Akira — 20250112
Dated recordFrom extortion.wiki, the ransomware negotiation research archive
A validated static rendering of 44 messages in source-array order. Transcript text is preserved without editorial additions.
- Actor
- Akira
- Record date
- Jan 12, 2025
- Messages
- 44
- Participants
- Akira, Victim
Preserved messages
Actor / other Victim
Select a message number for a stable citation link. Text remains selectable; hard-wrapped source lines are joined for reading, intentional blank-line paragraph breaks remain, and written URLs remain inert.
-
Message 001 From Akira Actor / other Date Not recorded > Hello. You've reached Akira support chat. Currently, we are preparing the list of data we took from your network. For now you have to know that dealing with us is the best possible way to settle this quick and cheap. Keep in touch and be patient with us. Do you have a permission to conduct a negotiation on behalf of your organization? Once we get your reply you will be provided with all the details.
-
Message 002 From Akira Actor / other Date Not recorded > Are you going to work with us?
-
Message 003 From Victim Victim Date Not recorded > yes, have permission and will wait for list of data taken. can you tell us the price in the meantime?
-
Message 004 From Akira Actor / other Date Not recorded > Hello. You've reached Akira support chat. Currently, we are preparing the list of data we took from your network. For now you have to know that dealing with us is the best possible way to settle this quick and cheap. Keep in touch and be patient with us. Do you have a permission to conduct a negotiation on behalf of your organization? Once we get your reply you will be provided with all the details.
-
Message 005 From Victim Victim Date Not recorded > i have permission
-
Message 006 From Akira Actor / other Date Not recorded > List.7z // 119 KB
-
Message 007 From Akira Actor / other Date Not recorded > These files were taken from your network prior to encryption. You can pick 2-3 random files up to 10 MB each from the list and we will upload them to this chat as a proof of possession. To prove that we can properly decrypt your data you can upload 2-3 encrypted files up to 10 MB each to our chat and we will upload decrypted copies back. We're looking through your financial papers to come up with a reasonable demand to you. We offer: 1) full decryption assistance; 2) evidence of data removal; 3) security report on vulnerabilities we found; 4) guarantees not to publish or sell your data; 5) guarantees not to attack you in the future. Let me know whether you're interested in a whole deal or in parts. This will affect the final price.
-
Message 008 From Victim Victim Date Not recorded > i want the package
-
Message 009 From Akira Actor / other Date Not recorded > The full package is $750,000. Do you want to test our decryption tool?
-
Message 010 From Akira Actor / other Date Not recorded > You have 24 hours to give us your decision regarding this deal. If you stay silent, we will announce the breach on our blog.
-
Message 011 From Victim Victim Date Not recorded > We are reviewing the file list and have a few files we would like you to provide as proof of possession
-
Message 012 From Victim Victim Date Not recorded > E:\[redacted].com\unpacked\[redacted].png
-
Message 013 From Victim Victim Date Not recorded > E:\[redacted].com\unpacked\[redacted].pdf
-
Message 014 From Victim Victim Date Not recorded > Please stop the harrassing emails please
-
Message 015 From Akira Actor / other Date Not recorded > files.rar // 113 KB
-
Message 016 From Akira Actor / other Date Not recorded > If you need to test our tool, send the files today.
-
Message 017 From Victim Victim Date Not recorded > We are working on our side to evaluate your proposal
-
Message 018 From Akira Actor / other Date Not recorded > We are waiting for your decision today.
-
Message 019 From Akira Actor / other Date Not recorded > Do you really think we will wait forever?
-
Message 020 From Victim Victim Date Not recorded > we are working as fast as we can. Remove item 1 and let's know the update proposal and we will start to move quicker
-
Message 021 From Akira Actor / other Date Not recorded > $400,000 for the options 2-5. We are waiting your reply today.
-
Message 022 From Victim Victim Date Not recorded > today and a deal at 72,500. take away item 3 as well.
-
Message 023 From Akira Actor / other Date Not recorded > If you take away item 3, we are decrease the price to $340,000. 5 figure amount cannot be considered. Make a reduction asap.
-
Message 024 From Victim Victim Date Not recorded > We appreciate the further discounts, but 340,000 is not reasonable. We are ready to step forward further at your six figure ask of 101,500.
-
Message 025 From Akira Actor / other Date Not recorded > $300,000 if you pay by Monday. Hurry up.
-
Message 026 From Victim Victim Date Not recorded > We are ready to hurry up but 300,000 is still a tall number for us.
-
Message 027 From Akira Actor / other Date Not recorded > You still have time. Do your best.
-
Message 028 From Victim Victim Date Not recorded > we are working on our end but that number is still to high for consideration. The partners can step forward at 138,500
-
Message 029 From Akira Actor / other Date Not recorded > $285,000 and we close this.
-
Message 030 From Victim Victim Date Not recorded > our numbers are still far apart to get to closure. 151,500 and close this
-
Message 031 From Akira Actor / other Date Not recorded > $265,000. Let's end this as we are about to announce the incident.
-
Message 032 From Victim Victim Date Not recorded > No need for threats as we are trying to get to an agreeable solution. We are 105,000 apart. What is your solution
-
Message 033 From Akira Actor / other Date Not recorded > The solution is that you gather the rest and we have a deal. We are waiting to end this today.
-
Message 034 From Victim Victim Date Not recorded > Gathering the full funds is problematic. But we will make one more step at 169,600
-
Message 035 From Akira Actor / other Date Not recorded > We're willing to take the same step and come down to $240,000. We're losing interest guys.
-
Message 036 From Victim Victim Date Not recorded > Can we end this at 201,500 that should make all parties happy
-
Message 037 From Akira Actor / other Date Not recorded > $225,000 will make us all happy. Here is our BTC wallet [redacted]. Let us know when can we expect the transfer.
-
Message 038 From Victim Victim Date Not recorded > coin has been sent
-
Message 039 From Victim Victim Date Not recorded > please provide us the materials
-
Message 040 From Akira Actor / other Date Not recorded > unlockers.7z // 2.1 MB
-
Message 041 From Akira Actor / other Date Not recorded > unlocker.exe -p="path_to_unlock" unlocker.exe -s="C:\paths.txt" where "paths.txt" is a list of paths for the decryptor, each path on a new line ESXi commands 1) chmod +x unlocker 2)./unlocker -p="/vmfs/volumes"
-
Message 042 From Victim Victim Date Not recorded > thank you, received. please let us know when to expect evidence of data removal
-
Message 043 From Akira Actor / other Date Not recorded > Should be provided soon.
-
Message 044 From Akira Actor / other Date Not recorded > Deletion.7z // 69.9 KB