We would like to get back our files etc. Our personal ID is 0384F759C4124EF970C8201B0AE06EBD. What are you're instructions to get our data back ?
Víctima
Hello, the price for your whole network is 100k USD.
Víctima
We have steal, malbox.edb and all your users files, If you don t pay we will public them, take in consideration we don t have what to do with them..
Víctima
The file you tried to decrypted is too big, try with a smaller file. I recomand a .jpg
Víctima
Hello, I consulted this number and this is not a realistic offer. We have backup and are able to restore, this is going to take some time and money. We are willing to pay 5k.
Víctima
If you have backup, why are u here? I deleted ur nas myself, ur altaro saved locally not cloud
Víctima
We have older backup files on external devices
Víctima
Come with a better offer than 5k
Víctima
So we are here because it's going to take time to restore those and enter the missing data
Víctima
Come with a better offer. 5k i will not accept it.
Víctima
I have to consult but I think they won't accept anything higher
Víctima
You are from the it company ?
Víctima
They hired you to speak with us? or what ?
Víctima
yes we are
Víctima
I consulted with the customer and they can pay 6k, this is maximum, they cant pay more.
Víctima
As we said, no midleman.. because in the past they fuckedup our negotians.
Víctima
6 k not gonna happen.
Víctima
give us a normal number than
Víctima
Normal ? 95k usd
Víctima
Final offer: 10k or we will begin restoring the backup that is offsite. You can respond till 15:30 CEST
Víctima
The lowest we can go, 60k, have a good day.
Víctima
good luck men
Víctima
ty
Víctima
We accept 15k euro! last and final price.
Víctima
10k"
Análisis del agente IA (defensivo)
Analiza esta negociación con IA (tácticas, errores, recomendaciones) solo cuando lo pidas.
Consejos de defensa
No respondas ni negocies sin tu equipo legal y de respuesta a incidentes.
Nunca pagues sin evaluar implicaciones legales/sancionatorias; pagar no garantiza recuperación.
Aísla los sistemas afectados y preserva evidencia antes de cualquier acción.
Activa tus respaldos offline probados; valida su integridad.
Contacta a tu CSIRT/CERT nacional y a las autoridades.
El atacante presiona con plazos y miedo: gana tiempo, no decidas en caliente.
Aviso: conversación divulgada públicamente, mostrada solo con fines educativos y de investigación defensiva. Enlaces, wallets y datos de contacto están redactados. No es asesoría legal.