// Ransomware Negotiation Transcript
Avaddon Ransomware Negotiation — 20210518
// Context
About This Negotiation
This transcript documents a Avaddon ransomware negotiation with 20210518. The negotiation consisted of 24 messages exchanged.
The initial ransom demand was Unknown. The final outcome is not confirmed in the transcript.
// Primary Source
Full Transcript — Verbatim
Reproduced from Casualtek's Ransomchats archive. URLs have been redacted.
Victim names are shown only where the breach was publicly reported in mainstream media. Any organisation wishing their name redacted can contact us at enquiries@binary-response.com — we will act promptly.
привет
Hello! Chat in English.
hi
how can i change my avatar?
how much?
Where are you from?
Kazakhstan
we don't have so big money you asking
Wait a bit, we'll get back to you soon.
ok
tell me what kind of company are you?
what do you do? do you have your own website? We do not work in the CIS countries and if we make sure that you are a company located in the CIS, then we will decrypt you for free.
we are small wellding company who has finance problems at the moment.
Hey! We need proof of your identity. If you provide us with a photo of your documents and face, we will give you a decryptor free of charge.
Make a photo of your passport against your face. Then make a photo of the passport on the background of the monitor with encrypted files, you can open the properties of the file. Send us a photo through the service [REDACTED URL]
ok. Thanks.
[REDACTED URL]
here is a link to photos
We apologize for this situation, this is an accident. We do not work in the CIS countries.
You can download the decryptor on your payment page, update it. Run the decryptor according to the instructions.
thanks.
i wonder how you getting access?))))
About vulnerabilities in your network. These are weak passwords and old operating systems, the operating systems that you used have vulnerabilities, with the help of them an attack was carried out on your network. Use strong passwords and hide them as best as possible and update all your OS to the latest versions.
thanks a lot!!
// Analysis
Analyst Observations
- This transcript documents a Avaddon ransomware negotiation. The exchange provides insight into the group's negotiation tactics and communication style.