extortion.wiki THE RANSOMWARE DOCUMENTARY ARCHIVE
Menu

242 negotiations · 332 notes · snapshots Jul 06, 2026 / Jun 26, 2026

fog — 20240517

Dated record

From extortion.wiki, the ransomware negotiation research archive

A validated static rendering of 27 messages in source-array order. Transcript text is preserved without editorial additions.

Actor
fog
Record date
May 17, 2024
Messages
27
Participants
fog, victim

Preserved messages

Actor / other Victim

Select a message number for a stable citation link. Text remains selectable; hard-wrapped source lines are joined for reading, intentional blank-line paragraph breaks remain, and written URLs remain inert.

  1. Message 001 From fog Actor / other Date

    Do you need our help?

  2. Message 002 From victim Victim Date

    We would like to know what you are looking for from us. Your note says you copied data so we would like to understand what data you took.

  3. Message 003 From fog Actor / other Date

    [provides a compressed 7zp files list] this is what we took

  4. Message 004 From fog Actor / other Date

    We can decrypt your systems in a couple of hours for only $400,000. Just send us 3 random encrypted files to be sure - we'll decrypt them for free.

  5. Message 005 From victim Victim Date

    Okay, we are working on that for you. Can you confirm that list is all of the data that you took?

  6. Message 006 From fog Actor / other Date

    Yes this is all we took

  7. Message 007 From victim Victim Date

    Thank you. We are working on the files but will probably not have an update until after the weekend

  8. Message 008 From fog Actor / other Date

    Hello. Have you managed to review?

  9. Message 009 From victim Victim Date

    Sorry we are working through one last item and it's late here. We will respond by tomorrow.

  10. Message 010 From fog Actor / other Date

    We need you to speed up.

  11. Message 011 From victim Victim Date

    Are you able to send us the following files from that list?

  12. Message 012 From victim Victim Date

    Directory of E:\[redacted 1st directory]

  13. Message 013 From victim Victim Date

    Directory of E:\[redacted 2nd directory]

  14. Message 014 From victim Victim Date

    Directory of E:\[redacted 3rd directory]

  15. Message 015 From fog Actor / other Date

    [provides provides 3 files] these are the files from the directories you that gave

  16. Message 016 From victim Victim Date

    For the first directory, are you able to provide us this file? [redacted]\[redacted].docx

  17. Message 017 From victim Victim Date

    It looks like the full file path was originally cutoff when we requested it

  18. Message 018 From fog Actor / other Date

    [provides provides 1 more file]

  19. Message 019 From victim Victim Date

    h

  20. Message 020 From fog Actor / other Date

    what?

  21. Message 021 From fog Actor / other Date

    lets get closer to a resolution here. Are you ready to make a transaction and get all this resolved?

  22. Message 022 From victim Victim Date

    We are going to have a bit more discussion today and over the weekend but should be in a good place to discuss more next week

  23. Message 023 From victim Victim Date

    Does this work?

  24. Message 024 From fog Actor / other Date

    I will be waiting for numbers from you on Monday.

  25. Message 025 From fog Actor / other Date

    https://privnote.com/[redacted] use the id on the link to access a new chat to discuss the price and payment

  26. Message 026 From fog Actor / other Date

    I will be waiting for you there on Monday or earlier

  27. Message 027 From fog Actor / other Date

    tell me when you access the new chat