REvil — 20210617
Dated recordFrom extortion.wiki, the ransomware negotiation research archive
A validated static rendering of 67 messages in source-array order. Transcript text is preserved without editorial additions.
- Actor
- REvil
- Record date
- Jun 17, 2021
- Messages
- 67
- Participants
- REvil, Victim
Preserved messages
Actor / other Victim
Select a message number for a stable citation link. Text remains selectable; hard-wrapped source lines are joined for reading, intentional blank-line paragraph breaks remain, and written URLs remain inert.
-
Message 001 From Victim Victim Date hi
-
Message 002 From Victim Victim Date can you open these files?
-
Message 003 From Victim Victim Date your note says you have our files in "secure offline storage", what files do you actually have?
-
Message 004 From REvil Actor / other Date Hi
-
Message 005 From REvil Actor / other Date proof-
-
Message 006 From Victim Victim Date this is everything you have?
-
Message 007 From REvil Actor / other Date about 5 GB of files with your recipes, customer data and much more
-
Message 008 From REvil Actor / other Date file
-
Message 009 From REvil Actor / other Date file
-
Message 010 From Victim Victim Date Thanks for this. Is there any chance you can send more files? Asking for $120k and only showing 6 files is not really convincing the owners
-
Message 011 From REvil Actor / other Date as we said, this is a small part of the data, we will not discard all the data that we have. But after payment we will delete all copies of the data
-
Message 012 From Victim Victim Date Thank you for sharing these files too. Do you allow any kind of discount for payment?
-
Message 013 From REvil Actor / other Date 15% discount max
-
Message 014 From Victim Victim Date So $102,000? This is the lowest price?
-
Message 015 From REvil Actor / other Date Yes
-
Message 016 From Victim Victim Date We have a meeting coming up in a few hours to figure out what we can offer. I will update you after that
-
Message 017 From REvil Actor / other Date we dont need to know how much you offer - you already see price
-
Message 018 From Victim Victim Date We dont have $102k today and we wont have it tomorrow. I still want our files back so I am trying to find a solution.
-
Message 019 From REvil Actor / other Date then you need to collect it
-
Message 020 From Victim Victim Date Well we need time to see what can happen. Everything is closed for the weekend so can you push this clock a few more days?
-
Message 021 From REvil Actor / other Date Is 2 days enough for you?
-
Message 022 From Victim Victim Date Can we get until Tuesday to sort this out?
-
Message 023 From REvil Actor / other Date to much time - we can expend timer only until monday
-
Message 024 From Victim Victim Date Can you at least extend it to the end of the day tomorrow? Everything is closed since it's the weekend and we won't be able to get anything done until tomorrow.
-
Message 025 From REvil Actor / other Date ok
-
Message 026 From Victim Victim Date Thanks, the timer expired it seems but I will get back to you later this afternoon
-
Message 027 From Victim Victim Date The amount you're asking from us given our size and revenue is just way off base and we're struggling to see how this number was determined. Obviously you got into our systems and got some of our files, but we can't make this large of a payment. I can honestly pay you $8,775 and even that is really stretching it
-
Message 028 From REvil Actor / other Date dont waste our time
-
Message 029 From Victim Victim Date How am I wasting your time? This is a real offer. Our revenue has been down 70% since last year, we don't have the ability to pay over $100k
-
Message 030 From REvil Actor / other Date We are not interested in this. We have indicated the amount for you. Your proposal sounds stupid. If you are not willing to pay more. bye
-
Message 031 From Victim Victim Date We both know we're not able to pay $100k. What is a better price that we can work toward? I can't shell out 6 figures, we will lose our business
-
Message 032 From REvil Actor / other Date 90k our last price
-
Message 033 From REvil Actor / other Date not lower
-
Message 034 From Victim Victim Date That's a really big gap between what we have vs. 90k. I'll need a few days to get my finances in order and see if we can make something work
-
Message 035 From REvil Actor / other Date ok
-
Message 036 From REvil Actor / other Date news?
-
Message 037 From Victim Victim Date I'm not even close to $90k yet, but looking into something tomorrow. I will update you tomorrow okay?
-
Message 038 From REvil Actor / other Date ok
-
Message 039 From Victim Victim Date Could you please send a couple more example files of the data you have? I'm working to get a bit more cash today and should have an answer for you in a couple of hours
-
Message 040 From REvil Actor / other Date wait for answer
-
Message 041 From REvil Actor / other Date proof 3
-
Message 042 From Victim Victim Date Thanks
-
Message 043 From Victim Victim Date I don't know where you are in the world, but Alaska relies heavily on tourism for revenue. With 2020/COVID, no travel to Alaska was permitted, so we lost ~30% of sales revenue from this. No one was buying our product, even through the summer months (which is usually high time for tourists). Without these tourists, we really struggled to make ends meet. I'm making slow progress to get extra cash, the most I have right now is $12,825
-
Message 044 From REvil Actor / other Date not interested
-
Message 045 From REvil Actor / other Date make a really interested offer for my boss
-
Message 046 From Victim Victim Date We'll never have $90k, please help me out on this. What I'm offering is a lot for a small business owner like myself, I don't have the kind of cash flow like other years. Talk to your boss for me please
-
Message 047 From REvil Actor / other Date my boss can offer 20% discount
-
Message 048 From REvil Actor / other Date hello, are you ready for dialogue?
-
Message 049 From Victim Victim Date Sorry we had issues reaching your site over the weekend but I'm here
-
Message 050 From Victim Victim Date 20% discount off the $90,000? So this would be $72,000?
-
Message 051 From REvil Actor / other Date yes
-
Message 052 From Victim Victim Date I only have about $13,000 right now
-
Message 053 From REvil Actor / other Date then you need to collect money
-
Message 054 From Victim Victim Date I don't think I can ever get 70k, that's more than I make in a year
-
Message 055 From Victim Victim Date Any chance you can wait for next week and I should have a bit more?
-
Message 056 From REvil Actor / other Date You ask for too much time
-
Message 057 From Victim Victim Date I don't have $70k
-
Message 058 From Victim Victim Date Can you wait for Friday then?
-
Message 059 From REvil Actor / other Date friday its last day for you
-
Message 060 From REvil Actor / other Date hello, are you ready to pay?
-
Message 061 From Victim Victim Date Hi, I don't have the entire amount, it's really not something I can easily get. Today I have $15,300
-
Message 062 From Victim Victim Date Can we agree to that?
-
Message 063 From REvil Actor / other Date wait for answer
-
Message 064 From REvil Actor / other Date ok
-
Message 065 From Victim Victim Date You agree to this?
-
Message 066 From REvil Actor / other Date yes
-
Message 067 From Victim Victim Date Okay I can do it on Monday thanks