extortion.wiki THE RANSOMWARE DOCUMENTARY ARCHIVE
Menu

242 negotiations · 332 notes · snapshots Jul 06, 2026 / Jun 26, 2026

Dragonforce — C42CDF65B97D0E92

Date not recorded

From extortion.wiki, the ransomware negotiation research archive

A validated static rendering of 30 messages in source-array order. Transcript text is preserved without editorial additions.

Actor
Dragonforce
Record date
Date not recorded
Messages
30
Participants
dragonforce, victim

Preserved messages

Actor / other Victim

Select a message number for a stable citation link. Text remains selectable; hard-wrapped source lines are joined for reading, intentional blank-line paragraph breaks remain, and written URLs remain inert.

  1. Message 001 From victim Victim Date

    We found your note. What did you do to our systems?

  2. Message 002 From dragonforce Actor / other Date

    tree.7z filesize:895892

  3. Message 003 From dragonforce Actor / other Date

    List of files that we downloaded from your corporate network.

  4. Message 004 From dragonforce Actor / other Date

    At the first stage, you can select 1-3 files to ensure that we have them. At the second stage, you should check our decryption program. On the chat page, you will be able to get acquainted with our FAQ.

  5. Message 005 From dragonforce Actor / other Date

    In your server at 192.168.3.11, we used TrueCrypt. If you want to save your data, then don't touch the hard drive. And if we agree, you will have the opportunity to restore all the data.

  6. Message 006 From victim Victim Date

    Thank you for the tree. I will provide that to our leadership. While we are communicating with you, can you please remove our name from your blog?

  7. Message 007 From dragonforce Actor / other Date

    ok.

  8. Message 008 From victim Victim Date

    Leadership is reviewing the tree and will select the files to send you. What is this going to cost us?

  9. Message 009 From dragonforce Actor / other Date

    The price for decrypting and deleting your files from our servers is 60 BTC. If a quick payment is made, I will discuss with my colleagues a discount for your company.

  10. Message 010 From victim Victim Date

    Here are the files that leadership selected:

  11. Message 011 From victim Victim Date

    Service Centers are Closed Due to Bad Weather.doc Walking Results 2005-3.doc Q2 2023 ATA_ ECON_Webinar.pdf ERY driving directions.xls Buffalo Bid April 2015.xls

  12. Message 012 From dragonforce Actor / other Date

    ok, wait.

  13. Message 013 From dragonforce Actor / other Date

    files.7z filesize:1097058

  14. Message 014 From dragonforce Actor / other Date

    If you expect a good discount, then you should speed up your negotiations with us. Have you received the files?

  15. Message 015 From victim Victim Date

    We just received them. I will give them to leadership and we will be in touch shortly

  16. Message 016 From dragonforce Actor / other Date

    Ok.

  17. Message 017 From victim Victim Date

    Are we able to test your tool?

  18. Message 018 From dragonforce Actor / other Date

    Yes, you do have the opportunity to do this.

  19. Message 019 From dragonforce Actor / other Date

    You are on the test decryption page (Stage 2), you can upload the file and it will be decrypted automatically.

  20. Message 020 From victim Victim Date

    Ok thank you. Our MSP has left for the day and now that it is the weekend he will not return until Monday. Can we test it then please. We know your time is valuable and we are not trying to waste it.

  21. Message 021 From dragonforce Actor / other Date

    We will extend the deadline, but please keep in mind that if we do not start more meaningful negotiations next week, we will not wait for you. See you on Monday.

  22. Message 022 From victim Victim Date

    For some reason, we are having an issue with testing the file on your free test on the other page. We will keep trying, but I have the files here as well: https://dropmefiles.com/zj0I7

  23. Message 023 From dragonforce Actor / other Date

    Ok. Wait.

  24. Message 024 From dragonforce Actor / other Date

    [Redacted] Samples.7z filesize:1468

  25. Message 025 From dragonforce Actor / other Date

    Perhaps publishing on our excellent blog will expedite the negotiation process with you?

  26. Message 026 From victim Victim Date

    There is no need to publish anything. We have been experiencing network connectivity issues throughout and all information must be relayed to my leadership. This takes some time. I will be back in touch very soon.

  27. Message 027 From dragonforce Actor / other Date

    ok.

  28. Message 028 From victim Victim Date

    Our board requires 100% unanimous voting in able for us to move forward with you. We have one member who is not scheduled to return until Monday. We do want to come to a resolution with you. We know that your time is very valuable and we just want to show complete visibility and communication letting you know that we are trying on our end. Please do not release any of our data until after our board can meet.

  29. Message 029 From dragonforce Actor / other Date

    Agreed, we await Monday.

  30. Message 030 From victim Victim Date

    Thank you.