extortion.wiki THE RANSOMWARE DOCUMENTARY ARCHIVE
Menu

242 negotiations · 332 notes · snapshots Jul 06, 2026 / Jun 26, 2026

REvil — 20210320

Dated record

From extortion.wiki, the ransomware negotiation research archive

A validated static rendering of 13 messages in source-array order. Transcript text is preserved without editorial additions.

Actor
REvil
Record date
Mar 20, 2021
Messages
13
Participants
REvil, Victim

Preserved messages

Actor / other Victim

Select a message number for a stable citation link. Text remains selectable; hard-wrapped source lines are joined for reading, intentional blank-line paragraph breaks remain, and written URLs remain inert.

  1. Message 001 From Victim Victim Date

    Hi. So how can you help?

  2. Message 002 From REvil Actor / other Date

    The system works as follows: you transfer the amount in crypt currency Monero (XMR) to the wallet specified on your page. After payment you receive: - Universal decryptor for your all network - The complete deletion of all your files with our warranty not to use the data for any purpose. - Deleting blog - 100% confidentiality of this incident and all terms of the transaction on our part.

  3. Message 003 From Victim Victim Date

    How do we know that what you have is worth the money?

  4. Message 004 From REvil Actor / other Date

    Wait for answer.

  5. Message 005 From Victim Victim Date

    Waiting

  6. Message 006 From REvil Actor / other Date

    I provide you additional proofs below and recommend you hurry up with decision, because payment procedure can takes time. If you don't pay, your files will be published to the blog and shared to media, other data will be sold. Anyway it will influence to your reputation, think about your customers and fines and other troubles waiting for you. We offer you solution to avoid everything of this.

  7. Message 007 From Victim Victim Date

    Password?

  8. Message 008 From REvil Actor / other Date

    Password: 123123

  9. Message 009 From Victim Victim Date

    Thanks

  10. Message 010 From REvil Actor / other Date

    How much time will it take you to make the payment?

  11. Message 011 From REvil Actor / other Date

    Hello, we are tired of waiting for you, if there is no response from you in a day, we will publish screenshots of some of your files for the media - this will be the first warning for you. But even if it does not affect you, we will publish all your data. We recommend that you make a decision.

  12. Message 012 From Victim Victim Date

    can we get more time?

  13. Message 013 From REvil Actor / other Date

    Hello We see no attempts on your part to engage in a serious conversation. If you do not pay, your files will be published on the blog and transferred to the media, the rest of the data will be sold. In any case, it will affect your reputation, think about your clients, fines and other troubles awaiting you. You will not have more time if we do not see the prepayment.