Akira — 20240531
Dated recordFrom extortion.wiki, the ransomware negotiation research archive
A validated static rendering of 55 messages in source-array order. Transcript text is preserved without editorial additions.
- Actor
- Akira
- Record date
- May 31, 2024
- Messages
- 55
- Participants
- Akira, Victim
Preserved messages
Actor / other Victim
Select a message number for a stable citation link. Text remains selectable; hard-wrapped source lines are joined for reading, intentional blank-line paragraph breaks remain, and written URLs remain inert.
-
Message 001 From Victim Victim Date Not recorded > Hello
-
Message 002 From Victim Victim Date Not recorded > hello
-
Message 003 From Akira Actor / other Date Not recorded > Hello. You've reached Akira support chat. Currently, we are preparing the list of data we took from your network. For now you have to know that dealing with us is the best possible way to settle this quick and cheap. Keep in touch and be patient with us. Do you have a permission to conduct a negotiation on behalf of your organization? Once we get your reply you will be provided with all the details.
-
Message 004 From Victim Victim Date Not recorded > Hello
-
Message 005 From Akira Actor / other Date Not recorded > Do you see our messages?
-
Message 006 From Victim Victim Date Not recorded > hello
-
Message 007 From Akira Actor / other Date Not recorded > Please refresh this chat periodically.
-
Message 008 From Victim Victim Date Not recorded > Hi
-
Message 009 From Victim Victim Date Not recorded > What are the steps to recovery?
-
Message 010 From Akira Actor / other Date Not recorded > Do you have a permission to conduct a negotiation on behalf of your organization? Once we get your reply you will be provided with all the details.
-
Message 011 From Victim Victim Date Not recorded > yes
-
Message 012 From Victim Victim Date Not recorded > any update?
-
Message 013 From Akira Actor / other Date Not recorded > Please confirm you have a permission to conduct a negotiation on behalf of your organization and we will proceed with the details.
-
Message 014 From Victim Victim Date Not recorded > yes, i have permission
-
Message 015 From Victim Victim Date Not recorded > do you need any information?
-
Message 016 From Victim Victim Date Not recorded > hello?
-
Message 017 From Victim Victim Date Not recorded >?
-
Message 018 From Victim Victim Date Not recorded > hi?
-
Message 019 From Akira Actor / other Date Not recorded > The longer you ignore our question, the longer you remain non-operational.
-
Message 020 From Victim Victim Date Not recorded > i have permission to negotiation
-
Message 021 From Victim Victim Date Not recorded > you need a proof?
-
Message 022 From Victim Victim Date Not recorded > I need information on how recovery works
-
Message 023 From Akira Actor / other Date Not recorded > I need you confirmation that you have a permission to conduct a negotiation on behalf of your company and make financial decisions.
-
Message 024 From Victim Victim Date Not recorded > yes, i have permission to negotiation
-
Message 025 From Victim Victim Date Not recorded > what information do you need?
-
Message 026 From Victim Victim Date Not recorded > I'm ready to negotiate. How much?
-
Message 027 From Akira Actor / other Date Not recorded > Are you kidding us? Please answer our question and we will proceed.
-
Message 028 From Victim Victim Date Not recorded > Maybe I didn't understand your question. You questioned whether I am allowed to negotiate. The answer is yes, I have permission. Do you need any additional information that I didn't send? It's confusing. What question do I need to answer? I am the owner of the company, and I need to negotiate.
-
Message 029 From Akira Actor / other Date Not recorded > list.rar // 848 KB
-
Message 030 From Akira Actor / other Date Not recorded > These files were taken from your network prior to encryption. You can pick 2-3 random files up to 10 MB each from the list and we will upload them to this chat as a proof of possession. To prove that we can properly decrypt your data you can upload 2-3 encrypted files up to 10 MB each to our chat and we will upload decrypted copies back.
We're looking through your financial papers to come up with a reasonable demand to you. We offer: 1) full decryption assistance; 2) evidence of data removal; 3) security report on vulnerabilities we found; 4) guarantees not to publish or sell your data; 5) guarantees not to attack you in the future.
Let me know whether you're interested in a whole deal or in parts. This will affect the final price.
-
Message 031 From Victim Victim Date Not recorded > show me these files, please: E:\[redacted].doc E:\[redacted].doc
-
Message 032 From Victim Victim Date Not recorded > [redacted].ini.akira // 1.35 KB
-
Message 033 From Victim Victim Date Not recorded > and decrypt this.ini, please
-
Message 034 From Akira Actor / other Date Not recorded > files.rar // 145 KB
-
Message 035 From Victim Victim Date Not recorded > ok, and can you decrypt the.ini too?
-
Message 036 From Victim Victim Date Not recorded >?
-
Message 037 From Victim Victim Date Not recorded > Do you have access to just the documents on the list, or are there more documents?
-
Message 038 From Victim Victim Date Not recorded > If you choose partial, is it done per server, or per file?
-
Message 039 From Akira Actor / other Date Not recorded > We will decrypt every file that we encrypted. The list reflects everything we took. We do not decrypt per file.
-
Message 040 From Akira Actor / other Date Not recorded > The price for the whole deal is $690,000. You can send us encrypted files for test.
-
Message 041 From Victim Victim Date Not recorded > I will send the file for testing
-
Message 042 From Victim Victim Date Not recorded > [redacted].ini.akira // 1.35 KB
-
Message 043 From Victim Victim Date Not recorded > You did it?
-
Message 044 From Akira Actor / other Date Not recorded > What do you mean? Will you send encrypted files?
-
Message 045 From Victim Victim Date Not recorded > I will send the file for testing
-
Message 046 From Victim Victim Date Not recorded > [redacted].ini.akira // 1.35 KB
-
Message 047 From Akira Actor / other Date Not recorded > Wait a bit.
-
Message 048 From Akira Actor / other Date Not recorded > decrypted.7z // 494 Bytes
-
Message 049 From Akira Actor / other Date Not recorded > You can review. Ready to move to payment? Once you confirm I will give you our BTC wallet.
-
Message 050 From Akira Actor / other Date Not recorded > We are waiting for your decision regarding the deal within a few hours.
-
Message 051 From Akira Actor / other Date Not recorded > We see no decisions from you. Are you going to work with us?
-
Message 052 From Victim Victim Date Not recorded > We are assessing your proposal. It’s a tough financial decision. Please give us more time.
-
Message 053 From Akira Actor / other Date Not recorded > Hope 24 hours will be enough.
-
Message 054 From Akira Actor / other Date Not recorded > Have you decided something? We are going to announce the leak today.
-
Message 055 From Akira Actor / other Date Not recorded > You can find your company name in our news column: https://akiral2iz6a7qgd3ayp3l6yub7xx2uep76idk3u2kollpj5z3z636bad.onion If you want this post to be removed, we have to agree on something.