extortion.wiki THE RANSOMWARE DOCUMENTARY ARCHIVE
Menu

242 negotiations · 332 notes · snapshots Jul 06, 2026 / Jun 26, 2026

Dragonforce — BD004D632D87DBA0

Date not recorded

From extortion.wiki, the ransomware negotiation research archive

A validated static rendering of 25 messages in source-array order. Transcript text is preserved without editorial additions.

Actor
Dragonforce
Record date
Date not recorded
Messages
25
Participants
DragonForce, Victim

Preserved messages

Actor / other Victim

Select a message number for a stable citation link. Text remains selectable; hard-wrapped source lines are joined for reading, intentional blank-line paragraph breaks remain, and written URLs remain inert.

  1. Message 001 From Victim Victim Date

    hello?

  2. Message 002 From DragonForce Actor / other Date

    Hello. As you can see, your network was encrypted by DragonForce. Also we downloaded your data, so if you don't pay, we will publish it and you will have problems. After payment you will receive decryption software and proof that we've deleted your files. Don't waste your time, in 28 days decryptor will be automatically deleted.

  3. Message 003 From Victim Victim Date

    you took data? for what?

  4. Message 004 From Victim Victim Date

    how much do we have to pay?

  5. Message 005 From DragonForce Actor / other Date

    15 BTC. Data is needed for better negotiations. If you don't pay we will publish it so you will have big problems.

  6. Message 006 From Victim Victim Date

    interwebs say you can tell us what files were taken

  7. Message 007 From Victim Victim Date

    ok, thank you

  8. Message 008 From Victim Victim Date

    it says, file not found?

  9. Message 009 From DragonForce Actor / other Date

    Try again, on our side it work.

  10. Message 010 From Victim Victim Date

    The requested URL was not found on the server. If you entered the URL manually please check your spelling and try again.

  11. Message 011 From Victim Victim Date

    got it

  12. Message 012 From Victim Victim Date

    is this listing represent all the data that was taken?

  13. Message 013 From DragonForce Actor / other Date

    Yes.

  14. Message 014 From Victim Victim Date

    the money you want, is a really large number for us. can anything be done about this?

  15. Message 015 From DragonForce Actor / other Date

    If you pay quickly, we can provide a 10% discount.

  16. Message 016 From DragonForce Actor / other Date

    http://z3wqggtxft7id3ibr7srivv5gjof5fwg76slewnzwwakjuf3nlhukdid.onion/blog?post_uuid=[redacted]]

  17. Message 017 From Victim Victim Date

    What is this link for?

  18. Message 018 From DragonForce Actor / other Date

    This is a private (hidden) report of a network breach in your company.

  19. Message 019 From DragonForce Actor / other Date

    To incentivize cooperation.

  20. Message 020 From Victim Victim Date

    it says 388 GB of data?? what is that??

  21. Message 021 From DragonForce Actor / other Date

    The data we downloaded from your network, we gave you a list of files earlier.

  22. Message 022 From Victim Victim Date

    that represents 388 GB??

  23. Message 023 From DragonForce Actor / other Date

    Yes.

  24. Message 024 From Victim Victim Date

    you put our name on the blog? i thought we had more time?

  25. Message 025 From DragonForce Actor / other Date

    We gave you the link earlier, by clicking on it there was a timer when the post would become visible. Now you have 6 days to make the payment.