REvil — 20210329
Dated recordFrom extortion.wiki, the ransomware negotiation research archive
A validated static rendering of 43 messages in source-array order. Transcript text is preserved without editorial additions.
- Actor
- REvil
- Record date
- Mar 29, 2021
- Messages
- 43
- Participants
- REvil, Victim
Preserved messages
Actor / other Victim
Select a message number for a stable citation link. Text remains selectable; hard-wrapped source lines are joined for reading, intentional blank-line paragraph breaks remain, and written URLs remain inert.
-
Message 001 From Victim Victim Date price is error?
-
Message 002 From Victim Victim Date how much btc?
-
Message 003 From REvil Actor / other Date Hello.This amount was formed after a detailed audit of your company and it fully corresponds to your level and size of your company. The system works as follows: you transfer the amount in crypt currency Monero (XMR) to the wallet specified on your page. After payment you receive: - Universal decryptor for your all network - 100% confidentiality of this incident and all terms of the transaction on our part.
-
Message 004 From Victim Victim Date Ten million?
-
Message 005 From Victim Victim Date it's the first time i see the price, it's very exaggeration
-
Message 006 From Victim Victim Date what's is the lowest price?
-
Message 007 From REvil Actor / other Date wait for answer.
-
Message 008 From REvil Actor / other Date Nope. You need to pay the requested amount of money. It is not a market.
-
Message 009 From REvil Actor / other Date You pay for fullfill decryption your files and we tell you about your vulnerabilities and how to fix them. Otherwise you will face new different attacks, sooner or later it will lead to leaks of your and your client's data and other valuable data again and again.
-
Message 010 From REvil Actor / other Date We recommend that you transfer this information to the management. We are ready for dialogue if you want to solve this problem. We will not drag out negotiations. We know the level of damage done to your network. Also, our team received a large amount of important information that will become publicly available if you do not pay or try to make too low offers. For our part, we are ready to provide a 20% discount if payment reaches us by Wednesday.This is our goodwill gesture.
-
Message 011 From REvil Actor / other Date http://dnpscnbaix6nkwvystl3yxglz7nteicqrou3t75tpcc5532cztc46qyd.onion/posts/[redacted]?s=[redacted]
-
Message 012 From REvil Actor / other Date When the time expires, this post will be published.
-
Message 013 From Victim Victim Date maybe more discount?
-
Message 014 From Victim Victim Date I must have more bargaining chips to convince the boss
-
Message 015 From Victim Victim Date Excessive amounts must be paid by the Board of Directors, and it takes too much time
-
Message 016 From REvil Actor / other Date You can submit your proposal and my boss will review it. The faster the payment arrives, the more discount we will give you. As proof, we can provide any of your data.
-
Message 017 From Victim Victim Date Have any R&D information or personal information?
-
Message 018 From REvil Actor / other Date The data provided should be sufficient to understand what we own. We have been download personal information from 2015. My boss is not ready to drag out this dialogue. Make an offer and my boss will consider it.
-
Message 019 From Victim Victim Date Can you give me some data?
-
Message 020 From Victim Victim Date I will discuss with my boss
-
Message 021 From Victim Victim Date The more destructive the better
-
Message 022 From Victim Victim Date hello?
-
Message 023 From REvil Actor / other Date wait for answer.
-
Message 024 From REvil Actor / other Date We don't have time to download tens of gigabytes of information. We will give you an example of 1/10000 of your file tree. My boss is open to your suggestions, but we don't expect little money from you.
-
Message 025 From REvil Actor / other Date File.
-
Message 026 From Victim Victim Date Decrypt password?
-
Message 027 From Victim Victim Date i need more file list
-
Message 028 From Victim Victim Date The more the better
-
Message 029 From Victim Victim Date I must tell my boss this is serious
-
Message 030 From Victim Victim Date He didn’t realize the severity
-
Message 031 From REvil Actor / other Date Password: 123123 This is enough to understand that we have a lot of valuable information. Tell your boss that it is very serious. The data received from your trusts is enough to deliver you problems for many years. Our advice, do not pull the time to not repeat the fate of the SolarWind.
-
Message 032 From Victim Victim Date I need more evidence, this is a global paralysis
-
Message 033 From REvil Actor / other Date We have provided you with sample proof of what has been downloaded from your network. You understand the seriousness of the situation for your company, and you need to explain this to your boss. You are losing money every day. Your time is running out, and very soon we will publish your data on the blog, it will bring you even more problems. It is in your interests to quickly agree on the ransom amount and pay quickly, and we will give you a discount. We are waiting for suggestions from you.
-
Message 034 From Victim Victim Date I don't have enough chips
-
Message 035 From Victim Victim Date You have worked so hard, and the results are not far away What I need is the trust and support of the boss But if we talk no results, we can’t continue
-
Message 036 From REvil Actor / other Date What results do you want to tell about? We've done enough to keep you in trouble for years to come.
-
Message 037 From REvil Actor / other Date Now we are waiting for a clear proposal from you. If it is not received tomorrow, Forbes and the WSJ will report a breach in your headquarters systems and all servers.
-
Message 038 From Victim Victim Date I am very actively trying to resolve this matter But the data you gave me didn’t allow me to convince my boss
-
Message 039 From REvil Actor / other Date Then we'll do it.
-
Message 040 From Victim Victim Date What you need is money What I need is my job and the trust of my boss But you don't give me a bargaining chip to talk to my boss I'm really in difficulty like this
-
Message 041 From REvil Actor / other Date So your boss has to get in touch with us himself. You're an incompetent negotiator.
-
Message 042 From Victim Victim Date ....
-
Message 043 From REvil Actor / other Date Are we gonna talk about money? There will be no more dates, don't ask more about it.