// Context
About This Negotiation
This transcript documents a Dragonforce ransomware negotiation with 29Bbe03074Fdbb8D.
The negotiation consisted of 10 messages exchanged over Unknown.
The initial ransom demand was Unknown. The final outcome is not confirmed in the transcript.
// Primary Source
Full Transcript — Verbatim
Reproduced from Casualtek's Ransomchats archive. URLs have been redacted.
Victim names are shown only where the breach was publicly reported in mainstream media. Any organisation wishing their name redacted can contact us at
enquiries@binary-response.com — we will act promptly.
[29Bbe03074Fdbb8D] — 2024-08-01T22:33:55.198424Z — Message 1/10
We are attempting to do step 1 by downloading the file tree, however it will not download. Can you send it to me?
[Dragonforce] — 2024-08-01T22:39:40.79313Z — Message 2/10
yes.
[Dragonforce] — 2024-08-01T22:46:59.132678Z — Message 3/10
tree.zip filesize:889780
[29Bbe03074Fdbb8D] — 2024-08-02T00:34:24.006357Z — Message 4/10
Is this everything you have stolen? How much data did you take from our network?
[Dragonforce] — 2024-08-02T00:37:20.701612Z — Message 5/10
102 GB. The list has been provided to you.
[29Bbe03074Fdbb8D] — 2024-08-03T00:37:45.986826Z — Message 6/10
Okay thank you. How do we know you have these files? Can we select a few file names from that list and then you will provide them?
[Dragonforce] — 2024-08-03T00:40:52.838507Z — Message 7/10
What specific files do you want to see? The size should be small and the contents of the files should not be critical.
[29Bbe03074Fdbb8D] — 2024-08-03T15:05:48.992011Z — Message 8/10
Ok that is a large dataset. I am waiting on selection from my boss
[Dragonforce] — 2024-08-03T15:08:46.692687Z — Message 9/10
Ok
[Dragonforce] — 2024-08-07T16:31:29.716114Z — Message 10/10
You're delaying time. The announcement of the publication of the files is posted on the blog. If the payment is not made before the end of the timer, the data will be published.