Negociación #20230929

> Hello. You've reached an Akira support chat. Currently, we are preparing the list of data we took from your network. For now you have to know that dealing with us is the best possible way to settle this quick and cheap. Keep in touch and be patient with us. We will reach out to you soon. Do you have a permission to conduct a negotiation on behalf of your organization?

> list.rar // 375 KB

> These files were taken from your network prior to encryption. You can pick 2-3 random files from the list and we will upload them to this chat as a proof of possession. To prove that we can properly decrypt your data you can upload 2-3 encrypted files to our chat and we will upload decrypted copies back.

> Surely.

> After payment you will receive a decryptor for each of your systems and manual on how to use it for particular file/system. You will receive a deletion log which means the raid drives that contained the only copy of your data are fully formatted and erased. You will receive a security report that includes information about how we were able to penitrate your network, as well as exclusive first-hand information about the state of your network, the vulnerabilities that we found. What's more, you'll receive high-quality technical recommendations on eliminating any vulnerabilities and strengthening your network to secure your internal and external infrastructure. You will also receive written guarantees that we will not sell or publish your data, keep this conversation private, and delete this chat later. We won't come back for more money after payment and we won't attack you again. I will let you know the price shortly, we're reviewing your financial papers to come up with a reasonable demand to you.

> So, we've gone through your files to define your financial abilities. We're willing to set a $300,000 price for ALL the services we offer: 1) full decryption assistance; 2) evidence of data removal; 3) security report on vulnerabilities we found; 4) guarantees not to publish or sell your data; 5) guarantees not to attack you in the future. Let me know whether you're interested in a whole deal or in parts.

> We didn't change the password for your VCenter.

> Your VСenter was in the quality of a virtual machine on one of the ESXi server. All VMs on this ESXi have been encrypted so you can't login to your VCenter. After payment you will be able to access to any of your data/servers.

> Encrypted for sure.

> The host password was changed, correct. You will get the pass after payment.

> We can't provide, sorry. All we can offer you is to choose 2-3 encrypted files and upoad them to our chat so we can will upload decrypted copies back for you to be calm.

> We will provide these files soon. Also will you upload files for decryption?

> [redacted]files.rar // 1.28 MB

> Full decryption assistance costs 150k in your case, the evidence of data removal is 125k and the security report is 25k. All the guarantees are coming as a default.

> We need your decision.

> We will put your name on our blog today.

> So everyone involved needs to hurry up. We won't wait long.

> For the whole deal?

> We would accept $250,000.

> Hurry up on your part please.

> We will discuss internally.

> The management has decided to accept your offer. I will provide you with a btc wallet ID shortly.

> Here it is: [redacted] We expect to get payment within next 24 hours.

> We believe in you.

> We will wait.

> It is already Tuesday. If we don't receive payment within 24 hours, you will see your name in our blog. Your data will be uploaded before the weekend this way.

> You can find yourself in our news column: [enlace omitido] If you want this post to be removed, we have to agree at something.

> We can't read your thoughts. You left us almost 10 days ago and haven't dropped a word. Hurry up on your end. The post will be taken down immediately after payment.

> Hello. Sure, you can use it.

> When will we see the transfer? We won't be waiting for another week. We either publish your data prior to weekend or receive the payment and get this over.

> C'mon guys. If you really wanted to pay, you would have done so a couple of weeks ago. Don't waste our time, please leave this chat. We absolutely do not care about this modest amount, so your data will be published soon.

> You will know.