Nightspire — 20250428

Select a message number for a stable citation link. Text remains selectable; hard-wrapped source lines are joined for reading, intentional blank-line paragraph breaks remain, and written URLs remain inert.

1. Message 001 From Victim Victim Date 2025-04-28

   [redacted]

2. Message 002 From Nightspire Actor / other Date Not recorded

   How can I help you?

3. Message 003 From Victim Victim Date Not recorded

   Hi there. We are a small charity organization. We help poor communities with food and medicine. Can we please talk about this?

4. Message 004 From Nightspire Actor / other Date Not recorded

   Hello. Yes, we are online. Ransom demand is $85k in Bitcoin. We have all your donor lists and sensitive files.

5. Message 005 From Victim Victim Date Not recorded

   $85k? That's completely impossible for us. We are a non-profit with a very limited budget.

6. Message 006 From Nightspire Actor / other Date Not recorded

   We understand it's a charity. But we took real risk to get in. Payment or we start leaking data soon.

7. Message 007 From Victim Victim Date Not recorded

   Leaking would hurt our donors badly. It would also harm the vulnerable people we support every day. Please think about that.

8. Message 008 From Nightspire Actor / other Date Not recorded

   Ok, let's negotiate. Our minimum right now is $60k if you pay quickly.

9. Message 009 From Victim Victim Date Not recorded

   Even $60k is way too much. It would force us to cancel programs and lay off staff who help kids.

10. Message 010 From Nightspire Actor / other Date Not recorded

    Then tell me. What amount can your organization actually afford?

11. Message 011 From Victim Victim Date Not recorded

    After talking to our board, the absolute maximum we can raise is $10k dollars from emergency appeals.

12. Message 012 From Nightspire Actor / other Date Not recorded

    $10k is quite low for us. But since you're a charity, let's do a test first to build trust.

13. Message 013 From Victim Victim Date Not recorded

    Thank you. We can send 3 sample files for decryption proof. Is that okay?

14. Message 014 From Nightspire Actor / other Date Not recorded

    Yes. Upload them here. Maximum 10MB each, different file types please.

15. Message 015 From Victim Victim Date Not recorded

    Uploading now.

16. Message 016 From Victim Victim Date Not recorded

    I can't upload on this app.

17. Message 017 From Nightspire Actor / other Date Not recorded

    Using gofile.io

18. Message 018 From Victim Victim Date Not recorded

    Thanks. https://gofile.io/[redacted]

19. Message 019 From Nightspire Actor / other Date Not recorded

    Files received. Wait a mins.

20. Message 020 From Nightspire Actor / other Date Not recorded

    Decryption done. Here are your three files back, fully recovered and perfect.

21. Message 021 From Victim Victim Date Not recorded

    Thank you so much. We opened them and everything looks correct. No damage at all.

22. Message 022 From Nightspire Actor / other Date Not recorded

    Good proof. Because you're non-profit and cooperative, our special price now is $55k.

23. Message 023 From Victim Victim Date Not recorded

    $55k is still very difficult. We're begging major donors just to reach anywhere close to that.

24. Message 024 From Victim Victim Date Not recorded

    Honestly, the most we can realistically gather is 45,000 dollars without shutting down our core work.

25. Message 025 From Nightspire Actor / other Date Not recorded

    45,000? That's pushing it very low after all this effort on our side.

26. Message 026 From Victim Victim Date Not recorded

    Please understand. Every dollar we pay comes from people who donate to save lives. We have no more.

27. Message 027 From Victim Victim Date Not recorded

    If you accept 45k, we promise to pay quickly and keep everything quiet. No police, no publicity.

28. Message 028 From Nightspire Actor / other Date Not recorded

    ...Alright. For charity reasons and fast payment, we accept 45,000 USD as final. We want only BTC.

29. Message 029 From Victim Victim Date Not recorded

    Really? Thank you from the bottom of our hearts. We'll start preparing the Bitcoin right away.

30. Message 030 From Nightspire Actor / other Date Not recorded

    Here's the wallet address: bc1q[redacted]

31. Message 031 From Victim Victim Date Not recorded

    Got it. We're converting emergency funds now. It should take about 4 to 6 hours.

32. Message 032 From Nightspire Actor / other Date Not recorded

    Okay. We've paused the publication timer for you. Please don't delay too long.

33. Message 033 From Victim Victim Date Not recorded

    Update: we're halfway through buying the BTC. Compliance checks are slowing us a bit.

34. Message 034 From Victim Victim Date Not recorded

    Should be ready in another 2 hours or so. Thank you for your patience.

35. Message 035 From Nightspire Actor / other Date Not recorded

    No problem. Just send the transaction hash here when it's sent.

36. Message 036 From Victim Victim Date Not recorded

    Transaction is sent now! Here's the link: https://mempool.space/tx/[redacted]

37. Message 037 From Nightspire Actor / other Date Not recorded

    Watching the blockchain. First confirmation coming in...

38. Message 038 From Nightspire Actor / other Date Not recorded

    Funds fully received and safe on our end.

39. Message 039 From Nightspire Actor / other Date Not recorded

    Sending you the recovery package right now.

40. Message 040 From Victim Victim Date Not recorded

    https://gofile.io/[redacted] You can find help.txt.

41. Message 041 From Victim Victim Date Not recorded

    Downloaded everything safely. Testing on one isolated computer first.

42. Message 042 From Victim Victim Date Not recorded

    Test successful! The sample files decrypted perfectly. No issues.

43. Message 043 From Nightspire Actor / other Date Not recorded

    Excellent. You can now run it on the rest of your systems.

44. Message 044 From Victim Victim Date Not recorded

    Starting the full decryption process on our main servers now.

45. Message 045 From Victim Victim Date Not recorded

    10% complete already. Seems to be going smoothly.

46. Message 046 From Nightspire Actor / other Date Not recorded

    Keep us posted if anything unusual happens.

47. Message 047 From Victim Victim Date Not recorded

    100% complete! All files are back and readable. Huge relief.

48. Message 048 From Nightspire Actor / other Date Not recorded

    Fantastic news. Congratulations on the recovery.

49. Message 049 From Victim Victim Date Not recorded

    We can't thank you enough. Our programs can continue without interruption.

50. Message 050 From Nightspire Actor / other Date Not recorded

    We're deleting all your exfiltrated data permanently now.

51. Message 051 From Nightspire Actor / other Date Not recorded

    Deletion complete. No copies remain on our systems.

52. Message 052 From Victim Victim Date Not recorded

    Is that really final? No chance of leaks later?

53. Message 053 From Nightspire Actor / other Date Not recorded

    Yes, completely gone. We keep our word on this.

54. Message 054 From Victim Victim Date Not recorded

    That's such a weight off our shoulders. Thank you again.

55. Message 055 From Nightspire Actor / other Date Not recorded

    You're welcome. Business concluded.

56. Message 056 From Victim Victim Date Not recorded

    Because of this, children will get food and medicine tomorrow.

57. Message 057 From Nightspire Actor / other Date Not recorded

    Glad to hear it. Stay secure from now on.

58. Message 058 From Victim Victim Date Not recorded

    We will. Take care. Goodbye.

59. Message 059 From Nightspire Actor / other Date Not recorded

    Goodbye. Good luck with your mission.