trinity Ransomware Negotiation — 0009

6Messages
UnknownDuration
UnknownInitial Demand
UnknownOutcome

About This Negotiation

This transcript documents a trinity ransomware negotiation with 0009. The negotiation consisted of 6 messages exchanged over Unknown.

The initial ransom demand was Unknown. The final outcome is not confirmed in the transcript.

Full Transcript — Verbatim

Reproduced from Casualtek's Ransomchats archive. URLs have been redacted.

Victim names are shown only where the breach was publicly reported in mainstream media. Any organisation wishing their name redacted can contact us at enquiries@binary-response.com — we will act promptly.
[0009] — — Message 1/6
I'd like to know if it would be able to be decrypted. I've just upload one of the encrypted files. Please let me show that you can decrypt it.
[0009] — — Message 2/6
What are you doing now?
[trinity] — — Message 3/6
hello
[trinity] — — Message 4/6
hello
[trinity] — — Message 5/6
how many computers do you want to decrypt?
[trinity] — — Message 6/6
For the test, upload the file here file.io and send us the link.

Analyst Observations

Facing a Ransomware Demand?

Whether you choose to negotiate or refuse — having specialists in the room changes the outcome.