// Ransomware Negotiation Transcript
Hive Ransomware Negotiation — Redacted Organisation
// Context
About This Negotiation
This transcript documents a Hive ransomware negotiation with a redacted victim organisation. The negotiation consisted of 15 messages exchanged.
The initial ransom demand was $300,000. The final outcome is not confirmed in the transcript.
// Primary Source
Full Transcript — Verbatim
Reproduced from Casualtek's Ransomchats archive. URLs have been redacted.
Victim names are shown only where the breach was publicly reported in mainstream media. Any organisation wishing their name redacted can contact us at enquiries@binary-response.com — we will act promptly.
Hello and welcome to Hive.
How may I help you?
Hello
The company does not worth 20M
Hello,
can you help me to decrypt some files?
Yes, to decrypt your files you have to pay $300,000 in Bitcoin.
We can pay max 3000$
Unfortunately I can't accept this.
The final price for you is $100,000.
Hello,
We don't have the money at this moment.
We need to pay you from outside of company funds or else we will have problems with Government financial authorities.
For that, we have to gather some money outside the company funds so we need some days to pay.
How do we pay when we have the money?
The offer has been created. There you can find a Bitcoin address and approximate amount in it to pay
// Analysis
Analyst Observations
- Hive ransomware was infiltrated and disrupted by the FBI in January 2023 in a major law enforcement operation that provided decryption keys to victims.