extortion.wiki THE RANSOMWARE DOCUMENTARY ARCHIVE
Menu

242 negotiations · 332 notes · snapshots Jul 06, 2026 / Jun 26, 2026

REvil — 20210331

Dated record

From extortion.wiki, the ransomware negotiation research archive

A validated static rendering of 23 messages in source-array order. Transcript text is preserved without editorial additions.

Actor
REvil
Record date
Mar 31, 2021
Messages
23
Participants
REvil, Victim

Preserved messages

Actor / other Victim

Select a message number for a stable citation link. Text remains selectable; hard-wrapped source lines are joined for reading, intentional blank-line paragraph breaks remain, and written URLs remain inert.

  1. Message 001 From Victim Victim Date

    How can i trust that if i pay, you will provide the decryptor? How long does the process take to get the decrpytor and how long then will it take me to decrypt the files?

  2. Message 002 From REvil Actor / other Date

    Hello. The decryptor is obtained automatically after payment.

  3. Message 003 From REvil Actor / other Date

    Also, you can read about us in the internet who we are, there enough information that will get you out of any doubt.

  4. Message 004 From Victim Victim Date

    Some of the read me files have different text in them, will the decyptor decrypt them all?

  5. Message 005 From REvil Actor / other Date

    Yes.

  6. Message 006 From REvil Actor / other Date

    Hello

  7. Message 007 From Victim Victim Date

    Hi, how can be sure if payment is made that the decrypting software will be provided?

  8. Message 008 From REvil Actor / other Date

    We value our reputation and we have proved ourselves over a long period of time. We have a 100% guarantee after the transaction is completed that you will receive the decryptor and your data and information about you will be immediately deleted.

  9. Message 009 From Victim Victim Date

    Can I upload you a file to prove that you can decrypt it?

  10. Message 010 From REvil Actor / other Date

    Yes

  11. Message 011 From Victim Victim Date

    Here is the file

  12. Message 012 From REvil Actor / other Date

    File

  13. Message 013 From Victim Victim Date

    Yes it works. I will try to find a way to buy xmr.

  14. Message 014 From REvil Actor / other Date

    Or u can simply buy monero on this exchanges and withdraw on ur own wallet and send to us. https://www.okex.com/markets/spot?product=xmr_usdt https://www.binance.com/en/trade/XMR_BTC https://hitbtc.com/xmr-to-usdt https://www.hbg.com/en-us/exchange/xmr_usdt and there are all of the ways to get monero https://www.getmonero.org/community/merchants/#exchanges

  15. Message 015 From Victim Victim Date

    Now I see that some of the files are deleted. How to restore them?

  16. Message 016 From Victim Victim Date

    All this exchanges that you sent require a lot of time to transfer fiat and buy XMR on them. I'm trying to find a faster way. Can you postpone the time for payment a little bit?

  17. Message 017 From REvil Actor / other Date

    Okay, we added.

  18. Message 018 From Victim Victim Date

    Ok thanks

  19. Message 019 From REvil Actor / other Date

    Waiting for 10 confirmations by Monero system, it takes ~30 min

  20. Message 020 From Victim Victim Date

    We just paid

  21. Message 021 From Victim Victim Date

    Ok, now I have access to decryptor. But when I log on to the machine it is locked and there is a screen to enter password, what is it?

  22. Message 022 From REvil Actor / other Date

    password- [redacted]

  23. Message 023 From Victim Victim Date

    it works thanks