// Context
About This Negotiation
This transcript documents a Ranzy ransomware negotiation with a redacted victim organisation.
The negotiation consisted of 20 messages exchanged over Unknown.
The initial ransom demand was $7,000. The final outcome is not confirmed in the transcript.
// Primary Source
Full Transcript — Verbatim
Reproduced from Casualtek's Ransomchats archive. URLs have been redacted.
Victim names are shown only where the breach was publicly reported in mainstream media. Any organisation wishing their name redacted can contact us at
enquiries@binary-response.com — we will act promptly.
[Victim] — 23 Feb, 12:46 — Message 1/20
hi
[Ranzy] — 23 Feb, 12:56 — Message 2/20
hi
[Victim] — 23 Feb, 13:02 — Message 3/20
I need your help
[Victim] — 23 Feb, 13:02 — Message 4/20
my system has been infected by your ransomware.. what's the price of decryption tool?
[Ranzy] — 23 Feb, 13:04 — Message 5/20
price for your case is $7,000
[Victim] — 23 Feb, 13:08 — Message 6/20
Ok How to pay that money to you?
[Ranzy] — 23 Feb, 13:21 — Message 7/20
Buy bitcoins here: [REDACTED URL]
[Ranzy] — 23 Feb, 13:21 — Message 8/20
Send to our wallet: [redacted]
[Victim] — 23 Feb, 13:52 — Message 9/20
Thanks
[Victim] — 23 Feb, 13:52 — Message 10/20
Man is your bitcoin address correct? I am getting error while doing payment on your given address?
[Ranzy] — 23 Feb, 14:12 — Message 11/20
yes correct address
[Victim] — 23 Feb, 14:33 — Message 12/20
do you have another address where i
can retry to pay you bro.. please help me fast... And can you please
provide me some discount
[Ranzy] — 23 Feb, 14:40 — Message 13/20
ok, without discount
[Ranzy] — 23 Feb, 14:40 — Message 14/20
[redacted]
[Victim] — 23 Feb, 15:11 — Message 15/20
No discount in this covid pandemic
bro..I tried to send some money on your given address might be
blockchain network seems to be busy and I am getting error transaction
server failed might be possible your addresses is new
[Victim] — 23 Feb, 15:12 — Message 16/20
Might be your address is new
[Victim] — 23 Feb, 15:13 — Message 17/20
If you can provide me NON-Empty address might be it will work.. I know bitcoin never works in this way
[Victim] — 23 Feb, 15:13 — Message 18/20
this is my assumption
[Ranzy] — 23 Feb, 15:51 — Message 19/20
no, send to wallet which i send
[Ranzy] — 23 Feb, 18:07 — Message 20/20
Send to [redacted]