REvil — 20210622
Dated recordFrom extortion.wiki, the ransomware negotiation research archive
A validated static rendering of 52 messages in source-array order. Transcript text is preserved without editorial additions.
- Actor
- REvil
- Record date
- Jun 22, 2021
- Messages
- 52
- Participants
- REvil, Victim
Preserved messages
Actor / other Victim
Select a message number for a stable citation link. Text remains selectable; hard-wrapped source lines are joined for reading, intentional blank-line paragraph breaks remain, and written URLs remain inert.
-
Message 001 From Victim Victim Date Hello, are you a live person
-
Message 002 From REvil Actor / other Date Hello, yes
-
Message 003 From Victim Victim Date what can we do if we dont have this much money?
-
Message 004 From Victim Victim Date because we dont have $100,000
-
Message 005 From REvil Actor / other Date My boss can offer 10% discount for fast payment
-
Message 006 From Victim Victim Date we dont even have this money to pay in 3 days, we would have to get loans or other means of payment.
-
Message 007 From REvil Actor / other Date We can add time
-
Message 008 From REvil Actor / other Date how much time do you need?
-
Message 009 From Victim Victim Date even if we get it, we have to buy monero and that takes time to clear the funds, it takes weeks to get validated with any exchange.
-
Message 010 From REvil Actor / other Date binance.com - 1 day
-
Message 011 From Victim Victim Date why is this much?
-
Message 012 From Victim Victim Date why is it this much?
-
Message 013 From REvil Actor / other Date The price depends on your income
-
Message 014 From Victim Victim Date My income is only 10,000 a month. Its in the system it shows it that way
-
Message 015 From REvil Actor / other Date You work for a company, don't bluff with us
-
Message 016 From Victim Victim Date yea, i am the owner. the company is mine. Im not bluffing. I make 120k a year and 10k a month I work for the company. this is [redacted] service company. Our service call charge is $75 per service call. How can I pay a 100,000?
-
Message 017 From REvil Actor / other Date My boss can offer 10% discount
-
Message 018 From Victim Victim Date i understand and thank you but we need more of a discount
-
Message 019 From Victim Victim Date i simply cannot afford 90-100k
-
Message 020 From Victim Victim Date what guarantee do i have that my system will start working after i do what you ask for
-
Message 021 From REvil Actor / other Date check our name in web
-
Message 022 From Victim Victim Date I dont know this things. im just a [redacted]. Im asking a friend to look in to it.
-
Message 023 From Victim Victim Date I have to borrow money from friends. So give time so i can see what i can get
-
Message 024 From REvil Actor / other Date Okay
-
Message 025 From Victim Victim Date So I was able to get 35,000.00 so far from friends which i have now. I understand this is your job and what your demanding so i can have mine back. I respect that even when i don't. But I checked your web and there are no guarantees. I have family and i work for this money, so loosing it is not an option for me. I need some type guarantee so i know your the guy and i wont be lied to and loose the money
-
Message 026 From REvil Actor / other Date You can try trial decryption to make sure we unblock everything
-
Message 027 From Victim Victim Date You messed up my entire work and life. The only way I will pay you is to be 100% sure you will release the files after I pay you. The only way you can prove me is I will pay 10,000.00 for 1 specific database file. If you agree let me know. And I don't know if that is also possible, I don't have any guarantee from you.
-
Message 028 From REvil Actor / other Date We can agree to 35k and we guarantee that you will be able to decrypt all your files
-
Message 029 From Victim Victim Date Hello
-
Message 030 From Victim Victim Date We had 70% back up and i was able to hire IT guys to build me a new system and restore 70% of my data. I spent 12,250.00 for this and I don't have anymore the 35,000.00 I am willing to pay the balance to you to get the remaining data so I can continue with my life. Let me know what you want to do. I will wait on you. took long to get back to you as we were busy building a new system
-
Message 031 From REvil Actor / other Date These are just your problems. Nobody made you pay other teams to get well. Our decryptor completed this in a few hours. 20% discount is all that we are ready to offer
-
Message 032 From Victim Victim Date you made this problem for me. Ok, I dont have the money. I am working on a job and will get paid in 2 weeks at most. so let me get the money together and will get back to pay.
-
Message 033 From Victim Victim Date 28,000.00 correct?
-
Message 034 From Victim Victim Date I have 22,750.00 now. Let make the deal and move forward please. This is hard for me
-
Message 035 From REvil Actor / other Date price update you can pay
-
Message 036 From Victim Victim Date I dont understand what your saying?
-
Message 037 From REvil Actor / other Date Nothing
-
Message 038 From Victim Victim Date I have to go to work. leave the answer when i get back tonight i will contact
-
Message 039 From Victim Victim Date R u asking what i can pay?
-
Message 040 From REvil Actor / other Date are you ready to pay?
-
Message 041 From Victim Victim Date Yes
-
Message 042 From Victim Victim Date I already transferred 22,750.00 to my friends account today to help me send the money or xmr to you. I dont know this things how they work. We have to purchase it and send it to you
-
Message 043 From Victim Victim Date also monero price is 273.97 today not 82.52
-
Message 044 From REvil Actor / other Date price fixed
-
Message 045 From Victim Victim Date when will i get the code after i pay
-
Message 046 From REvil Actor / other Date 30 minutes
-
Message 047 From Victim Victim Date Hi, I just sent money to a friends account. He will transfer to his bianca account to purchase monero and send it to you. I instructed him not to send the full amount. He will send an amount and you have to check and let me know that number so i can make sure its coming to you and I will have him send the remaining balance.
-
Message 048 From Victim Victim Date should be done in few days
-
Message 049 From REvil Actor / other Date ok
-
Message 050 From Victim Victim Date we're almost done sending the first payment. Binance.us doenst support monero, and neither does kucoin or coinbase. I had to buy litecoin on coinbase, send it to cakewallet, and Im using that the convert to monero. Maybe will take a few hours.
-
Message 051 From Victim Victim Date Just sent to the monero address above. Verify how much it is and let me know.
-
Message 052 From REvil Actor / other Date 5 monero receive