// Context
About This Negotiation
This transcript documents a Conti ransomware negotiation with a redacted victim organisation.
The negotiation consisted of 9 messages exchanged over Unknown.
The initial ransom demand was $1.2M. The final outcome is not confirmed in the transcript.
// Primary Source
Full Transcript — Verbatim
Reproduced from Casualtek's Ransomchats archive. URLs have been redacted.
Victim names are shown only where the breach was publicly reported in mainstream media. Any organisation wishing their name redacted can contact us at
enquiries@binary-response.com — we will act promptly.
[Victim] — 1/26/2021, 2:27:09 PM — Message 1/9
[redacted]: Hi My system is encrypted I am ready to pay you tell me how much you want & where I have to pay?? Please help me fast I will do it now
[Conti] — 1/26/2021, 2:29:21 PM — Message 2/9
Support: Hello, please introduce yourself and let me know what company do you represent.
[Victim] — 1/26/2021, 3:31:45 PM — Message 3/9
[redacted]: [redacted] company
[Conti] — 1/26/2021, 4:04:05 PM — Message 4/9
Support: So, are you trying to recover your client's network?
[Victim] — 1/26/2021, 4:10:55 PM — Message 5/9
[redacted]: nope it's my own system
[Conti] — 1/26/2021, 4:16:41 PM — Message 6/9
Support: So, it's a single system? If yes - I am not sure if you will be able to handle our demands, more than that - I have no idea how it could be encrypted, cause according to our records your company was not under attack by our team.
[Victim] — 1/26/2021, 4:32:02 PM — Message 7/9
[redacted]: I will handle it. I will pay it
[Victim] — 1/26/2021, 4:32:42 PM — Message 8/9
[redacted]: Just tell me how much & where I have to pay I will do it. You Don't have to worry about it
[Conti] — 1/26/2021, 4:44:53 PM — Message 9/9
Support: This exact build code was linked with [redacted]. The requested demand for this code is assigned at $1.2mil