ACSec/Observatorio
akira

Negociación #20230728

no pagado5 mensajes

Conversación (sanitizada)

akira (atacante)
> Hello. You've reached an Akira support chat. Currently, we are preparing the list of data we took from your network. For now you have to know that dealing with us is the best possible way to settle this quick and cheap. Keep in touch and be patient with us. We will reach out to you soon. Do you have a permission to conduct a negotiation on behalf of your organization?
akira (atacante)
> list.zip // 2.53 MB
akira (atacante)
> These files were taken from your network prior to encryption. You can pick 2-3 random files from the list and we will upload them to this chat as a proof of possession. To prove that we can properly decrypt your data you can upload 2-3 encrypted files to our chat and we will upload decrypted copies back.
akira (atacante)
> We will wait for your decision regarding our deal on Monday. If we see no interest from you, we will publish everything the list contains.
akira (atacante)
> You can find yourself in our news column: [enlace omitido] If you want this post to be removed, we have to agree at something.

Análisis del agente IA (defensivo)

Analiza esta negociación con IA (tácticas, errores, recomendaciones) solo cuando lo pidas.

Consejos de defensa

  • No respondas ni negocies sin tu equipo legal y de respuesta a incidentes.
  • Nunca pagues sin evaluar implicaciones legales/sancionatorias; pagar no garantiza recuperación.
  • Aísla los sistemas afectados y preserva evidencia antes de cualquier acción.
  • Activa tus respaldos offline probados; valida su integridad.
  • Contacta a tu CSIRT/CERT nacional y a las autoridades.
  • El atacante presiona con plazos y miedo: gana tiempo, no decidas en caliente.
Aviso: conversación divulgada públicamente, mostrada solo con fines educativos y de investigación defensiva. Enlaces, wallets y datos de contacto están redactados. No es asesoría legal.
Negociación akira #20230728 | ACSec