlier 100% of the files?

  20. Message 020 From Attacker Actor / other Date

    This is the list that we have decided to share with you.

  21. Message 021 From Victim Victim Date

    What percentage is it?

  22. Message 022 From Attacker Actor / other Date

    This is the list that we have decided to share with you.

  23. Message 023 From Victim Victim Date

    That is a lot of money when we don't know everything you have

  24. Message 024 From Attacker Actor / other Date

    You have been provided with the necessary information. You can also see the countdown timer. Upon completion, the data will be published, and the decryption program will be deleted. You will not be able to recover data from recovery companies. After the timer expires, the decryptor will actually be deleted, and it will not be available for any money. These are standard terms and conditions, and you know it. The situation can be resolved quickly for the specified amount and continue working quietly. Think about it.

  25. Message 025 From Victim Victim Date

    Is there any wiggle room in the amount? That would be a lot to try to produce by the time the timer reaches zero.

  26. Message 026 From Attacker Actor / other Date

    Abstract conversation does not lead to success. Name the amount and the due date. And we will discuss it with you.

  27. Message 027 From Victim Victim Date

    We are having internal conversations here but it would be helpful for you all to give us a better starting point on the price

  28. Message 028 From Attacker Actor / other Date

    Starting point 500 000$