trinity — 0007

Select a message number for a stable citation link. Text remains selectable; hard-wrapped source lines are joined for reading, intentional blank-line paragraph breaks remain, and written URLs remain inert.

1. Message 001 From victim Victim Date Not recorded

   hello

2. Message 002 From victim Victim Date Not recorded

   hello

3. Message 003 From trinity Actor / other Date Not recorded

   hello

4. Message 004 From victim Victim Date Not recorded

   what do we have to do to acces our files?

5. Message 005 From trinity Actor / other Date Not recorded

   Please say your network domain

6. Message 006 From victim Victim Date Not recorded

   i sent you email to

7. Message 007 From trinity Actor / other Date Not recorded

   Yes I see

8. Message 008 From victim Victim Date Not recorded

   what info do you need?

9. Message 009 From trinity Actor / other Date Not recorded

   [redacted]?

10. Message 010 From victim Victim Date Not recorded

    idd

11. Message 011 From trinity Actor / other Date Not recorded

    your network?

12. Message 012 From victim Victim Date Not recorded

    [redacted] is correct

13. Message 013 From trinity Actor / other Date Not recorded

    Price for decrypt 70000$ in bitcoin amount

14. Message 014 From victim Victim Date Not recorded

    ok, i'm talking with management

15. Message 015 From victim Victim Date Not recorded

    is there any garantee tht we can decrypt all files?

16. Message 016 From victim Victim Date Not recorded

    i see the VHDX files are only 3GB and the were much bigger..

17. Message 017 From trinity Actor / other Date Not recorded

    We have been working for several years and all our clients have received their key. You can send us up to 10 files for the test decrypt, but these files should not contain important information

18. Message 018 From victim Victim Date Not recorded

    ok, and my VHD files will decrypt as wel? they were +1TB in size and now only 3GB

19. Message 019 From trinity Actor / other Date Not recorded

    Yes

20. Message 020 From trinity Actor / other Date Not recorded

    Inside the hard disk these files have normal size

21. Message 021 From victim Victim Date Not recorded

    In order to proceed, my manager requires a due dilligence step that protects us from liability, and that is to obtain proof that you have our sensitive files before we can consider payment. For that reason, can you provide the cleartext copy of the "[redacted]_V10_13_8_GP.ZIP" file located in the "C:\Users\Administrator\Downloads" folder on one of the encrypted servers.

22. Message 022 From trinity Actor / other Date Not recorded

    we don't loan out valuable files for testing for the test send 1-2 files (1-5 mb) not backup and database

23. Message 023 From trinity Actor / other Date Not recorded

    If you don't pay, we'll put your data on the leak sites. https://hunters55rdxciehoqzwv7vgyv6nt37tbwax2reroyzxhou7my5ejyid.onion/ companies/2148689972,and similar sites

24. Message 024 From victim Victim Date Not recorded

    In order to negotiate a resolution, we would require proof of data posession, so we have asked you for a file that does not contain sensitive information (you can verify that in the file itself). We have so far not received any evidence of you posessing cleartext copies of our data. Such evidence allows me to talk to my manager, who will eventually decide on the best course of action, as we have multiple alternatives.

25. Message 025 From trinity Actor / other Date Not recorded

    We can't provide this file to you.

26. Message 026 From victim Victim Date Not recorded

    Since we cannot show our manager any proof of stolen data, we cannot argue such a high ransom demand. We do have backups which are few weeks old, but I am convinced that our manager would pay a smaller fee for decryption key in order to have the latest data in a much faster way. They are willing to offer you $10.000 for the decryption key.

27. Message 027 From trinity Actor / other Date Not recorded

    We have already told you the price. The only way you can reduce the final price is to pay today and then we can think about a discount.

28. Message 028 From trinity Actor / other Date Not recorded

    but 10000$ just a joke for us, you should understand it. We can make discount 10.000$ if you pay today

29. Message 029 From victim Victim Date Not recorded

    I will have to take that offer to my manager. In the meantime, how can you provide proof of having a working decryption key? Can we provide you with an encrypted file and you decrypt it?

30. Message 030 From victim Victim Date Not recorded

    I will have to take that offer to my manager. In the meantime, how can you provide proof of having a working decryption key? Can we provide you with an encrypted file and you decrypt it?

31. Message 031 From trinity Actor / other Date Not recorded

    Yes, send file here https://dropmefiles.com/

32. Message 032 From trinity Actor / other Date Not recorded

    Yes, send file here https://dropmefiles.com/

33. Message 033 From victim Victim Date Not recorded

    Hereby https://dropmefiles.com/[redacted]

34. Message 034 From trinity Actor / other Date Not recorded

    https://dropmefiles.com/[redacted]

35. Message 035 From trinity Actor / other Date Not recorded

    pass 123

36. Message 036 From trinity Actor / other Date Not recorded

    You don't use our discount offer. So the price is 70.000$ again. Tomorrow it will rise again.