Akira Ransomware Negotiation — Redacted Organisation

13Messages
UnknownDuration
UnknownInitial Demand
UnknownOutcome

About This Negotiation

This transcript documents a Akira ransomware negotiation with a redacted victim organisation. The negotiation consisted of 13 messages exchanged over Unknown.

The initial demand is not clearly stated in the transcript. The final outcome is not confirmed in the transcript.

Full Transcript — Verbatim

Reproduced from Casualtek's Ransomchats archive. URLs have been redacted.

Victim names are shown only where the breach was publicly reported in mainstream media. Any organisation wishing their name redacted can contact us at enquiries@binary-response.com — we will act promptly.
[Victim] — — Message 1/13
> Hello?
[Akira] — — Message 2/13
> Hello. You've reached an Akira support chat. Currently, we are preparing the list of data we took from your network. For now you have to know that dealing with us is the best possible way to settle this quick and cheap. Keep in touch and be patient with us. We will reach out to you soon. Do you have a permission to conduct a negotiation on behalf of your organization? Once we get a response you will be provided with all the details.
[Victim] — — Message 3/13
> Yes I have permission
[Akira] — — Message 4/13
> Please wait for details.
[Victim] — — Message 5/13
> ???
[Akira] — — Message 6/13
> Wait a bit.
[Victim] — — Message 7/13
> Hello. We have an unapproved individual entering this chat. We did not send ???. Can you please provide a privnote with a new chat asap?
[Akira] — — Message 8/13
> Let us know when you are ready to receive the note.
[Victim] — — Message 9/13
> Ready
[Akira] — — Message 10/13
> [REDACTED URL]
[Victim] — — Message 11/13
> hello
[Victim] — — Message 12/13
> need help
[Akira] — — Message 13/13
> What kind of help do you need?

Analyst Observations

Facing a Ransomware Demand?

Whether you choose to negotiate or refuse — having specialists in the room changes the outcome.