Akira — 20230616

Select a message number for a stable citation link. Text remains selectable; hard-wrapped source lines are joined for reading, intentional blank-line paragraph breaks remain, and written URLs remain inert.

1. Message 001 From Victim Victim Date Not recorded

   > I'm here what do you want?

2. Message 002 From Victim Victim Date Not recorded

   > Im here

3. Message 003 From Victim Victim Date Not recorded

   > hey

4. Message 004 From Akira Actor / other Date Not recorded

   > Hello. You've reached an Akira support chat. Currently, we are preparing the list of data we took from your network. For now you have to know that dealing with us is the best possible way to settle this quick and cheap. Keep in touch and be patient with us. We will reach out to you soon.

   Do you have a permission to conduct a negotiation on behalf of your organization?

5. Message 005 From Victim Victim Date Not recorded

   > Yes I can negotiate but dont have to the ability to approve $$ amounts

6. Message 006 From Victim Victim Date Not recorded

   > And I will keep in touch

7. Message 007 From Akira Actor / other Date Not recorded

   > We will provide all the deal terms during this day. Please be in touch.

8. Message 008 From Akira Actor / other Date Not recorded

   > list.zip // 2.84 MB

9. Message 009 From Akira Actor / other Date Not recorded

   > These files were taken from your network prior to encryption. You can pick 2-3 random files from the list and we will upload them to this chat as a proof of possession. To prove that we can properly decrypt your data you can upload 2-3 encrypted files to our chat and we will upload decrypted copies back. We're looking through your financial papers to come up with a reasonable demand to you. We offer: 1) full decryption assistance; 2) evidence of data removal; 3) security report on vulnerabilities we found; 4) guarantees not to publish or sell your data; 5) guarantees not to attack you in the future. Let me know whether you're interested in a whole deal or in parts. This will affect the final price. If we don't get a respond within next 24 hours, we will be forced to announce your corporate data leak on our blog.

10. Message 010 From Victim Victim Date Not recorded

    > I have downloaded the file list and will review it with the team

11. Message 011 From Akira Actor / other Date Not recorded

    > Meanwhile, we will come up with a fair demand to you.

12. Message 012 From Akira Actor / other Date Not recorded

    > So, we've gone through your files to define your financial abilities. We've been looking through your bank statements, net income, cyber liability limits, financial audits - all the info that might help us to calculate our demand to you. We're willing to set a $165,000 price for ALL the services we offer:

    1) full decryption assistance; 2) evidence of data removal; 3) security report on vulnerabilities we found; 4) guarantees not to publish or sell your data; 5) guarantees not to attack you in the future.

    Let me know whether you're interested in a whole deal or in parts. This will affect the final price.

13. Message 013 From Victim Victim Date Not recorded

    > Thanks for the detail. I'm working on getting those files 2-3 files to decrypt and should have them tomorrow, but I have to travel in the morning but should have them by the time I land Talk to you tomorrw

14. Message 014 From Akira Actor / other Date Not recorded

    > We're standing by, thanks.

15. Message 015 From Victim Victim Date Not recorded

    > [redacted].txt.akira // 26.8 KB

16. Message 016 From Victim Victim Date Not recorded

    > [redacted].xml.akira // 866 Bytes

17. Message 017 From Victim Victim Date Not recorded

    > Sorry for the delay, here are two files, We are working on identifying file from the list to provide us.

18. Message 018 From Akira Actor / other Date Not recorded

    > We will upload the decrypted copies soon.

19. Message 019 From Akira Actor / other Date Not recorded

    > [redacted].txt // 26.3 KB

20. Message 020 From Akira Actor / other Date Not recorded

    > [redacted].xml // 324 Bytes

21. Message 021 From Victim Victim Date Not recorded

    > Got them thanks, I'll have the files we want soon

22. Message 022 From Akira Actor / other Date Not recorded

    > Standing by.

23. Message 023 From Akira Actor / other Date Not recorded

    > How long should we wait?

24. Message 024 From Victim Victim Date Not recorded

    > Capture4.JPG // 33.5 KB

25. Message 025 From Victim Victim Date Not recorded

    > Capture5.JPG // 43 KB

26. Message 026 From Victim Victim Date Not recorded

    > Capture6.JPG // 32.3 KB

27. Message 027 From Victim Victim Date Not recorded

    > Here are three files we would like for you to provide.

28. Message 028 From Akira Actor / other Date Not recorded

    > We will upload the files shortly.

29. Message 029 From Akira Actor / other Date Not recorded

    > [redacted] Corporation.pdf // 389 KB

30. Message 030 From Akira Actor / other Date Not recorded

    > [redacted].pdf // 107 KB

31. Message 031 From Akira Actor / other Date Not recorded

    > [redacted].pdf // 235 KB

32. Message 032 From Akira Actor / other Date Not recorded

    > Have you reviewed the files?

33. Message 033 From Victim Victim Date Not recorded

    > I'm downloading them now TY for getting these so quick. Let me get these back to the team.

34. Message 034 From Akira Actor / other Date Not recorded

    > Let us know when you have reviewed the files and are ready to proceed.

35. Message 035 From Victim Victim Date Not recorded

    > I forgot to mention that today and tomorrow are a major holiday in the US and most of leadership is gone till Wednesday. Some of us like me still have to work but can we pick this up wednesday?

36. Message 036 From Akira Actor / other Date Not recorded

    > We are well aware of the holiday. Thank you. Yes, you can. But time's ticking.

37. Message 037 From Akira Actor / other Date Not recorded

    > Hello. We're going to publish your data this week. Thank you.

38. Message 038 From Akira Actor / other Date Not recorded

    > You can find yourself in our news column: https://akiral2iz6a7qgd3ayp3l6yub7xx2uep76idk3u2kollpj5z3z636bad.onion/ If you want this post to be removed, we have to agree at something.

39. Message 039 From Victim Victim Date Not recorded

    > I see that you did post us on the site, how much time do we have before you publish?

40. Message 040 From Victim Victim Date Not recorded

    > The reason we ask is your demand is too high for us pay

41. Message 041 From Akira Actor / other Date Not recorded

    > The publishing will take 1-2 days. Have you managed to gather something to offer us?

42. Message 042 From Victim Victim Date Not recorded

    > Are you saying your willing to negotiate a lower price then?

43. Message 043 From Akira Actor / other Date Not recorded

    > It depends on the amount you can offer us at the moment.

44. Message 044 From Victim Victim Date Not recorded

    > We think we can muster about $23K to $25k in short time.

45. Message 045 From Akira Actor / other Date Not recorded

    > No way. We won't accept anything lower than $100k.

46. Message 046 From Victim Victim Date Not recorded

    > Hmmm that still to rich for us, let me see what we can counter offer Brb

47. Message 047 From Akira Actor / other Date Not recorded

    > We are waiting.

48. Message 048 From Victim Victim Date Not recorded

    > Since you posted us on your shame site, you have already caused damage to us and we have ambulance chasers and client calling so we cant put the genie back in the bottle. I counter offer with $38K.

49. Message 049 From Akira Actor / other Date Not recorded

    > You know our price. What you are offering is unacceptable. If you have no intentions to save your data, we will upload it to our blog.

50. Message 050 From Victim Victim Date Not recorded

    > We must have missed a step, We have no need for your decryptor. But we dont want our data posted either if we can afford it but not at your current demand

51. Message 051 From Akira Actor / other Date Not recorded

    > I see. We can delete your data for $80,000. Not less. After we are paid, we will provide you with the deletion log file.

52. Message 052 From Victim Victim Date Not recorded

    > We do appreciate your willingness to work with us, we can offer $59K USD. If you agree we can make payment promptly and if you can provide a BTC wallet we can work on getting money moved to pay that wallet

53. Message 053 From Akira Actor / other Date Not recorded

    > I've discussed with my management. We can accept $75,000. This is final. Do you need our btc wallet?

54. Message 054 From Victim Victim Date Not recorded

    > OK let me confirm with the team brb

55. Message 055 From Victim Victim Date Not recorded

    > Please provide the BTC wallet

56. Message 056 From Akira Actor / other Date Not recorded

    > We will provide you soon.

57. Message 057 From Akira Actor / other Date Not recorded

    > Here it is: [redacted]

58. Message 058 From Akira Actor / other Date Not recorded

    > How soon can you make a transfer?

59. Message 059 From Victim Victim Date Not recorded

    > I have to clear the wallet id to make sure I can pay it so I've been told. Then I can give you a better answer, but were trying for early next week payment

60. Message 060 From Akira Actor / other Date Not recorded

    > Ok

61. Message 061 From Victim Victim Date Not recorded

    > ok we are getting closer Here is the agreement

62. Message 062 From Victim Victim Date Not recorded

    > We will pay $75,000 to BTC Wallet [redacted] in exchange for taking us off your website, not publish or share our data with anyone, remove any social media reference about us, delete our data and show us proof you deleted the data, identify how you got into our network and never attack us again

63. Message 063 From Victim Victim Date Not recorded

    > You agree?

64. Message 064 From Akira Actor / other Date Not recorded

    > We do confirm the terms.

65. Message 065 From Victim Victim Date Not recorded

    > Can you confirm payment was made?

66. Message 066 From Victim Victim Date Not recorded

    > Please provide us with what you agrred to and we can complete this deal

67. Message 067 From Victim Victim Date Not recorded

    > I still see us on your shame site

68. Message 068 From Akira Actor / other Date Not recorded

    > Payment received.

69. Message 069 From Akira Actor / other Date Not recorded

    > The post deleted.

70. Message 070 From Akira Actor / other Date Not recorded

    > We will provide you with the report and the deletion log within 24 hours.

71. Message 071 From Akira Actor / other Date Not recorded

    > Initial access to your network was purchased on the dark web. Spending weeks inside of your network we've managed to detect some fails we highly recommend to eliminate: 1. None of your employees should open suspicious emails, suspicious links or download any files, much less run them on their computer. 2. Use strong passwords, change them as often as possible (1-2 times per month at least). Passwords should not match or be repeated on different resources. 3. Install 2FA wherever possible. 4. Use the latest versions of operating systems, as they are less vulnerable to attacks. 5. Update all software versions. 6. Use antivirus solutions and traffic monitoring tools. 7. Create a jump host for your VPN. Use unique credentials on it that differ from domain one. 8. Use backup software with cloud storage which supports a token key. 9. Instruct your employees as often as possible about online safety precautions. The most vulnerable point is the human factor and the irresponsibility of your employees, system administrators, etc. We wish you safety, calmness and lots of benefits in the future. Thank you for working with us and your careful attitude to your security. The deletion log is coming later.

72. Message 072 From Victim Victim Date Not recorded

    > Thanks for this I'll check in later for deletion proof

73. Message 073 From Akira Actor / other Date Not recorded

    > Sure. We will upload it soon.

74. Message 074 From Victim Victim Date Not recorded

    > Hey Its been several days since we made payment, can we get this completed today?

75. Message 075 From Akira Actor / other Date Not recorded

    > Hello. I think we can. I'll try to provide you with the log within a few hours.

76. Message 076 From Victim Victim Date Not recorded

    > ok ty

77. Message 077 From Akira Actor / other Date Not recorded

    > log_erase.7z // 327 KB

78. Message 078 From Akira Actor / other Date Not recorded

    > Here it is finally!

79. Message 079 From Victim Victim Date Not recorded

    > thanks

80. Message 080 From Akira Actor / other Date Not recorded

    > You're welcome.