// Context
About This Negotiation
This transcript documents a Mallox ransomware negotiation with a redacted victim organisation.
The negotiation consisted of 17 messages exchanged over Unknown.
The initial ransom demand was $33,750. The final outcome is not confirmed in the transcript.
// Primary Source
Full Transcript — Verbatim
Reproduced from Casualtek's Ransomchats archive. URLs have been redacted.
Victim names are shown only where the breach was publicly reported in mainstream media. Any organisation wishing their name redacted can contact us at
enquiries@binary-response.com — we will act promptly.
[Victim] — [30/05/2023 18:46] — Message 1/17
Can the price be lower. I am a student
[Victim] — [30/05/2023 18:46] — Message 2/17
I'm too poor, but I don't want to lose data
[Mallox] — [30/05/2023 19:53] — Message 3/17
you can tell similar tales to someone else
[Victim] — [30/05/2023 19:55] — Message 4/17
10%，Ok。
[Mallox] — [30/05/2023 19:57] — Message 5/17
what you mean?
[Victim] — [30/05/2023 19:58] — Message 6/17
Discount 10%
[Mallox] — [30/05/2023 19:58] — Message 7/17
Discount 10%. Discount expiration date: 2023-06-05
[Mallox] — [30/05/2023 19:59] — Message 8/17
I've made discount 10%
[Victim] — [30/05/2023 20:01] — Message 9/17
After discount 10%，
[Victim] — [30/05/2023 20:01] — Message 10/17
$4500
[Mallox] — [30/05/2023 20:02] — Message 11/17
$33750 / 1.21740423 btc
[Victim] — [30/05/2023 20:03] — Message 12/17
Sorry, I'm too poor。
[Mallox] — [30/05/2023 20:10] — Message 13/17
I'm not interested in your personal income. If the company needs the data, then they can pay for the decryption
[Victim] — [30/05/2023 20:11] — Message 14/17
$10000,Help me.
[Mallox] — [30/05/2023 20:14] — Message 15/17
no
[Victim] — [30/05/2023 20:18] — Message 16/17
$15000
[Mallox] — [30/05/2023 20:58] — Message 17/17
This offer is not serious. I can offer 30000 USD and it's best price which you can get for decryption of all your servers