trinity Ransomware Negotiation — 0008

13Messages
UnknownDuration
$30,000Initial Demand
UnknownOutcome

About This Negotiation

This transcript documents a trinity ransomware negotiation with 0008. The negotiation consisted of 13 messages exchanged over Unknown.

The initial ransom demand was $30,000. The final outcome is not confirmed in the transcript.

Full Transcript — Verbatim

Reproduced from Casualtek's Ransomchats archive. URLs have been redacted.

Victim names are shown only where the breach was publicly reported in mainstream media. Any organisation wishing their name redacted can contact us at enquiries@binary-response.com — we will act promptly.
[0008] — — Message 1/13
Hi
[0008] — — Message 2/13
Hi
[0008] — — Message 3/13
I need decryption keys please
[trinity] — — Message 4/13
hello
[trinity] — — Message 5/13
how many computers do you want to decrypt?
[0008] — — Message 6/13
1
[trinity] — — Message 7/13
we've encrypted your entire network decryption price 1 pc and keeping your data private will cost 0.5 bitcoin ($30,000).
[0008] — — Message 8/13
How can we test if it works? How is it decrypted? Can you test with any file?
[trinity] — — Message 9/13
yes send us one file no more than 2 mb. not a backup or database and we'll do a test. upload the file here [REDACTED URL]
[trinity] — — Message 10/13
if you want to decrypt all the PCs price 1.5 bitcoin
[trinity] — — Message 11/13
if you refuse to pay, we will post your data and bases on our leak site
[trinity] — — Message 12/13
bitcoin wallet [redacted]
[trinity] — — Message 13/13
after payment you will receive a program that automatically decrypts all files

Analyst Observations

Facing a Ransomware Demand?

Whether you choose to negotiate or refuse — having specialists in the room changes the outcome.