Akira — 20240201

Select a message number for a stable citation link. Text remains selectable; hard-wrapped source lines are joined for reading, intentional blank-line paragraph breaks remain, and written URLs remain inert.

1. Message 001 From Victim Victim Date Not recorded

   > [redacted]

2. Message 002 From Akira Actor / other Date Not recorded

   > Hello. You've reached Akira support chat. Currently, we are preparing the list of data we took from your network. For now you have to know that dealing with us is the best possible way to settle this quick and cheap. Keep in touch and be patient with us. Do you have a permission to conduct a negotiation on behalf of your organization? Once we get a response you will be provided with all the details.

3. Message 003 From Victim Victim Date Not recorded

   > Yes

4. Message 004 From Akira Actor / other Date Not recorded

   > Wait a bit.

5. Message 005 From Akira Actor / other Date Not recorded

   > List.7z // 554 KB

6. Message 006 From Akira Actor / other Date Not recorded

   > These files were taken from your network prior to encryption. You can pick 2-3 random files from the list and we will upload them to this chat as a proof of possession. To prove that we can properly decrypt your data you can upload 2-3 encrypted files to our chat and we will upload decrypted copies back.

7. Message 007 From Victim Victim Date Not recorded

   > [redacted].pdf

8. Message 008 From Victim Victim Date Not recorded

   > [redacted].docx

9. Message 009 From Victim Victim Date Not recorded

   > [redacted].docx

10. Message 010 From Victim Victim Date Not recorded

    > Files.zip // 54.1 KB

11. Message 011 From Akira Actor / other Date Not recorded

    > Passing to my tech dept. Please wait.

12. Message 012 From Akira Actor / other Date Not recorded

    > decrypted.7z // 22 KB

13. Message 013 From Akira Actor / other Date Not recorded

    > files.7z // 538 KB

14. Message 014 From Akira Actor / other Date Not recorded

    > So, we've gone through your files to define your financial abilities. We've been looking through your bank statements, net income, cyber liability limits, financial audits - all the info that might help us calculate our demand to you. We're willing to set a $350,000 price for ALL the services we offer: 1) full decryption assistance; 2) evidence of data removal; 3) security report on vulnerabilities we found; 4) guarantees not to publish or sell your data; 5) guarantees not to attack you in the future. Let me know whether you're interested in a whole deal or in parts. This will affect the final price.

15. Message 015 From Victim Victim Date Not recorded

    > We are interesed in parts. Can you detail the price on every service?

16. Message 016 From Akira Actor / other Date Not recorded

    > 1) full decryption assistance - $250,000; 2) evidence of data removal - $150,000; 3) security report on vulnerabilities we found - $25,000; 4) guarantees are included to each of the above options.

17. Message 017 From Victim Victim Date Not recorded

    > The amount requested by you is exaggerated. The amount requested by you is half of the company's profit for the whole year. If we refer to the encrypted data, it can be recovered by manually restoring the databases, something that certainly costs less than $250,000 - the cost of total decryption. We are still willing to negotiate, but with a much smaller amount. The maximum we can offer is $50,000, but we cannot pay the amount in full, but in installments, because we cannot legally remove this amount from the accounting. Our proposal is to divide this amount into 10 packages, and you decrypt packages of files for us. We pay in advance for each package.

18. Message 018 From Akira Actor / other Date Not recorded

    > We will never accept your terms, so we can end this right now. You can go back and forth but we will never be lower than 230k for the full package. The first option is $140,000 and it is the bottom line. We accept payments in full, so you can transfer funds to your broker in parts.

19. Message 019 From Victim Victim Date Not recorded

    > How will we pay?

20. Message 020 From Victim Victim Date Not recorded

    > what is the bank account?

21. Message 021 From Akira Actor / other Date Not recorded

    > We accept payments in bitcoins. Once we agree on the price, I'll provide you our wallet ID.

22. Message 022 From Victim Victim Date Not recorded

    > The board has agreed to a 100.000 euro payment

23. Message 023 From Victim Victim Date Not recorded

    > This is for full decryption

24. Message 024 From Victim Victim Date Not recorded

    > We can do it in one payment

25. Message 025 From Akira Actor / other Date Not recorded

    > ok. We are ready to close the deal at $120,000. I am pretty sure you can add a bit to your current offer and make a transaction that will satisfy both parties. Here is our BTC wallet [redacted] Please let me know how soon can we expect the transfer.

26. Message 026 From Akira Actor / other Date Not recorded

    > Hello. Are you going to finish the deal with us?

27. Message 027 From Victim Victim Date Not recorded

    > Hello! We are processing the request with the Financial Department and Legal

28. Message 028 From Akira Actor / other Date Not recorded

    > How long should we wait?

29. Message 029 From Victim Victim Date Not recorded

    > We have made a test transaction. The board is reluctant to this type of payment. Now we wait for confirmation of the payment.

30. Message 030 From Akira Actor / other Date Not recorded

    > 0.00430313 received. You can proceed with the full amount.

31. Message 031 From Akira Actor / other Date Not recorded

    > What's your progress?

32. Message 032 From Victim Victim Date Not recorded

    > Economic department issues

33. Message 033 From Akira Actor / other Date Not recorded

    > How soon can w eexpect the rest?

34. Message 034 From Akira Actor / other Date Not recorded

    > I am waiting for an update from you today.

35. Message 035 From Victim Victim Date Not recorded

    > It seems the board is doesn't trust to pay the money

36. Message 036 From Akira Actor / other Date Not recorded

    > Can you please explain? Are we going to have a deal? You've already sent us the test payment.

37. Message 037 From Victim Victim Date Not recorded

    > The board came to the conclusion that we have no warranty that we will get our data back. The risk of not getting anything vs. the amount that we have to pay.

38. Message 038 From Akira Actor / other Date Not recorded

    > We've proven that we can decrypt the files and after payment we can give you back the files we took from your network. Our initial demand has been decreased significantly and now you are saying that there is a risk. Did I understand you right that this is your final decision and there will be no deal with you?

39. Message 039 From Victim Victim Date Not recorded

    > I'm sorry. It is not my decision

40. Message 040 From Akira Actor / other Date Not recorded

    > OK Thanks for the information. We will announce this incident on our blog and your data will be uploaded there as well.