Hive — 20211004

Select a message number for a stable citation link. Text remains selectable; hard-wrapped source lines are joined for reading, intentional blank-line paragraph breaks remain, and written URLs remain inert.

1. Message 001 From Hive Actor / other Date 4 October 05:53

   Hello and welcome to Hive. How may I help you?

2. Message 002 From Victim Victim Date 6 October 22:30

   i saw a text file and it had login info to come here.

3. Message 003 From Hive Actor / other Date 6 October 22:33

   To decrypt your files you will need to pay $500,000.

4. Message 004 From Hive Actor / other Date 6 October 22:33

   The price is not a subject to discuss.

5. Message 005 From Victim Victim Date 6 October 22:40

   i think theres a mix up or something. i am apr supply like it says here, but weve never had that much revenue. could there be a mixup? $500,000 would be impossible for me to pay

6. Message 006 From Victim Victim Date 7 October 14:03

   is anyone here?

7. Message 007 From Hive Actor / other Date 7 October 20:11

   The price isn't negotiable.

8. Message 008 From Victim Victim Date 7 October 22:05

   What happens if I can't pay?

9. Message 009 From Hive Actor / other Date 7 October 22:25

   Nothing. You will not be able to decrypt. Your exfiltrated files will be disclosed. We will make calls to your partners and customers to notify them about the incident.

10. Message 010 From Victim Victim Date 7 October 23:02

    does exfiltrated files mean you took files from me?

11. Message 011 From Hive Actor / other Date 7 October 23:03

    yes, not so much, but it will be enough to confirm the incedent

12. Message 012 From Victim Victim Date 7 October 23:05

    what files did you take?

13. Message 013 From Victim Victim Date 8 October 20:05

    can you show me what files you have?

14. Message 014 From Victim Victim Date 9 October 00:03

    how can i know you can fix my files?

15. Message 015 From Victim Victim Date 9 October 00:03

    did you take any files?

16. Message 016 From Victim Victim Date 9 October 00:03

    is anyone here

17. Message 017 From Hive Actor / other Date 9 October 00:29

    You are able to upload encrypted files and a key file locates at C:\*.key.* Encrypted files must not contain important info in it.

18. Message 018 From Victim Victim Date 9 October 00:30

    k Ill upload them

19. Message 019 From Victim Victim Date 9 October 00:33

    there

20. Message 020 From Victim Victim Date 9 October 00:46

    can u open these

21. Message 021 From Hive Actor / other Date 9 October 12:23

    I have uploaded decrypted file

22. Message 022 From Victim Victim Date 9 October 15:45

    ok that file worked

23. Message 023 From Victim Victim Date 9 October 15:45

    how do i know which files you took from me?

24. Message 024 From Hive Actor / other Date 9 October 15:47

    You will get an access to your exfiltrated files storage

25. Message 025 From Victim Victim Date 9 October 16:46

    can you prove that you took any files?

26. Message 026 From Hive Actor / other Date 9 October 17:41

    Yes, we will do that in few hours.

27. Message 027 From Hive Actor / other Date 9 October 19:25

    Done, you can check it.

28. Message 028 From Victim Victim Date 9 October 20:41

    this is a list of files from my computer. are you saying you have these? how can i know this for sure?

29. Message 029 From Hive Actor / other Date 9 October 20:42

    Select any without important info in it and we will upload it for you

30. Message 030 From Victim Victim Date 9 October 22:53

    2021 show discounts.xlsx

    [redacted] VENDOR NOTES.docx

    [redacted] customer sales April – June 2019.xlsx

31. Message 031 From Hive Actor / other Date 9 October 22:53

    Okay, few min

32. Message 032 From Victim Victim Date 9 October 22:59

    thanks

33. Message 033 From Hive Actor / other Date 9 October 23:07

    Done

34. Message 034 From Victim Victim Date 9 October 23:34

    thanks

35. Message 035 From Hive Actor / other Date 15 October 15:00

    Hello, the timer is almost gone. We will publish your data soon.

36. Message 036 From Victim Victim Date 15 October 15:57

    alright. im gathering up all my funds and will let you know how much i can pay

37. Message 037 From Victim Victim Date 15 October 17:02

    i can pay you $84,600.

38. Message 038 From Victim Victim Date 15 October 17:02

    i dont need a program to fix my files, but id like to keep my files from being published on the net if possible

39. Message 039 From Hive Actor / other Date 15 October 17:53

    To convince you to pay we can make calls to your partners and customers to notify them about the incident.

40. Message 040 From Victim Victim Date 15 October 18:21

    i can pay. i said i have 84,600

41. Message 041 From Hive Actor / other Date 15 October 18:24

    The price is $500,000.

42. Message 042 From Victim Victim Date 15 October 18:47

    ill need time to find more money.

43. Message 043 From Hive Actor / other Date 15 October 18:48

    I'll wait

44. Message 044 From Victim Victim Date 15 October 18:50

    okay. if my files or name is posted before i pay, i wont pay. i don't know what this timer is counting down to

45. Message 045 From Hive Actor / other Date 15 October 18:52

    I have extended it

46. Message 046 From Victim Victim Date 15 October 19:01

    thanks

47. Message 047 From Hive Actor / other Date 20 October 23:00

    You have to make a decision.

48. Message 048 From Victim Victim Date 21 October 02:20

    okay. i got a SBA 7(a) loan and put up all my assets as collateral so i can pay you. it hasn't funded yet, but should in the morning. when it does, i'll have a total of $112,838 that i can pay you. i know the price if $500k, but i just dont have that much money.

49. Message 049 From Victim Victim Date 21 October 02:22

    if this is enough, please explain how i get the money to you. thanks

50. Message 050 From Victim Victim Date 21 October 16:24

    hello? is $112,838 enough? if so, how do i pay?

51. Message 051 From Hive Actor / other Date 21 October 16:43

    To decrypt your files and to prevent them to be disclosed you will need to pay $500,000.

52. Message 052 From Hive Actor / other Date 21 October 16:43

    The price is not a subject to discuss.

53. Message 053 From Victim Victim Date 21 October 16:50

    im trying to get as much money as possible and as fast as possible. im going to need more time. ill keep working on this through the weekend and see how much more i can get. i wont be able to find over 300k and pay in an hour

54. Message 054 From Victim Victim Date 21 October 17:01

    thanks. the timer expires on Sunday. Even i can find all the money by then, i won't be able to pay until monday. it would be helpful to not have to worry about the timer until tuesday to give me time to figure out the bitcoin

55. Message 055 From Hive Actor / other Date 21 October 17:07

    Okay

56. Message 056 From Victim Victim Date 21 October 17:18

    thank you

57. Message 057 From Hive Actor / other Date 21 October 16:51

    Okay, I'll give you time

58. Message 058 From Hive Actor / other Date 29 October 02:06

    Hello?

59. Message 059 From Victim Victim Date 29 October 02:08

    Hi! I'm here. I was able to get more money. Waiting for confirmation of the amount. I'll let ya know asap

60. Message 060 From Hive Actor / other Date 29 October 02:09

    Okay.

61. Message 061 From Victim Victim Date 29 October 15:11

    hi. i have confirmation from my team that we have $275,800 available. i contacted a couple of bitcoin sellers so should be able to figure that part out as well. is this enough that we could pay?

62. Message 062 From Hive Actor / other Date 29 October 18:56

    Okay, I agree

63. Message 063 From Hive Actor / other Date 30 October 02:57

    At the time of transfer, the amount have to be equal $275,800 in BTC.

64. Message 064 From Victim Victim Date 30 October 03:28

    I will transfer the funds to bitcoin company on monday.

65. Message 065 From Victim Victim Date 30 October 03:34 Read

    The timer will run out before then, but I'm guessing that it shouldn't be a problem. Thank you for your help

66. Message 066 From Hive Actor / other Date 30 October 03:51

    Okay.

67. Message 067 From Hive Actor / other Date 2 November 17:05

    What is ETA on the payment?

68. Message 068 From Victim Victim Date 2 November 17:16

    Hi there! My bank is scrutinizing the wire transfer from me to coinbase. They are asking a lot of questions because they say these types of transfers are related to fraud. I'm telling them that I'm investing in bitcoin, so it should be okay. I'll let you know.

69. Message 069 From Hive Actor / other Date 2 November 17:18

    Okay.

70. Message 070 From Hive Actor / other Date 12 November 22:31

    It's time to pay