// Ransomware Negotiation Transcript
Hive Ransomware Negotiation — Redacted Organisation
// Context
About This Negotiation
This transcript documents a Hive ransomware negotiation with a redacted victim organisation. The negotiation consisted of 19 messages exchanged.
The initial ransom demand was $1.2M. The final outcome is not confirmed in the transcript.
// Primary Source
Full Transcript — Verbatim
Reproduced from Casualtek's Ransomchats archive. URLs have been redacted.
Victim names are shown only where the breach was publicly reported in mainstream media. Any organisation wishing their name redacted can contact us at enquiries@binary-response.com — we will act promptly.
Hello and welcome to Hive.
How may I help you?
yo son of bitches
pivot a lot of machines for you to make the ransom first that I
can u suck my dick ?
We have 1.8 TB of exfiltrated files.
Stop talking shit otherwise I'll disclose them
I am not sure who sent that message prior
How much do you want for the decryption?
The individual who sent the prior message, I believe was a user, following the guide on how to chat. They do not represent or speak for the company.
To decrypt your files and prevent them to be disclosed you will need to pay $1,200,000.
The price is not a subject to discuss.
Unfortunately Supreme lacks anywhere near that we will have to go out of business.
Is the price at all negotiable? It would take us a long time to get that much
The price isn't negotiable. I'll wait, there is no hurry
Okay we will have to talk to the bank, do I reconnect to this console?
reconnect for what?
Same link to come to this portal here
yes
We need more time for this amount of money, we have a meeting Monday with the Board of Directors. Please give us time.
Okay
// Analysis
Analyst Observations
- Hive ransomware was infiltrated and disrupted by the FBI in January 2023 in a major law enforcement operation that provided decryption keys to victims.