fog Ransomware Negotiation — Redacted Organisation

3Messages
UnknownDuration
$160,000Initial Demand
UnknownOutcome

About This Negotiation

This transcript documents a fog ransomware negotiation with a redacted victim organisation. The negotiation consisted of 3 messages exchanged over Unknown.

The initial ransom demand was $160,000. The final outcome is not confirmed in the transcript.

Full Transcript — Verbatim

Reproduced from Casualtek's Ransomchats archive. URLs have been redacted.

Victim names are shown only where the breach was publicly reported in mainstream media. Any organisation wishing their name redacted can contact us at enquiries@binary-response.com — we will act promptly.
[Victim] — — Message 1/3
Hello
[fog] — Tuesday, 19 November 2024 19:14:24 — Message 2/3
Hello
[fog] — Tuesday, 19 November 2024 19:23:56 — Message 3/3
We took these files from you. If you need a proof we indeed possess it, send me a couple of directories to the files you want to see. To test our tool, send me 3 random encrypted files and we will decrypt them for free. If you want your data fully decrypted and the files we stole removed from our source, you will have to pay a fee. We will also be able to provide a security report and explain how we did it to get in. The bosses are demanding $160,000 for said services.

Analyst Observations

Facing a Ransomware Demand?

Whether you choose to negotiate or refuse — having specialists in the room changes the outcome.