// Context
About This Negotiation
This transcript documents a Conti ransomware negotiation with a redacted victim organisation.
The negotiation consisted of 12 messages exchanged over Unknown.
The initial demand is not clearly stated in the transcript. The final outcome is not confirmed in the transcript.
// Primary Source
Full Transcript — Verbatim
Reproduced from Casualtek's Ransomchats archive. URLs have been redacted.
Victim names are shown only where the breach was publicly reported in mainstream media. Any organisation wishing their name redacted can contact us at
enquiries@binary-response.com — we will act promptly.
[Conti] — 4/26/2021, 6:41:30 PM — Message 1/12
Welcome! We are ready to help you.
[Conti] — 4/28/2021, 10:29:02 PM — Message 2/12
If you and I do not reach consensus, you will be published and will never decrypt your files in the foreseeable future.
[Conti] — 4/28/2021, 10:32:19 PM — Message 3/12
If you continue to remain silent, on Monday we will make a publication confirming the data leak and hacking of your network.
[Victim] — 4/29/2021, 12:07:26 PM — Message 4/12
Hi
I am ready to pay tell me fast how much you want & on which address I have to transfer the money?
[Conti] — 4/29/2021, 1:28:18 PM — Message 5/12
Your price is 1.700.000$
[Conti] — 4/29/2021, 1:28:49 PM — Message 6/12
Bitcoin address for payment: [redacted]
[Conti] — 4/29/2021, 1:29:17 PM — Message 7/12
After your payment we will give you decryptor for all your computers,
file tree and log for non-recoverable deletion of your leaked files and non-posting your info at our news-site
[Victim] — 5/1/2021, 12:32:30 PM — Message 8/12
Hey Is your address correct? I am facing issue while doing transaction on your given address? Do you have another address??
[Conti] — 5/1/2021, 12:42:37 PM — Message 9/12
Bitcoin address for payment: [redacted]
The address is correct. What are your problems?
Do you eat our heads?
[Victim] — 5/1/2021, 1:01:42 PM — Message 10/12
I am getting issue "transaction server failed" while doing payment on your given address
[Conti] — 5/1/2021, 3:11:31 PM — Message 11/12
[redacted]
[Conti] — 5/1/2021, 3:11:39 PM — Message 12/12
New address, especially for you.