Hive — 20211220
Dated recordFrom extortion.wiki, the ransomware negotiation research archive
A validated static rendering of 24 messages in source-array order. Transcript text is preserved without editorial additions.
- Actor
- Hive
- Record date
- Dec 20, 2021
- Messages
- 24
- Participants
- Hive, Victim
Preserved messages
Actor / other Victim
Select a message number for a stable citation link. Text remains selectable; hard-wrapped source lines are joined for reading, intentional blank-line paragraph breaks remain, and written URLs remain inert.
-
Message 001 From Hive Actor / other Date Hello and welcome to Hive. How may I help you?
-
Message 002 From Victim Victim Date Really?
-
Message 003 From Hive Actor / other Date Hello. Please, introduce your company first.
-
Message 004 From Victim Victim Date No Private individual
-
Message 005 From Victim Victim Date So how much are you trying to extort from me then?
-
Message 006 From Victim Victim Date Hi, I got a message on my computer
-
Message 007 From Hive Actor / other Date Hello. Please, introduce your company first.
-
Message 008 From Victim Victim Date I'm a user of [redacted-software-vendor] point of sale software, [redacted-victim] store
-
Message 009 From Victim Victim Date Can you help us with information?
-
Message 010 From Hive Actor / other Date Send us email from your corporate mail account to this address to verify it's you:
[redacted]_support@protonmail.com
-
Message 011 From Hive Actor / other Date Only the main company are able to purchase the decryption software. It cost's $1,000,000 in Bitcoin.
-
Message 012 From Victim Victim Date I sent the email, we don't have that kind of money. We a small liquor store in [redacted-location] and only use [redacted-software-vendor] software as a point of sale
-
Message 013 From Hive Actor / other Date Our target is a company that allowed a huge vulnerability in its system that led to a massive infection of [redacted-software-vendor]'s customer network. Accordingly, this company must resolve this issue and justify the trust of its customers.
-
Message 014 From Victim Victim Date Hi, I also got attacked with this software. I just use [redacted-software-vendor] point of sale to run my small bed and breakfast. I see there is previous chats here with people also using [redacted-software-vendor] software. How much will decryption be in my case? I am not the [redacted-software-vendor] company.
-
Message 015 From Hive Actor / other Date [redacted-software-vendor] is responsible for you at this time. You are advised to contact them for a speedy resolution of your problems.
-
Message 016 From Victim Victim Date I would also like to know if we can come to a compromise as we can't trade and we been hurt badly with [redacted-location] rules for lockdowns
-
Message 017 From Victim Victim Date Hi, can you please help
-
Message 018 From Hive Actor / other Date Please, introduce your company first
-
Message 019 From Victim Victim Date Morning, obviously you know our frustration when waking up this morning and to realize that we've been hacked... a second time in 2 years... you clearly do not do your research... you can check that we are a lodge/hotel in the rural parts of [redacted-location], which is a third world country (do you know where that is???)... please check your world map and our web address to confirm this. We also only use [redacted-software-vendor]'s "Reservation" and "Point of Sale" system like the other poor souls above. We are all trying to make a decent living after Covid struck, and we in the hospitality sector suffered the most without being able to trade fully for 12-18 months. So with hardly being able to pay our staff where do you think we will be able to get US Dollars to pay you? Our US exchange rate is currently [redacted-currency] to 1$. You should hack the [redacted-location] government because they will be the only ones who can afford to pay you in US$... So please be reasonable and hack the big guys in the future not us on the ground trying to make a living. [redacted] Thanks and awaiting your reply...
-
Message 020 From Hive Actor / other Date Obviously you don't know that our goal is not you, our goal is [redacted-software-vendor] which has the profits to cover all recovery costs. Once again, we want to hold [redacted-software-vendor] accountable in this panel to solve all your problems.
-
Message 021 From Victim Victim Date [redacted-software-vendor] sell software locally they don't make that kind of money as they once off sale only, I bought it 7 years ago and they they haven't charged a cent since
-
Message 022 From Victim Victim Date By doing this you are putting our families livelihoods at risk, if we had money we wouldn't be using a cheap point of sale
-
Message 023 From Victim Victim Date hi
-
Message 024 From Hive Actor / other Date Hi