Akira — 20240127

Select a message number for a stable citation link. Text remains selectable; hard-wrapped source lines are joined for reading, intentional blank-line paragraph breaks remain, and written URLs remain inert.

1. Message 001 From Victim Victim Date Not recorded

   > Please confirm this message

2. Message 002 From Akira Actor / other Date Not recorded

   > Hello

3. Message 003 From Akira Actor / other Date Not recorded

   > You've reached Akira support chat. Currently, we are preparing the list of data we took from your network. For now you have to know that dealing with us is the best possible way to settle this quick and cheap. Keep in touch and be patient with us. We will reach out to you soon. Do you have a permission to conduct a negotiation on behalf of your organization? Once we get a response you will be provided with all the details.

4. Message 004 From Victim Victim Date Not recorded

   > Yes I do

5. Message 005 From Akira Actor / other Date Not recorded

   > Please wait.

6. Message 006 From Victim Victim Date Not recorded

   > Just checking you are still here?

7. Message 007 From Akira Actor / other Date Not recorded

   > We are. Wait for the details.

8. Message 008 From Victim Victim Date Not recorded

   > Do you have the details yet?

9. Message 009 From Akira Actor / other Date Not recorded

   > [redacted].rar // 371 KB

10. Message 010 From Akira Actor / other Date Not recorded

    > These files were taken from your network prior to encryption. You can pick 2-3 random files from the list and we will upload them to this chat as a proof of possession. To prove that we can properly decrypt your data you can upload 2-3 encrypted files to our chat and we will upload decrypted copies back.

    We're looking through your financial papers to come up with a reasonable demand to you. We offer: 1) full decryption assistance; 2) evidence of data removal; 3) security report on vulnerabilities we found; 4) guarantees not to publish or sell your data; 5) guarantees not to attack you in the future.

    Let me know whether you're interested in a whole deal or in parts. This will affect the final price.

11. Message 011 From Victim Victim Date Not recorded

    > We need a few days to look at the list and pick 2-3 files. Ill get back to you on monday

12. Message 012 From Akira Actor / other Date Not recorded

    > Standing by.

13. Message 013 From Akira Actor / other Date Not recorded

    > Hello. I am waiting for the files.

14. Message 014 From Akira Actor / other Date Not recorded

    > So, we've gone through your files to define your financial abilities. We've been looking through your bank statements, net income, cyber liability limits, financial audits - all the info that might help us to calculate our demand to you. We're willing to set a $300,000 price for ALL the services we offer:

    1) full decryption assistance; 2) evidence of data removal; 3) security report on vulnerabilities we found; 4) guarantees not to publish or sell your data; 5) guarantees not to attack you in the future.

    Let me know whether you're interested in a whole deal or in parts. This will affect the final price. Atm, we highly recommend that you refer to your cyber insurance to cover our amount quickly minimizing all upcoming risks.

15. Message 015 From Victim Victim Date Not recorded

    > Thank you for this update. I will get you the filenames very soon and we will also discuss the price you have shared

16. Message 016 From Akira Actor / other Date Not recorded

    > Standing by.

17. Message 017 From Victim Victim Date Not recorded

    > 1. [redacted].pdf 2. [redacted].xlsx 3. [redacted].docx

18. Message 018 From Akira Actor / other Date Not recorded

    > [redacted].rar // 541 KB

19. Message 019 From Victim Victim Date Not recorded

    > I'll review these today

20. Message 020 From Akira Actor / other Date Not recorded

    > We have to proceed to payment options.

21. Message 021 From Victim Victim Date Not recorded

    > Ok but first I need to see proof of decryption assistance. I will get you files today

22. Message 022 From Akira Actor / other Date Not recorded

    > Standing by.

23. Message 023 From Victim Victim Date Not recorded

    > [redacted].xml.akira // 518 KB

24. Message 024 From Victim Victim Date Not recorded

    > [redacted].akira // 749 KB

25. Message 025 From Victim Victim Date Not recorded

    > Here

26. Message 026 From Akira Actor / other Date Not recorded

    > Please wait.

27. Message 027 From Akira Actor / other Date Not recorded

    > [redacted] // 748 KB

28. Message 028 From Akira Actor / other Date Not recorded

    > [redacted].xml // 517 KB

29. Message 029 From Victim Victim Date Not recorded

    > Thanks. Is it expected that the files become 1kb smaller after decryption?

30. Message 030 From Akira Actor / other Date Not recorded

    > Yes, it is.

31. Message 031 From Akira Actor / other Date Not recorded

    > Ready to move to payment?

32. Message 032 From Victim Victim Date Not recorded

    > We have no more questions at the moment. We confirm your abilities to recover the data and the details about our files. I am meeting with our boss in the morning to go over our next steps and I will check in with you after that

33. Message 033 From Akira Actor / other Date Not recorded

    > Waiting for the update.

34. Message 034 From Victim Victim Date Not recorded

    > Here is the update. We have taken note of what is still encrypted and the financial impact of losing it or rebuilding it. I am running the numbers again to confirm but I dont think it amounts to the $300k that was quoted. To discuss payment, we would hope to see a revised quote, if that is something you can provide.

35. Message 035 From Akira Actor / other Date Not recorded

    > Let me know what sum you see reasonable and I'll discuss it with my team.

36. Message 036 From Victim Victim Date Not recorded

    > I will confirm our assessment with my boss and get back to you after the weekend

37. Message 037 From Akira Actor / other Date Not recorded

    > Waiting.

38. Message 038 From Akira Actor / other Date Not recorded

    > so?

39. Message 039 From Akira Actor / other Date Not recorded

    > You have 24 hours to give us your decision regarding this deal. If you stay silent, we will announce the breach on our blog.

40. Message 040 From Akira Actor / other Date Not recorded

    > You can find your company name in our news column: akiral2iz6a7qgd3ayp3l6yub7xx2uep76idk3u2kollpj5z3z636bad.onion If you want this post to be removed, we have to agree on something.

41. Message 041 From Akira Actor / other Date Not recorded

    > Your data will be available for downloading soon.