extortion.wiki THE RANSOMWARE DOCUMENTARY ARCHIVE
Menu

242 negotiations · 332 notes · snapshots Jul 06, 2026 / Jun 26, 2026

REvil — 20210407

Dated record

From extortion.wiki, the ransomware negotiation research archive

A validated static rendering of 15 messages in source-array order. Transcript text is preserved without editorial additions.

Actor
REvil
Record date
Apr 07, 2021
Messages
15
Participants
REvil, Victim

Preserved messages

Actor / other Victim

Select a message number for a stable citation link. Text remains selectable; hard-wrapped source lines are joined for reading, intentional blank-line paragraph breaks remain, and written URLs remain inert.

  1. Message 001 From Victim Victim Date

    You have our files?

  2. Message 002 From REvil Actor / other Date

    Hello, yes.

  3. Message 003 From Victim Victim Date

    Please show this proof. Then we discuss price.

  4. Message 004 From REvil Actor / other Date

    wait for answer.

  5. Message 005 From Victim Victim Date

    Yes

  6. Message 006 From REvil Actor / other Date

    This is a random group of files from our huge collection.

  7. Message 007 From Victim Victim Date

    This is not special files. We do not care about this. Show us something more you have. This is SHIT!

  8. Message 008 From REvil Actor / other Date

    What kind of files do you call "special"? Can you be a bit more specific. We've got plenty of your files, but we can't know what exactly to pick to satisfy you. We've got your financial files, personal information of all of your employees and clients, engineering and etc. If all this data will be published, believe us, it will cause a way more damage than the price we want.

  9. Message 009 From REvil Actor / other Date

    By concluding a deal with us, you receive a decryptor file for all your data, we completely delete all your data from our servers, and guarantee you complete confidentiality about the incident. Your reputation will not be affected. You also get a brief audit of an attack on your network, which will allow you to further reduce the risk of such incidents recurring.

  10. Message 010 From Victim Victim Date

    Thank you for that information. But please understand that our business has been impacted severely by Covid and revenue is down over the last year and we cannot afford anywhere near your demand. We need only one machine to recover and ask if you can please reconsider to give us a much better price?

  11. Message 011 From REvil Actor / other Date

    My boss is ready to listen to your suggestion.

  12. Message 012 From REvil Actor / other Date

    The price is set after a financial audit of your company. We understand the situation with COVID, so we are ready to hear your proposal for a price. But please note that we do not expect a low price from you. Don't forget that we have your financial statements when you make your bid.

  13. Message 013 From REvil Actor / other Date

    we remind you that in case of non-payment the timer will double the payment amount.

  14. Message 014 From REvil Actor / other Date

    Hey! Do you have any news for us, guys?

  15. Message 015 From REvil Actor / other Date

    Hello! You data is ready to be published. You can press the link and see what we've got. It's just an example of what we have. The full blog will be published after three days. http://dnpscnbaix6nkwvystl3yxglz7nteicqrou3t75tpcc5532cztc46qyd.onion/posts/[redacted]?s=[redacted]