extortion.wiki THE RANSOMWARE DOCUMENTARY ARCHIVE
Menu

242 negotiations · 332 notes · snapshots Jul 06, 2026 / Jun 26, 2026

Qilin — 20250203 - from @RakeshKrish12

Dated record

From extortion.wiki, the ransomware negotiation research archive

A validated static rendering of 36 messages in source-array order. Transcript text is preserved without editorial additions.

Actor
Qilin
Record date
Feb 03, 2025
Messages
36
Participants
Qilin, Victim

Preserved messages

Actor / other Victim

Select a message number for a stable citation link. Text remains selectable; hard-wrapped source lines are joined for reading, intentional blank-line paragraph breaks remain, and written URLs remain inert.

  1. Message 001 From Qilin Actor / other Date Not recorded

    Hello. I'm here. How can I assist you?

  2. Message 002 From Victim Victim Date

    Hello?

  3. Message 003 From Qilin Actor / other Date

    Your company's network is attacked and the entire system is encrypted. We have downloaded all the company's confidential data. After payment you will receive. 1. Decryption tool for all devices 2. Complete list of files taken from the network. 3. Proof that all your data has been deleted. 4. Information about how we got into the network. 5. Security recommendations to stop future attacks. 6. Promise that we will not attack you again in the future. 7. Guarantee that we will forget about this incident.

  4. Message 004 From Victim Victim Date

    ok, what do we need to do?

  5. Message 005 From Qilin Actor / other Date

    We will provide the list of files what we took from you as soon as possible and you can offer 3 names of files from it and we will provide them as a proof of availability. Also you can send 3 encrypted files and we will decrypt them as a proof that our decryption tool really works. But these files must not contain a valuable information.

  6. Message 006 From Qilin Actor / other Date

    file tree.txt (0.232 MB)

  7. Message 007 From Victim Victim Date

    Thank you, I'll review and pick out some files

  8. Message 008 From Victim Victim Date

    Please provide us with copies of the following files:

    - [redacted].xls

    - [redacted].pdf

    - [redacted].docx

  9. Message 009 From Qilin Actor / other Date

    We will do it as soon as possible.

  10. Message 010 From Qilin Actor / other Date

    [redacted].docx (0.032 MB)

  11. Message 011 From Qilin Actor / other Date

    [redacted].xls (0.039 MB)

  12. Message 012 From Qilin Actor / other Date

    [redacted].pdf (0.484 MB)

  13. Message 013 From Victim Victim Date

    ok, so next I'm suposed to send you encrypted files? How am I supposed to get to those when you've encrypted the server?

  14. Message 014 From Qilin Actor / other Date

    In order for you to make sure that we can really help you decrypt all your files and prevent all your information from going online - you can offer us some test files... and we will decrypt them. After full payment you will get a full activation key to your computers and forget about us forever.

  15. Message 015 From Victim Victim Date

    ok, I need to get with out team when they're back on Monday to see what we're able to get and send to you

  16. Message 016 From Qilin Actor / other Date

    On Monday we are waiting.

  17. Message 017 From Victim Victim Date

    What kind of files are we allowed to upload? All we've been able to get are some encrypted log files, will that work?

  18. Message 018 From Qilin Actor / other Date

    You can select 2-3 random files from the list, and we will upload them to this chat as proof of availability. To prove that we can decrypt your data correctly, you can upload 2-3 encrypted files to our chat, and we will upload the decrypted copies back

  19. Message 019 From Victim Victim Date

    Please decrypt the following files:

  20. Message 020 From Victim Victim Date

    [redacted] (0.555 MB)

  21. Message 021 From Victim Victim Date

    [redacted] (0.238 MB)

  22. Message 022 From Victim Victim Date

    [redacted] (0.239 MB)

  23. Message 023 From Qilin Actor / other Date

    [redacted].log (0.551 MB)

  24. Message 024 From Qilin Actor / other Date

    [redacted].log (0.234 MB)

  25. Message 025 From Qilin Actor / other Date

    [redacted].log (0.234 MB)

  26. Message 026 From Victim Victim Date

    Thank you. We are considering your demands, is there any way you could provide a discount to your price?

  27. Message 027 From Qilin Actor / other Date

    As a sign of goodwill and quick closing of the deal, we are ready to give a 10% discount and stop at the price of 63,000 dollars. You can pay this amount as we have reviewed your financials. Talk to the management and pay, after payment you will get everything you agreed on.

  28. Message 028 From Victim Victim Date

    Understood. If we only require either the decryptor or confidentiality, would the cost be adjusted accordingly?

  29. Message 029 From Qilin Actor / other Date

    Understand that we don’t have something that requires you to pay separately for something. Any payment includes all our terms and conditions. It depends whether you need decryption or not. Should your data be deleted or not, etc. Everything is included in the complex. Hurry up, there is very little time left.

  30. Message 030 From Victim Victim Date

    That makes sense. We have some key decision makers that are flying in to discuss your deal. We expect to have an update for you early next week.

  31. Message 031 From Qilin Actor / other Date

    As we see that you are interested in making a deal as soon as possible, we do for you an exception and extend the timer till the 19th of February for you to make a decision with your management and inform us about the payment. Please, don't delay with it, otherwise we will return with the tools which are stronger. You must understand that as the timer will expire we will post your files on our blog.

  32. Message 032 From Victim Victim Date

    Our apologies, we are awaiting a decision from leadership. Can we have one more day to consider your offer?

  33. Message 033 From Qilin Actor / other Date

    we extended the timer for 24 hours.

  34. Message 034 From Qilin Actor / other Date

    So you just had a meeting about finances. What do you have to offer? We are willing to make an additional discount and accept payment from you today. The price will be 60,000 dollars. That's a very good discount. We're ready to make the deal today and start rebuilding you. It's up to you. Time is running out today.

  35. Message 035 From Qilin Actor / other Date

    We see that you are not interested in the security of your patients and choose to play the silent way. Tommorow we will publish a press relise about you on our blog, and in a couple more days all of your data will become public. You still have time to start collaborating and do it without any attention from the press and the public.

  36. Message 036 From Qilin Actor / other Date

    http://ijzn3sicrcy7guixkzjkib4ukbiilwc3xhnmby4mcbccnsd7j2rekvqd.onion/site/view?uuid=[redacted]