Akira — 20250222
Dated recordFrom extortion.wiki, the ransomware negotiation research archive
A validated static rendering of 72 messages in source-array order. Transcript text is preserved without editorial additions.
- Actor
- Akira
- Record date
- Feb 22, 2025
- Messages
- 72
- Participants
- Akira, Victim
Preserved messages
Actor / other Victim
Select a message number for a stable citation link. Text remains selectable; hard-wrapped source lines are joined for reading, intentional blank-line paragraph breaks remain, and written URLs remain inert.
-
Message 001 From Victim Victim Date Not recorded > We would like to know what data you took from us
-
Message 002 From Akira Actor / other Date Not recorded > Hello. You've reached an Akira support chat. Currently, we are preparing the list of data we took from your network. For now you have to know that dealing with us is the best possible way to settle this quick and cheap. Keep in touch and be patient with us. We will reach out to you soon. Do you have a permission to conduct a negotiation on behalf of your organization? Once we get a response you will be provided with all the details.
-
Message 003 From Victim Victim Date Not recorded > Yes
-
Message 004 From Akira Actor / other Date Not recorded > list (20).txt // 798 KB
-
Message 005 From Akira Actor / other Date Not recorded > These files were taken from your network prior to encryption. You can pick 2-3 random files up to 10 MB each from the list and we will upload them to this chat as a proof of possession. To prove that we can properly decrypt your data you can upload 2-3 encrypted files up to 10 MB each to our chat and we will upload decrypted copies back.
We're looking through your financial papers to come up with a reasonable demand to you. We offer: 1) full decryption assistance; 2) evidence of data removal; 3) security report on vulnerabilities we found; 4) guarantees not to publish or sell your data; 5) guarantees not to attack you in the future.
Let me know whether you're interested in a whole deal or in parts. This will affect the final price.
-
Message 006 From Victim Victim Date Not recorded > Thank you for sharing this information and the file list. We'll review everything and follow up with you on Monday.
-
Message 007 From Akira Actor / other Date Not recorded > Waiting.
-
Message 008 From Victim Victim Date Not recorded > Taking more time than we thought to check this list. Need until tomorrow if thats okay
-
Message 009 From Akira Actor / other Date Not recorded > That's is not okay. Provide a file request today.
-
Message 010 From Victim Victim Date Not recorded > We first contacted you over the weekend and we haven't had enough time to check this list. It's not the easiest thing to skim through all of these directories.
-
Message 011 From Akira Actor / other Date Not recorded > You can ask for any not large file from the list. It doesn't take much time.
-
Message 012 From Victim Victim Date Not recorded > Sorry for the wait. Still understanding the data but please send these
-
Message 013 From Victim Victim Date Not recorded > E:\[redacted].com\[redacted].docx
-
Message 014 From Victim Victim Date Not recorded > E:\[redacted].com\[redacted].xlsx
-
Message 015 From Victim Victim Date Not recorded > E:\[redacted].com\[redacted].xlsx
-
Message 016 From Akira Actor / other Date Not recorded > Files.rar // 1.93 MB
-
Message 017 From Akira Actor / other Date Not recorded > Here are the files. Do you want to test our decryption tool?
-
Message 018 From Victim Victim Date Not recorded > Yes, how does that work?
-
Message 019 From Akira Actor / other Date Not recorded > Are you trying to stall? To prove that we can properly decrypt your data you can upload 2-3 encrypted files up to 10 MB each to our chat and we will upload decrypted copies back. Waiting for the files today.
-
Message 020 From Akira Actor / other Date Not recorded > We're willing to set a $450,000 price for ALL the services we offer. Waiting for your files today.
-
Message 021 From Victim Victim Date Not recorded > [redacted].jpg.akira // 37.7 KB
-
Message 022 From Victim Victim Date Not recorded > [redacted].docx.akira // 155 KB
-
Message 023 From Victim Victim Date Not recorded > Please bear with us. We don't want to create an error so we are following your guidance. Can you fix these?
-
Message 024 From Akira Actor / other Date Not recorded > Please wait.
-
Message 025 From Akira Actor / other Date Not recorded > Decrypted.7z // 148 KB
-
Message 026 From Akira Actor / other Date Not recorded > Here are the files. Are you ready to proceed with payment?
-
Message 027 From Victim Victim Date Not recorded > Can we slow down just a bit? We're checking these files but you're asking us for almost half a million. Other companies just pay you instantly?
-
Message 028 From Akira Actor / other Date Not recorded > Yes, they do. You have until tomorrow to review the files. We have to move to payment.
-
Message 029 From Victim Victim Date Not recorded > We need to set this straight. We reached out to you over the weekend and we've spent each weekday trying to turn on our bricked computers, which has been a slow process. We've also been reviewing your list and now you're asking for $450,000. We're a small shop out of [redacted], not some large corporation in a big city. Can we get more than 1 day to wrap our heads around all of this?
-
Message 030 From Akira Actor / other Date Not recorded > How much time do you want to gather the amount?
-
Message 031 From Victim Victim Date Not recorded > We can't promise any sort of payment at this rate but Tuesday should give us enough time to see how this may play out. I don't handle our finances but I know this is going to be quite the exercise to see what we can come up with.
-
Message 032 From Akira Actor / other Date Not recorded > We cannot give you until Tuesday. We will give you until Thursday evening the latest.
-
Message 033 From Victim Victim Date Not recorded > That's tomorrow...
-
Message 034 From Victim Victim Date Not recorded > We have a handful of employees. We don't make millions and millions in revenue. How do you expect us to evaluate all of this in 24 hours? If we can't have time, then we have no idea how we're going to work with you.
-
Message 035 From Akira Actor / other Date Not recorded > Just give us an update on Thursday evening. If you pay this week, we can make a good discount.
-
Message 036 From Victim Victim Date Not recorded > I wanted to get back to you before the evening. I really wish I had a better answer but right now the only thing we have available is some petty cash for a few thousand. We need to meet with our accountant since he knows more about this finance stuff and he's not back until next week. This is a lot more serious than we thought and I don't want to lost contact with you. Can you wait for him to get back so we can see what options we have?
-
Message 037 From Akira Actor / other Date Not recorded > We can wait till Monday for a serious counter offer. The incident will be announced if your number is inadequate.
-
Message 038 From Victim Victim Date Not recorded > I think we can make that work
-
Message 039 From Akira Actor / other Date Not recorded > Hope so.
-
Message 040 From Akira Actor / other Date Not recorded > What's your offer?
-
Message 041 From Victim Victim Date Not recorded > Our accountant is still performing an analysis but I told them that we need to get some sort of response to you today. Nothing is finalized but for now he's comfortable offering $80,000. I don't know how to even get this money to you but is this something you can allow?
-
Message 042 From Akira Actor / other Date Not recorded > This doesn't work. $80,000 offer is too far from our demand. We do not work with 5 figure amounts. Update your offer today, if you don't want us to announce the incident.
-
Message 043 From Victim Victim Date Not recorded > The accountant is still reviewing our financials. It's been even harder since he doesn't have access to some of the drives. This isn't our final number but there's nothing else he can provide today. He's going through dozens of reports and re-calculating some of the locked data so he's going to need a few days to figure this out.
-
Message 044 From Akira Actor / other Date Not recorded > We will not give more than 24 hours. Hurry up.
-
Message 045 From Victim Victim Date Not recorded > If we keep getting these short deadlines, then we're going to continue coming up short. It's just a few of us that work here and each day has been painful for us. We don't have access to our files and we're trying to come up with a price that feels unfair. If you're not going to meet us on the price, then please give us enough time to actually give you a proper response. We don't need a whole week, just a few days.
-
Message 046 From Akira Actor / other Date Not recorded > You have the deadline. No one is going to drag this out.
-
Message 047 From Victim Victim Date Not recorded > So we have like 2-3 days? That's all we need.
-
Message 048 From Akira Actor / other Date Not recorded > No, we can't give you 3 days. Update us on Tuesday evening. We will decide how to proceed with you.
-
Message 049 From Victim Victim Date Not recorded > We'll try but we really don't know what we can come up with in a few hours...
-
Message 050 From Akira Actor / other Date Not recorded > You have to take it seriously. We will not wait long.
-
Message 051 From Victim Victim Date Not recorded > Ok this is where we're at. The accountant said that we were already in bad shape to start the year and the budget was trimmed because our profits aren't getting better. We may be able to sideline a small project to come up with more cash for you, but anything more and we're going to need help from the bank. There is nothing else left for now. To sum it up, we can pay $103,000 now. Anything more will require help from the bank.
-
Message 052 From Akira Actor / other Date Not recorded > This is something already. You can understand that you are still far from our demand but we are open to work with you. So, the leadership decided to make a big step towards you and we are ready to accept $400,000 if you pay this week.
-
Message 053 From Victim Victim Date Not recorded > $400,000? This week?
-
Message 054 From Victim Victim Date Not recorded > Is this some sort of a trick? How do you think we'll 4x our offer in 3 days?
-
Message 055 From Akira Actor / other Date Not recorded > Take a loan or try to borrow. Ask your accountant. You have a few hundred thousands in cash and a couple of dozens in assets.
-
Message 056 From Victim Victim Date Not recorded > I don't know much about the financials but I know our accountant has said multiple times that we are already in a lot of debt. If there's any chance of borrowing then that will take time too. I hate sounding like a broken record constantly asking for time, but you need to give us something to work off of. Can we get the rest of this week to see our options then update you on Monday?
-
Message 057 From Akira Actor / other Date Not recorded > We cannot wait that long. Update us on Thursday evening the latest.
-
Message 058 From Victim Victim Date Not recorded > We have a few banks that we normally work with and I can guarantee that they won't sign off on a loan in 48 hours. We're at their mercy if we go down this path so Thursday won't work.
-
Message 059 From Akira Actor / other Date Not recorded > Do your best. We believe you will make it.
-
Message 060 From Victim Victim Date Not recorded > Just letting you know we are still working on this, but it's moving slowly. We're at the mercy of the banks right now
-
Message 061 From Akira Actor / other Date Not recorded > Keep us posted on your progress.
-
Message 062 From Victim Victim Date Not recorded > We certainly will. We want this resolved just as much as you do.
-
Message 063 From Akira Actor / other Date Not recorded > Waiting.
-
Message 064 From Akira Actor / other Date Not recorded > What's your progress?
-
Message 065 From Victim Victim Date Not recorded > We just received word from the bank working with us that they won't have a decision on the loan until next weekend. Either Monday or Tuesday.
-
Message 066 From Victim Victim Date Not recorded > We have to keep providing them with documentation of our financials so we can justify the amount of the loan so there is a lot involved.
-
Message 067 From Akira Actor / other Date Not recorded > You have to push your bank to get a quicker decision from them. The deadline is Monday. If you provide little or no offer, we will announce the incident incident.
-
Message 068 From Victim Victim Date Not recorded > If we had that power we would tell them that, but it's a bank and we need something from them. They aren't going to just give us money without doing their due diligence.
-
Message 069 From Victim Victim Date Not recorded > We will let you know on Monday if we have their decision or not.
-
Message 070 From Akira Actor / other Date Not recorded > Ok. We will see on Monday whether your data be published or not.
-
Message 071 From Akira Actor / other Date Not recorded > You have 24 hours to give us your decision regarding this deal. If you stay silent, we will announce the breach on our blog.
-
Message 072 From Akira Actor / other Date Not recorded > You can find your company name in our news column:
https://akiral2iz6a7qgd3ayp3l6yub7xx2uep76idk3u2kollpj5z3z636bad.onion
If you want this post deleted, we must come to an agreement.