extortion.wiki THE RANSOMWARE DOCUMENTARY ARCHIVE
Menu

242 negotiations · 332 notes · snapshots Jul 06, 2026 / Jun 26, 2026

fog — 20240830

Dated record

From extortion.wiki, the ransomware negotiation research archive

A validated static rendering of 73 messages in source-array order. Transcript text is preserved without editorial additions.

Actor
fog
Record date
Aug 30, 2024
Messages
73
Participants
fog, victim

Preserved messages

Actor / other Victim

Select a message number for a stable citation link. Text remains selectable; hard-wrapped source lines are joined for reading, intentional blank-line paragraph breaks remain, and written URLs remain inert.

  1. Message 001 From victim Victim Date

    We have found what appears to be your notes on our systems with links that we have followed here. What are the next steps and what is going on?

  2. Message 002 From fog Actor / other Date

    Hello. Wait please. I'll get back with details.

  3. Message 003 From victim Victim Date

    Hello? Any news?

  4. Message 004 From fog Actor / other Date

    [provides a plain TXT files list] that's what's been taken from your network

  5. Message 005 From fog Actor / other Date

    We can decrypt your systems in a couple of hours for only $290,000. Just send us 3 random encrypted files to be sure - we'll decrypt them for free.

  6. Message 006 From victim Victim Date

    Can you send us the files from the list we have provided below? 08/29/2024 04:28 AM 98,075 [redacted].pdf 08/29/2024 06:59 AM 165 [redacted].xlsx 08/29/2024 03:50 AM 15,571 [redacted].xlsx 08/29/2024 03:59 AM 28,381 [redacted].docx 08/29/2024 04:01 AM 32,193 [redacted].pdf

  7. Message 007 From fog Actor / other Date

    [provides a 7zip compressed archive]

  8. Message 008 From victim Victim Date

    Hello, we are still working on gathering encrypted files small enough to send over to you, but it's almost impossible to find any due to the way all of our systems were locked up in the first place. We hope to have something soon, but we will reach back out once we do.

  9. Message 009 From fog Actor / other Date

    I can wait until Monday only

  10. Message 010 From victim Victim Date

    Hello, we are still trying to pull some sample encrypted files to send to you but we are running into a lot of issues because our systems aren't available to grab the files off of. We will hopefully have a file or two tomorrow to send over.

  11. Message 011 From fog Actor / other Date

    I hope so

  12. Message 012 From fog Actor / other Date

    I cant wait more

  13. Message 013 From victim Victim Date

    Ok, we will have those files over today.

  14. Message 014 From fog Actor / other Date

    I wait

  15. Message 015 From victim Victim Date

    [provides 3 encrypted files] Please see the attached files.

  16. Message 016 From fog Actor / other Date

    [provides 2 decrypted files]

  17. Message 017 From fog Actor / other Date

    its time to perform payment

  18. Message 018 From victim Victim Date

    Hello, thank you for your patience to this point as we try and navigate our way through this. We have been working at verifying and reviewing everything you’ve given us and while we want to get this resolved, we simply don’t have 290,000 to send you. Is there any discount from you to be had so that we can maybe get this to some sort of resolution with you?

  19. Message 019 From fog Actor / other Date

    if you make payment by Saturday evening I can take 255k to get to a resolution

  20. Message 020 From victim Victim Date

    Hello, thank you for your patience to this point as we try and navigate our way through this. We have been working at verifying and reviewing everything you’ve given us and while we want to get this resolved, we simply don’t have 290,000 to send you. Is there any discount from you to be had so that we can maybe get this to some sort of resolution with you?

  21. Message 021 From fog Actor / other Date

    if you make payment today evening I can take 255k to get to a resolution

  22. Message 022 From victim Victim Date

    Thank you for the reduction, but even at that number it’s more than we have on hand. Can you please give us a number that we can take back to the firm’s leadership and see what can be done?

  23. Message 023 From fog Actor / other Date

    what did you leadership said about 255k?

  24. Message 024 From fog Actor / other Date

    what do you have on hand?

  25. Message 025 From fog Actor / other Date

    I see

  26. Message 026 From fog Actor / other Date

    I will leak your files

  27. Message 027 From victim Victim Date

    We are still interested in getting a decryptor to unlock a small portion of our data, but it’s not nearly worth 255,000. What is the lowest number you will take?

  28. Message 028 From fog Actor / other Date

    I will wake 255k

  29. Message 029 From fog Actor / other Date

    what is it worth?

  30. Message 030 From fog Actor / other Date

    what would you say?

  31. Message 031 From victim Victim Date

    Hello, we are willing to pay 25,000 so we can both move on from this. That’s about what it would take for us to just completely reconstitute the data anyway.

  32. Message 032 From fog Actor / other Date

    how much would it take for you to keep this situation secret?

  33. Message 033 From victim Victim Date

    $25,000 is what we have and could send you as soon as possible

  34. Message 034 From fog Actor / other Date

    you don't care if your files leaked?

  35. Message 035 From fog Actor / other Date

    no I don't take 25k

  36. Message 036 From fog Actor / other Date

    I can take 150k if you need decrypter only

  37. Message 037 From victim Victim Date

    While we appreciate the reduction for just the decryptor, we would also like for our data to be deleted from your possession and for proof of that being deleted. We can come up on our price, but we don’t have what you are asking for. We can do $60k that we can send immediately, and is more than double what we offered before. But that’s all we have onhand to send. Please consider our offer and we will get the process started of sending that money over to you.

  38. Message 038 From fog Actor / other Date

    $200,000 for data deletion and unlockers. You have the last chance

  39. Message 039 From victim Victim Date

    Hello, it’s taken us quite a while, but we have been able to source an additional 40,000 and we can now offer you 100,000 to get this done as soon as possible. This has been very stressful for us and we have exhausted all avenues of getting additional funding. If you accept, we will get the process started to send the money to you ASAP.

  40. Message 040 From fog Actor / other Date

    hi

  41. Message 041 From fog Actor / other Date

    I cannot accept this for both data and unlockers but ok I can accept that for unlockers only

  42. Message 042 From fog Actor / other Date

    175k for everything would let me get it resolved today

  43. Message 043 From fog Actor / other Date

    hi

  44. Message 044 From fog Actor / other Date

    are you leaving me?

  45. Message 045 From victim Victim Date

    Honestly, it's taken us this long just to collect what we've been able to collect and at the price that you're wanting, we'd just rather put the extra 75k into rebuilding the data we're missing. We've been trying to come to an agreement here, but we've exhausted all options and this is what we have.

  46. Message 046 From fog Actor / other Date

    Does it mean our deal is off?

  47. Message 047 From fog Actor / other Date

    Do you understand that your files will be leaked?

  48. Message 048 From fog Actor / other Date

    http://[redacted].onion/posts/[redacted]/

  49. Message 049 From victim Victim Date

    Hello, the deal is not off. We have offered what we think is a generous offer to have a small portion of our data unlocked that we weren’t able to retrieve from backups. If you are going to walk away from 100,000 just to release our data, then we will have no choice but to reconstruct the data with that 100,000 and move on.

  50. Message 050 From fog Actor / other Date

    hi

  51. Message 051 From fog Actor / other Date

    ok send 100k here [redacted] and we get this resolved

  52. Message 052 From fog Actor / other Date

    tell me when ready to send

  53. Message 053 From victim Victim Date

    We are in the process of converting the funds now. I will reach back out once we have that process complete. Just so we are clear, you will provide us with a decryptor, proof of you deleting our data, and a report on how you got into our network?

  54. Message 054 From fog Actor / other Date

    Yes, we will provide you with everything you outlined.

  55. Message 055 From fog Actor / other Date

    Hello. How long should I wait? Next week I will have to leak your files.

  56. Message 056 From victim Victim Date

    Payment has been made. Can you please provide the items as soon as possible?

  57. Message 057 From fog Actor / other Date

    received. wait please

  58. Message 058 From victim Victim Date

    Hello, can you please provide the items to us?

  59. Message 059 From fog Actor / other Date

    Windows unlocker.exe -nomutex -console -target \\SERVER\C$ unlocker.exe -nomutex -console -target C:\

    Esxi \ LINUX chmod +x unlocker_key./unlocker_key --id [redacted] --log --target "/vmfs/volumes/"

  60. Message 060 From victim Victim Date

    Can you help us out with some files that don't see to be decrypting? I've attached them.

  61. Message 061 From fog Actor / other Date

    wait

  62. Message 062 From victim Victim Date

    The decryptor that we have isn't working on these files. Can you send me a decryptor that works?

  63. Message 063 From fog Actor / other Date

    Give us error logs and explain your actions in more details.

  64. Message 064 From victim Victim Date

    These are the best logs we can find.

  65. Message 065 From victim Victim Date

    We're just attempting to run the decryptor and it's simply not decrypting some of the files.

  66. Message 066 From fog Actor / other Date

    wait

  67. Message 067 From fog Actor / other Date

    are you trying to decrypt files on windows?

  68. Message 068 From victim Victim Date

    Yes

  69. Message 069 From fog Actor / other Date

    the problem is the path to files is too long

  70. Message 070 From fog Actor / other Date

    the decrypter works correctly

  71. Message 071 From fog Actor / other Date

    try to fix files in a different folder

  72. Message 072 From victim Victim Date

    We shortened the path and it's still not working

  73. Message 073 From fog Actor / other Date

    give us the log as well