Conti — 20211108

Select a message number for a stable citation link. Text remains selectable; hard-wrapped source lines are joined for reading, intentional blank-line paragraph breaks remain, and written URLs remain inert.

1. Message 001 From Victim Victim Date 08/11/2021, 20:11:24

   hi, I need to decrypt my files

2. Message 002 From Victim Victim Date 08/11/2021, 20:11:49

   the ID I found on my pc is ---BEGIN ID--- [redacted] ---END ID---

3. Message 003 From Victim Victim Date 08/11/2021, 20:15:19

   can you help me?

4. Message 004 From Conti Actor / other Date 08/11/2021, 22:23:58

   Hello! Can we help you, name your company and the person who communicates with us, are you authorized to negotiate?

5. Message 005 From Victim Victim Date 08/11/2021, 22:28:35

   hi, my name is [redacted] and I can negotiate with you

6. Message 006 From Victim Victim Date 08/11/2021, 22:37:36

   i'm an IT Consultant that the company call for this case

7. Message 007 From Conti Actor / other Date 08/11/2021, 22:38:44

   name your company?

8. Message 008 From Victim Victim Date 08/11/2021, 22:39:00

   [redacted]

9. Message 009 From Victim Victim Date 08/11/2021, 23:43:38

   sorry, in Italy it is sleeping time....

10. Message 010 From Victim Victim Date 08/11/2021, 23:43:56

    have you any answer for us?

11. Message 011 From Victim Victim Date 09/11/2021, 07:53:03

    hi, any news for us?

12. Message 012 From Victim Victim Date 09/11/2021, 14:12:20

    Hi, are you online?

13. Message 013 From Conti Actor / other Date 09/11/2021, 18:37:33

    Hello [redacted] Group

14. Message 014 From Conti Actor / other Date 09/11/2021, 18:39:08

    Your network was hacked, infrastructure encrypted and we downloaded many private information from your servers. Important! We have instructions and follow them, they do not change. Important! Read carefully: 1. The BASE PRICE for decrypt and non-recoverable deletion is $1,200,000. 2. We have 14 days to negotiate! the end of the term, the BASE PRICE will be doubled & we will publish you for the purpose of selling access to your network and datas of your company. 3. But there is also a positive point in our conditions, if you pay quickly during the week, then the discount will be from the BASE PRICE of -30%. 4. The DISCOUNT PRICE (14 days from that date) will be: $840,000 5. BTC Wallet: [redacted] 6. To make sure that the decoder works, you can give us some files that do not contain important information, and we decode them to show performance. 7. As for the evidence that we have private information from your network, we can provide some of the tree files taken from you. You will select 5 files and we will provide them to you as evidence.

15. Message 015 From Conti Actor / other Date 09/11/2021, 18:39:51

    [redacted]_SAMPLE_TREE.zip [ 344kB ]

16. Message 016 From Conti Actor / other Date 09/11/2021, 18:40:25

    http://continewsnv5otx5kaoje7krkto2qbu3gtqef22mnr7eaxw3y6ncz3ad.onion/[redacted]

17. Message 017 From Victim Victim Date 09/11/2021, 20:01:35

    thanks for your message. your request is very high, and it is impossibile for us to have so much money.

18. Message 018 From Conti Actor / other Date 09/11/2021, 20:09:03

    Evaluate our offer, it is balanced and realistic, we understand your desire to reduce the costs of this incident. But let's be realistic, we have blocked all your infrastructure and threaten to publish data that in the long run + not installed infrastructure will make your losses many times the amount we ask. Let's go ahead, people who tell the management of your company that they can reduce the price - make mistakes, this will not happen. Our price is final. It will only grow. Ahead of the pullout of your data. You need to discuss this well before pulling time and then biting your elbows why the price has risen so much.

19. Message 019 From Conti Actor / other Date 09/11/2021, 20:12:23

    We are waiting and ready for negotiations.

20. Message 020 From Victim Victim Date 09/11/2021, 20:13:18

    I did not write to you because we want to save, but because it is a sum of money that is not possible. we understand our problem, and thank you for answering us

21. Message 021 From Victim Victim Date 09/11/2021, 20:13:51

    with such a large sum of money our company goes bankrupt

22. Message 022 From Victim Victim Date 09/11/2021, 20:15:35

    if the company closes the data is no longer needed by anyone. we don't need them anymore, and you don't get paid if we close

23. Message 023 From Victim Victim Date 09/11/2021, 20:17:46

    we have availability for a maximum of 3 - 4 BTC, in addition we have to ask the banks for money and this is not possible in 14 days

24. Message 024 From Conti Actor / other Date 09/11/2021, 20:24:35

    4. The DISCOUNT PRICE (14 days from that date) will be: $840,000

25. Message 025 From Conti Actor / other Date 09/11/2021, 20:24:45

    http://continewsnv5otx5kaoje7krkto2qbu3gtqef22mnr7eaxw3y6ncz3ad.onion/[redacted]

26. Message 026 From Victim Victim Date 09/11/2021, 20:34:17

    I fully understand your position, but you too must understand that it is not possible for us to recover all this money in 14 days

27. Message 027 From Victim Victim Date 09/11/2021, 20:34:44

    please, let's try to find a meeting point

28. Message 028 From Victim Victim Date 09/11/2021, 20:38:05

    we are offering 200.000 $

29. Message 029 From Conti Actor / other Date 09/11/2021, 20:38:20

    What amount are you offering now? Name her $

30. Message 030 From Victim Victim Date 09/11/2021, 20:55:11

    i hope you can accept, so we can close quickly

31. Message 031 From Victim Victim Date 09/11/2021, 20:57:21

    I believe that $ 200,000 is a very important amount of money for both of us

32. Message 032 From Victim Victim Date 09/11/2021, 20:57:22

    I believe that $ 200,000 is a very important amount of money for both of us