Conversación (sanitizada)
akira (atacante)
> Hello. You've reached Akira support chat. Currently, we are preparing the list of data we took from your network. For now you have to know that dealing with us is the best possible way to settle this quick and cheap. Keep in touch and be patient with us. We will reach out to you soon.
akira (atacante)
> list.txt // 297 KB
akira (atacante)
> These files were taken from your network prior to encryption. You can pick 2-3 random files from the list and we will upload them to this chat as a proof of possession. To prove that we can properly decrypt your data you can upload 2-3 encrypted files to our chat and we will upload decrypted copies back. We're looking through your financial papers to come up with a reasonable demand to you. We offer: 1) full decryption assistance; 2) evidence of data removal; 3) security report on vulnerabilities we found; 4) guarantees not to publish or sell your data; 5) guarantees not to attack you in the future. Let me know whether you're interested in a whole deal or in parts. This will affect the final price. If we don't get a respond within next 24 hours, we will be forced to announce your corporate data leak on our blog.
akira (atacante)
> Your data will be posted soon.
Análisis del agente IA (defensivo)
Analiza esta negociación con IA (tácticas, errores, recomendaciones) solo cuando lo pidas.
Consejos de defensa
- No respondas ni negocies sin tu equipo legal y de respuesta a incidentes.
- Nunca pagues sin evaluar implicaciones legales/sancionatorias; pagar no garantiza recuperación.
- Aísla los sistemas afectados y preserva evidencia antes de cualquier acción.
- Activa tus respaldos offline probados; valida su integridad.
- Contacta a tu CSIRT/CERT nacional y a las autoridades.
- El atacante presiona con plazos y miedo: gana tiempo, no decidas en caliente.
Aviso: conversación divulgada públicamente, mostrada solo con fines educativos y de investigación defensiva. Enlaces, wallets y datos de contacto están redactados. No es asesoría legal.