Akira — 20240723
Dated recordFrom extortion.wiki, the ransomware negotiation research archive
A validated static rendering of 43 messages in source-array order. Transcript text is preserved without editorial additions.
- Actor
- Akira
- Record date
- Jul 23, 2024
- Messages
- 43
- Participants
- Akira, Victim
Preserved messages
Actor / other Victim
Select a message number for a stable citation link. Text remains selectable; hard-wrapped source lines are joined for reading, intentional blank-line paragraph breaks remain, and written URLs remain inert.
-
Message 001 From Victim Victim Date Not recorded > hi
-
Message 002 From Victim Victim Date Not recorded > hi
-
Message 003 From Victim Victim Date Not recorded > hi
-
Message 004 From Victim Victim Date Not recorded > anybody out there?
-
Message 005 From Victim Victim Date Not recorded > hello?
-
Message 006 From Akira Actor / other Date Not recorded > Hello. You've reached an Akira support chat. Currently, we are preparing the list of data we took from your network. For now you have to know that dealing with us is the best possible way to settle this quick and cheap. Keep in touch and be patient with us. We will reach out to you soon.
Do you have a permission to conduct a negotiation on behalf of your organization? Once we get a response you will be provided with all the details.
-
Message 007 From Victim Victim Date Not recorded > nobody seems to be there, we will come back later
-
Message 008 From Akira Actor / other Date Not recorded > Do you see our messages?
-
Message 009 From Victim Victim Date Not recorded > hi there, got another tor browser, now I see your messages
-
Message 010 From Victim Victim Date Not recorded > yes, I have a permission to negotiate on behalf of my organization
-
Message 011 From Akira Actor / other Date Not recorded > Please wait for details.
-
Message 012 From Victim Victim Date Not recorded > hello?
-
Message 013 From Victim Victim Date Not recorded > I can't see any message after your "Do you see our messages?"
-
Message 014 From Victim Victim Date Not recorded > I will come back to check new messages
-
Message 015 From Victim Victim Date Not recorded > hello?
-
Message 016 From Akira Actor / other Date Not recorded > Can you see my message?
-
Message 017 From Victim Victim Date Not recorded > yes
-
Message 018 From Victim Victim Date Not recorded > now I see "Can you see my message?", but I had to log out and log in again
-
Message 019 From Victim Victim Date Not recorded > it seems that I don't get an update in the chat directly
-
Message 020 From Victim Victim Date Not recorded > we will come back later as "please wait" seems to be a bit longer
-
Message 021 From Akira Actor / other Date Not recorded > List.rar // 2.48 MB
-
Message 022 From Akira Actor / other Date Not recorded > These files were taken from your network prior to encryption. You can pick 2-3 random files from the list and we will upload them to this chat as a proof of possession. To prove that we can properly decrypt your data you can upload 2-3 encrypted files to our chat and we will upload decrypted copies back.
-
Message 023 From Victim Victim Date Not recorded > I got the list and will check which files we want to see as prove of possession
-
Message 024 From Akira Actor / other Date Not recorded > Standing by.
-
Message 025 From Victim Victim Date Not recorded > we would like to see the following 3 files:
-
Message 026 From Victim Victim Date Not recorded > D:\[redacted].log
-
Message 027 From Victim Victim Date Not recorded > D:\[redacted].refs
-
Message 028 From Victim Victim Date Not recorded > D:\[redacted].png
-
Message 029 From Akira Actor / other Date Not recorded > Please wait.
-
Message 030 From Victim Victim Date Not recorded > Take your time, I will come back on monday
-
Message 031 From Victim Victim Date Not recorded > hi there, back again and ready to receive your files
-
Message 032 From Akira Actor / other Date Not recorded > The files will be uploaded shortly.
-
Message 033 From Akira Actor / other Date Not recorded > files.rar // 19.6 KB
-
Message 034 From Akira Actor / other Date Not recorded > Please review. Give me encrypted files asap, if you want to test our decryption tool.
-
Message 035 From Victim Victim Date Not recorded > got your files and check them, will come back with encrypted files asap
-
Message 036 From Akira Actor / other Date Not recorded > We are standing by to the files.
-
Message 037 From Victim Victim Date Not recorded > [redacted].akira // 21.6 KB
-
Message 038 From Victim Victim Date Not recorded > uploaded the one file to test the decryption tool
-
Message 039 From Akira Actor / other Date Not recorded > [redacted] // 21.1 KB
-
Message 040 From Victim Victim Date Not recorded > ok, matches, so: what next?
-
Message 041 From Akira Actor / other Date Not recorded > So, we've gone through your files to define your financial abilities. We've been looking through your bank statements, net income, cyber liability limits, financial audits - all the info that might help us to calculate our demand to you. We're willing to set a $350,000 price for ALL the services we offer:
1) full decryption assistance; 2) evidence of data removal; 3) security report on vulnerabilities we found; 4) guarantees not to publish or sell your data; 5) guarantees not to attack you in the future.
Let me know whether you're interested in a whole deal or in parts. This will affect the final price.
-
Message 042 From Victim Victim Date Not recorded > We decline and will not pay anything. This conversion is over.
-
Message 043 From Akira Actor / other Date Not recorded > OK. Thank you for the information.