RunSomeWares — 20250411

Select a message number for a stable citation link. Text remains selectable; hard-wrapped source lines are joined for reading, intentional blank-line paragraph breaks remain, and written URLs remain inert.

1. Message 001 From Victim Victim Date Not recorded

   Hello, we want to resolve this, but we have no experience of this sort of event and do not know how this works. Our management want proof you can fix our data and are still reviewing the file list you to understand what files you took. Does the list show all the files you took?

2. Message 002 From RSW Actor / other Date Not recorded

   This is an exhaustive list. You can send us some files and we will decrypt it for free.

3. Message 003 From Victim Victim Date Not recorded

   Hello, please can you provide the following files as proof you have our data:

   File 1 - [1.2M] [Redacted]_files/01.0 - [Redacted].xlsx File 2 - [ 15M] [Redacted]_files/[Redacted].pptx File 3 - [100K] [Redacted]_files/[Redacted].html File 4 - [2.4M] [Redacted]_files/[Redacted].jpg File 5 -[2.6M] [Redacted]_files/[Redacted].JPG

4. Message 004 From RSW Actor / other Date Not recorded

   here it is

5. Message 005 From Victim Victim Date Not recorded

   Thank you for providing the requested files. We will get our team to verify them. We will also get our IT to obtain some suitable files and come back to you as soon as we can for a test of your decryption. This may take us some time due to the weekend, therefore we ask that you be patient and stop the timer while work with you to sort this.

6. Message 006 From RSW Actor / other Date Not recorded

   Your time is up. This is last chance to get a deal.

7. Message 007 From Victim Victim Date Not recorded

   Hello, We want to resolve this with you, but your price is very high. Please can you give us a better price. We have attached a small file for a test of your decryption capability, but our management need assurance that you can restore all our data including larger files. We have a file that is 16GB in size. How do we get proof you can decrypt this?

8. Message 008 From RSW Actor / other Date Not recorded

   The file, you've attached is a binary file. We decrypted it. To check it, you can open it with any text editor.

9. Message 009 From Victim Victim Date Not recorded

   Thank you for providing the decrypted file. We will get IT to verify it. How do we share a larger file with you? We will pass your discount to our management for their consideration and will come back to you

10. Message 010 From RSW Actor / other Date Not recorded

    Upload it to any public share.

11. Message 011 From Victim Victim Date Not recorded

    Our management said your price is still very high and the limited time for discount is not achievable for us – Our approvals process takes time and it would take us longer than 2 days to get stakeholders together for approvals and obtain bitcoin. We want to reach a deal with you but we need better discount with time to get the necessary approvals to make a payment.

12. Message 012 From RSW Actor / other Date Not recorded

    How much time do you need? Give me the date.

13. Message 013 From Victim Victim Date Not recorded

    It would likely take us 3 - 4 business days to get stakeholder approvals for a payment and gathering the funds to obtain bitcoin, so towards the latter part of next week. Please give us a significant discount so we can reach a deal and resolve this quickly for both our benefit.

14. Message 014 From RSW Actor / other Date Not recorded

    We analized the company's revenue, possible reputational losses, files we have and encrypted data. The company provides IT security services, and belong to the most influential family in the world. It's great headline for newspapers. And if that's the case, you will lose most of you customers. Besides, we have huge value of you and your customers data.

15. Message 015 From Victim Victim Date Not recorded

    OK, we will pass your reply to our management. They will need to meet with stakeholders after the weekend to discuss this.

16. Message 016 From RSW Actor / other Date Not recorded

    Ok, when will the response be ready?

17. Message 017 From Victim Victim Date Not recorded

    Management have discussed the situation and they want to reach a deal with you, but they could not agree to the very large amount you are asking due to the cost our business has incurred already because of your attack. They said that they can offer to pay you * Bitcoin to resolve this quickly. Please accept this so we can reach a deal.

18. Message 018 From RSW Actor / other Date Not recorded

    We have spent a lot of time and resources so we can't acept such a small price. If the deal goes through quikly, we can settle for *Btc. Let's get a deal.

19. Message 019 From Victim Victim Date Not recorded

    Thank you for giving some further discount. We will pass your price to our management for their consideration and come back to you.

20. Message 020 From RSW Actor / other Date Not recorded

    Let's get a deal this week

21. Message 021 From Victim Victim Date Not recorded

    Our management said they cannot reach the high amount you are asking, but they want to come to an agreement with you and would be able to pay * Bitcoin to resolve this soon. We ask you to please accept this amount so we can reach a deal.

22. Message 022 From RSW Actor / other Date Not recorded

    Ok. Let's make a deal. We agree to *Btc.

23. Message 023 From Victim Victim Date Not recorded

    Thank you for the reply. We have passed your offer to our management but they will need to meet with stakeholders to obtain approval for extra funds. We will come back to you after the weekend.

24. Message 024 From RSW Actor / other Date Not recorded

    Monday is here, let's get a deal!

25. Message 025 From RSW Actor / other Date Not recorded

    Unfortunately, our managment gave us 2 days. Let's make a deal. We can no longer waste time.

26. Message 026 From RSW Actor / other Date Not recorded

    Guys, it's last chance. Let's get a deal! We can't wait longer.

27. Message 027 From RSW Actor / other Date Not recorded

    Ok, we start the publishing process with a mailing to your customers, partners and media. Bye!