Negociación #20211220

inicial: $1,000,000no pagado24 mensajes

Conversación (sanitizada)

hive (atacante)

Hello and welcome to Hive. How may I help you?

Víctima

Really?

hive (atacante)

Hello. Please, introduce your company first.

Víctima

No Private individual

Víctima

So how much are you trying to extort from me then?

Víctima

Hi, I got a message on my computer

hive (atacante)

Hello. Please, introduce your company first.

Víctima

I'm a user of [redacted-software-vendor] point of sale software, [redacted-victim] store

Víctima

Can you help us with information?

hive (atacante)

Send us email from your corporate mail account to this address to verify it's you: [redacted][redactado]

hive (atacante)

Only the main company are able to purchase the decryption software. It cost's $1,000,000 in Bitcoin.

Víctima

I sent the email, we don't have that kind of money. We a small liquor store in [redacted-location] and only use [redacted-software-vendor] software as a point of sale

hive (atacante)

Our target is a company that allowed a huge vulnerability in its system that led to a massive infection of [redacted-software-vendor]'s customer network. Accordingly, this company must resolve this issue and justify the trust of its customers.

Víctima

Hi, I also got attacked with this software. I just use [redacted-software-vendor] point of sale to run my small bed and breakfast. I see there is previous chats here with people also using [redacted-software-vendor] software. How much will decryption be in my case? I am not the [redacted-software-vendor] company.

hive (atacante)

[redacted-software-vendor] is responsible for you at this time. You are advised to contact them for a speedy resolution of your problems.

Víctima

I would also like to know if we can come to a compromise as we can't trade and we been hurt badly with [redacted-location] rules for lockdowns

Víctima

Hi, can you please help

hive (atacante)

Please, introduce your company first

Víctima

Morning, obviously you know our frustration when waking up this morning and to realize that we've been hacked... a second time in 2 years... you clearly do not do your research... you can check that we are a lodge/hotel in the rural parts of [redacted-location], which is a third world country (do you know where that is???)... please check your world map and our web address to confirm this. We also only use [redacted-software-vendor]'s "Reservation" and "Point of Sale" system like the other poor souls above. We are all trying to make a decent living after Covid struck, and we in the hospitality sector suffered the most without being able to trade fully for 12-18 months. So with hardly being able to pay our staff where do you think we will be able to get US Dollars to pay you? Our US exchange rate is currently [redacted-currency] to 1$. You should hack the [redacted-location] government because they will be the only ones who can afford to pay you in US$... So please be reasonable and hack the big guys in the future not us on the ground trying to make a living. [redacted] Thanks and awaiting your reply...

hive (atacante)

Obviously you don't know that our goal is not you, our goal is [redacted-software-vendor] which has the profits to cover all recovery costs. Once again, we want to hold [redacted-software-vendor] accountable in this panel to solve all your problems.

Víctima

[redacted-software-vendor] sell software locally they don't make that kind of money as they once off sale only, I bought it 7 years ago and they they haven't charged a cent since

Víctima

By doing this you are putting our families livelihoods at risk, if we had money we wouldn't be using a cheap point of sale

Víctima

hive (atacante)

Análisis del agente IA (defensivo)

Analiza esta negociación con IA (tácticas, errores, recomendaciones) solo cuando lo pidas.

Consejos de defensa

No respondas ni negocies sin tu equipo legal y de respuesta a incidentes.
Nunca pagues sin evaluar implicaciones legales/sancionatorias; pagar no garantiza recuperación.
Aísla los sistemas afectados y preserva evidencia antes de cualquier acción.
Activa tus respaldos offline probados; valida su integridad.
Contacta a tu CSIRT/CERT nacional y a las autoridades.
El atacante presiona con plazos y miedo: gana tiempo, no decidas en caliente.

Aviso: conversación divulgada públicamente, mostrada solo con fines educativos y de investigación defensiva. Enlaces, wallets y datos de contacto están redactados. No es asesoría legal.