Negociación #C2A3C7249797F5ED

inicial: $400,000negociado: $100,000no pagado66 mensajes

Conversación (sanitizada)

Víctima

Hey you guys got us. How did you get in?

Víctima

anyone there?

dragonforce (atacante)

yes

dragonforce (atacante)

We are ready to help you solve your problem.

Víctima

how do we get that data back? But just a heads up we are currently downsizing .

dragonforce (atacante)

We understand your situation. Do you know that you also lost more than 100 GB of data?

Víctima

That could be possible

dragonforce (atacante)

Would you like us to provide you with a list of these files?

Víctima

Sure

Víctima

do you have that list of files?

dragonforce (atacante)

We'll upload it to you now. For privacy reasons, we have not made an announcement on our blog yet.

dragonforce (atacante)

tree.zip filesize:255819

dragonforce (atacante)

You can select 3 files that are not too large so that we can provide confirmation.

Víctima

│ │ │ │ ├── 7 - Tender Submission │ │ │ │ │ ├── [redacted] - Terms & Conditions.pdf

Víctima

│ │ │ │ ├── 6 - Drawings - DXF │ │ │ │ │ ├── OD10 ID4.53 P4.5 T0.375 1598656583.dxf

Víctima

Tunneling Co - Shroud Assembly_210514.3 │ │ │ │ └── 1 - Screw Conveyor Quote Documents- GP MFG │ │ │ │ ├── 2 - Tender Documents │ │ │ │ │ ├── Shroud Assembly.PDF

dragonforce (atacante)

[redacted].pdf filesize:53419

dragonforce (atacante)

OD10 ID4.53 P4.5 T0.375 1598656583.dxf filesize:500

dragonforce (atacante)

Shroud Assembly.PDF filesize:849082

Víctima

how did you guys get in our network?

dragonforce (atacante)

The price is 400 000$. Payment in BTC.

Víctima

We cant go that high but Ill talk to my boss

dragonforce (atacante)

We will be waiting for your word.

Víctima

Hello

Víctima

We were talking on the [redactado]

Víctima

Are you here????

Víctima

Hello are you here?

Víctima

Hello, I want to pay but don’t have what your asking

dragonforce (atacante)

Hello. You have not yet made a counteroffer to us. How much are you willing to pay?

Víctima

15k

dragonforce (atacante)

I mean, what kind of serious offer are you ready to make? 15k this is not a serious conversation.

Víctima

Again I don’t have 200k you saw what we have, you have seen it all, you know I’m not lying, there is no way that I can come up with such amount

Víctima

We barely survive. We haven’t paid paychecks for two weeks you hacked the network you saw it all you saw all of our financials.

Víctima

There is no way I can bring 200k not even remotely close to it

dragonforce (atacante)

The amount that you were told is 400k and not 200k

Víctima

Ha?! 400k??? Sir there is no way on this planet that I can come up with such amount of cash, I cannot get near this number no matter how long this chat will be

Víctima

If you’re locked on 400k then I’m out of options here, I’ll use old back and try to survive with them

dragonforce (atacante)

We have reviewed your network and studied your company. Based on this information, we have calculated the amount. If you would like to propose another amount, it should be reasonable, not $15k.

Víctima

You’re kidding me right? If you seen it all and really studying our financials, you would never come up with such amount something that we don’t have access to no matter what we will do, All of our credit cards are maxed out and we are negative in all bank accounts you hacked our network you saw it all

Víctima

We haven’t paid paychecks for 2 weeks due to Cash flow issues

Víctima

So 400k I don’t have sir.

dragonforce (atacante)

Then you can offer another adequate amount and we will consider it. Not 15k.

Víctima

Please tell me what’s your bottom line here

dragonforce (atacante)

Do you want to offer me a job?

Víctima

What? Sir, I want to close this today, 15k that’s all I’m able to bring , you saw what we have you have seen it all

dragonforce (atacante)

Yes, we saw what you have, and based on this we said the price. My management wants us to publish an announcement of this incident and turn on the timer. Tell me the price that I can tell the management. Publishing an announcement creates a lot of problems, especially in such cases. We would like to resolve the issue through negotiations, without a public statement.

Víctima

Posting the data will not bring 400k to the table you can post it now if you wish, this is most definitely not my concern , what your asking is something I cannot get close to, I don’t have access to the cash your asking, 15k is what I can offer 16k max

dragonforce (atacante)

Have you searched Google for information about us?

Víctima

No idea who you guys are, and I really don’t care, I would like to close this today and go separate ways

Víctima

I want to pay, but what your asking is not realistic

dragonforce (atacante)

Google it. There is a lot of information about us there. Publishing even an announcement on a blog attracts a lot of attention to the company. Government agencies and special services. We would like to help you avoid problems. We are even ready to reduce the cost to 350k.

Víctima

Please publish the data. As I said it’s not an issue for me. Please do it now, this will not bring 350k to the table cash that I don’t have access to. I understand that this os your business but what your asking is not in my reality, I cannot even go loans all of our cards are 100% maxed out, you saw it all you hacked our network, you know I don’t lie, I don’t have access to the cash your asking

Víctima

Please work with me and I’ll pay, but the amount your asking is out of my reach

dragonforce (atacante)

The amount you mention is also unrealistic. If you want to resolve the issue, name the real amount.

Víctima

Sir, you have seen our situation, you have seen it all, I don’t have access to funds, 15k-16k is the max I can do, all of our accounts are 100% dry, I used all my savings to survive the covid, and since then our business went down drastically, I’m 2 weeks behind on payroll, you saw it all I don’t lie

Víctima

No bank will give us a loan in our situation

dragonforce (atacante)

You can think about ways to solve this problem. You know what we require.

Víctima

Please reduce the amount and I’ll pay, I will never be able to get to your numbers

dragonforce (atacante)

Tell me how much you can pay. Not 15k. We have already reduced it from 400k to 350k.

Víctima

As I said 15-16k again I understand that’s your business but I’m sure you checked and saw our financials you saw it all! There is no way on this planet that I can get to your numbers 15-16k that’s all I can bring I don’t lie and you know it , we are in debt since Covid hit - we never recovered from it

dragonforce (atacante)

Covid was a long time ago. Now the world has changed and the situation in the world is already different. The amount you name does not correspond to your company. I suggest you Google it again, we have a certain strategy and we stick to it. There are articles confirming this. We will not settle for too small a sum. I think you're pretending you don't understand this.

Víctima

100k

Víctima

To close this today and now

dragonforce (atacante)

The wallet and the amount of BTC have been adjusted to make this payment.

Víctima

This key will unlock all files and machines here?

dragonforce (atacante)

Yes. All.

Análisis del agente IA (defensivo)

Analiza esta negociación con IA (tácticas, errores, recomendaciones) solo cuando lo pidas.

Consejos de defensa

No respondas ni negocies sin tu equipo legal y de respuesta a incidentes.
Nunca pagues sin evaluar implicaciones legales/sancionatorias; pagar no garantiza recuperación.
Aísla los sistemas afectados y preserva evidencia antes de cualquier acción.
Activa tus respaldos offline probados; valida su integridad.
Contacta a tu CSIRT/CERT nacional y a las autoridades.
El atacante presiona con plazos y miedo: gana tiempo, no decidas en caliente.

Aviso: conversación divulgada públicamente, mostrada solo con fines educativos y de investigación defensiva. Enlaces, wallets y datos de contacto están redactados. No es asesoría legal.