extortion.wiki THE RANSOMWARE DOCUMENTARY ARCHIVE
Menu

242 negotiations · 332 notes · snapshots Jul 06, 2026 / Jun 26, 2026

Dragonforce — D6DDD9B26D7D41DB

Date not recorded

From extortion.wiki, the ransomware negotiation research archive

A validated static rendering of 14 messages in source-array order. Transcript text is preserved without editorial additions.

Actor
Dragonforce
Record date
Date not recorded
Messages
14
Participants
Attacker, Victim

Preserved messages

Actor / other Victim

Select a message number for a stable citation link. Text remains selectable; hard-wrapped source lines are joined for reading, intentional blank-line paragraph breaks remain, and written URLs remain inert.

  1. Message 001 From Victim Victim Date

    We’ve found your note and messages, and we are here to discuss what we do now

  2. Message 002 From Attacker Actor / other Date

    We got into your network and encrypted your files. We also took some of the files from your network. You can decrypt several of your files and check several files in our possession. After that, we will discuss payment for decrypting your files and deleting the data we received.

  3. Message 003 From Attacker Actor / other Date

    tree.txt filesize:4700442

  4. Message 004 From Attacker Actor / other Date

    Here is a list of your files

  5. Message 005 From Victim Victim Date

    Is this listing all of the data you stole? How much is it total in size?

  6. Message 006 From Attacker Actor / other Date

    More than 100 gigabytes, more than 50 thousand files.

  7. Message 007 From Victim Victim Date

    We want these files from your list: Group\Clients\[Redacted].pdf Collateral Review\Template v2022-08\[Redacted].xlsm [Redacted].pdf

  8. Message 008 From Attacker Actor / other Date

    [Redacted].pdf filesize:1125386

  9. Message 009 From Attacker Actor / other Date

    [Redacted].xlsm filesize:947633

  10. Message 010 From Attacker Actor / other Date

    [Redacted].pdf filesize:10588784

  11. Message 011 From Attacker Actor / other Date

    You can see the countdown timer. When it reaches 0, the data will be published, and the decryption tool will be deleted. Some promise to recover the data after our encryption, but this is not possible. Trying to negotiate just before the countdown ends will not make the position strong. Keep this in mind and don't miss the time.

  12. Message 012 From Victim Victim Date

    How are we supposed to negotiate anything or attempt to move forward here when you haven't even told us your price? What exactly is it you want from us?

  13. Message 013 From Attacker Actor / other Date

    You saw the rules right away. Listing, test, price. The price is 12 BTC.

  14. Message 014 From Attacker Actor / other Date

    In the absence of active negotiations, the data will be published in less than 48 hours.