Avaddon Log 3
5/26/2026, 9:35:57 AM
AvaddonInvalid Date
Hello from Avaddon Team .Price for you is $300,000. We have downloaded a lot of critical data, which will be published on our news website (http://avaddongun7rngel.onion) if you do not make a payment. After the payment we will decrypt all your systems, give you listing of files that we have taken, remove data from our servers and give you proofs of deletion. Also we will provide you with security report, so you can fix all your vulnerabilities and be safe again.
AvaddonInvalid Date
We are ready to talk to you and discuss on this matter ....
VictimInvalid Date
hi
VictimInvalid Date
is anyone here?
AvaddonInvalid Date
Hello!
VictimInvalid Date
wnat to talk to you about this situation
VictimInvalid Date
your price is very expensive for us
VictimInvalid Date
300.000$ is our 3 year budget
VictimInvalid Date
tell us the real possible price and we ready to pay
AvaddonInvalid Date
How much can you pay at most?
VictimInvalid Date
give me 5 minute
VictimInvalid Date
i will talk with my chief
AvaddonInvalid Date
ok
VictimInvalid Date
redy to pay 3000$
AvaddonInvalid Date
This is a joke?
AvaddonInvalid Date
Your price is $ 300,000.
VictimInvalid Date
300.000$ is a joke
VictimInvalid Date
becauuse we havn't this amount of money
VictimInvalid Date
3000$ we can pay or go ahead to reainstall all our systems
VictimInvalid Date
search on map our country Armenia
VictimInvalid Date
300.000 is out country budget how we can pay this kind of money?
AvaddonInvalid Date
Perhaps the price is too high for you and we are ready to make a small discount.
AvaddonInvalid Date
But on $ 3,000 we will never agree.
AvaddonInvalid Date
Reinstalling all systems and restoring the workflow will take a very long time and you will incur heavy losses. The best option would be to pay and get back to normal quickly.
VictimInvalid Date
yes you are right
VictimInvalid Date
we will lose money while trying to reainstall all systems and getting back informtion from external backups
VictimInvalid Date
but don't lose so much as you want
VictimInvalid Date
3000$ ready to pay, agree or not?
AvaddonInvalid Date
We have a lot of your important files that we will publish on our blog if you do not cooperate with us.
VictimInvalid Date
I know all this
VictimInvalid Date
but we havn't money!
VictimInvalid Date
what can we do?!
AvaddonInvalid Date
You will never be able to get your files back without our decryptor! Only we have a unique key to decrypt your files. Don't waste time and money trying to decrypt files yourself.
VictimInvalid Date
I know that very well
VictimInvalid Date
I comunicate with you before
VictimInvalid Date
I know all this processes
VictimInvalid Date
and now that we cant decrypt our files
VictimInvalid Date
we just can reinstall all systemss and restore backups but it will take too long for us
AvaddonInvalid Date
We are ready to make a very big discount for you. If you pay within 67 hours, we will offer you a 50% discount. Then the price will again be $ 300,000.
VictimInvalid Date
so we ready to pay as much as we can
AvaddonInvalid Date
Now you need to pay $ 150,000.
VictimInvalid Date
what's your name?
AvaddonInvalid Date
It does not matter.
VictimInvalid Date
you know our country?
VictimInvalid Date
how the small firm in Armenia can pay you 150.000?
VictimInvalid Date
my house cost 15.000$ in all
AvaddonInvalid Date
Sir, you are offering us a ridiculous price, it does not suit us at all. Before we set you a price of $150,000, we analyzed your profitability and your capabilities in general, this price was taken not from the sky, but according to specific criteria, and by analysis.
VictimInvalid Date
what can I say, your analysis is wrong...
VictimInvalid Date
last time a year ago I paid 1700$ for your decrypting key
AvaddonInvalid Date
And we will tell you that $ 15,000 is still not enough, and we do not agree to such a small amount. Suggest more or we will use other methods. We can share your financial statements, your employee and customer data, and more in the public domain. Use DDOS. We can completely ruin the reputation of your business. Then you will have a lot of problems and you will suffer a lot of damage. You choose ...
VictimInvalid Date
I don't event suggest 15.000$, because I havn't
AvaddonInvalid Date
We want to talk to your boss.
VictimInvalid Date
I called him, will be here in 15 minutes
VictimInvalid Date
Hi, I'm CEO
VictimInvalid Date
my name is [redacted]
VictimInvalid Date
ready to cooperate with you ...
AvaddonInvalid Date
Hello, [redacted]!
AvaddonInvalid Date
Are you already aware of the situation?
VictimInvalid Date
yes, of course
VictimInvalid Date
but unfortunately your requirements are in not compatible with the budget of our company ...
AvaddonInvalid Date
How much can you offer? As we already wrote, the amount of $ 15,000 or $ 20,000 does not interest us.
VictimInvalid Date
:)
VictimInvalid Date
and how much you want if you don't agree with 15.000 or 20.000?
AvaddonInvalid Date
You're not serious! You do not understand the magnitude of the problems for your company. Are you ready to incur losses and ruin your reputation or will you cooperate and offer a higher amount?
AvaddonInvalid Date
We have already offered you a very large discount, which we do not do for other clients. We have made a 50% discount for you.
VictimInvalid Date
I asked how much you want?
VictimInvalid Date
I perfectly understand all the risks
AvaddonInvalid Date
The price for you is $ 150,000.
AvaddonInvalid Date
After the expiration of the time, the price will double and then it will be $ 300,000.
VictimInvalid Date
it's not serious my company is not able to pay you that kind of money let my IT specialists stay awake for several days and restore archives or pay you this money as they want
VictimInvalid Date
by
AvaddonInvalid Date
You cannot recover files without our unique key.
AvaddonInvalid Date
You have 66 hours to start working with us or you will have a lot of problems.
Avaddon3/5/2021, 4:02:00 AM
After 7 o'clock your amount to double. This is the last chance to pay at such a low price.
Avaddon3/5/2021, 11:39:00 AM
Hi guys are you there ?
Avaddon3/5/2021, 11:40:00 AM
Contact us if you see this, it looks like we have a misunderstanding.
Victim3/5/2021, 4:04:00 PM
hi
Victim3/5/2021, 4:04:00 PM
what you mean?
Avaddon3/5/2021, 4:20:00 PM
Sir, we found out that one of the branches of your network is located in Armenia, our policy of work does not allow working in the CIS countries, so we will give you a decryptor general with which you can decrypt your entire network. We strongly apologize for this unpleasant incident and would like to say that we will help you restore your systems even if you have any problems.
Victim4/5/2021, 5:32:00 AM
really? this is a great news
Victim4/5/2021, 5:35:00 AM
despite the fact that we already recover most of our information, we will be thankful if you give us the key
Avaddon4/5/2021, 5:40:00 AM
You can download the decryptor.
Victim4/5/2021, 5:43:00 AM
from where? give link please
Victim4/5/2021, 5:43:00 AM
is it free software?
Avaddon4/5/2021, 5:46:00 AM
http://avaddonbotrxmuyl.onion/[redacted]/buy
Victim4/5/2021, 7:00:00 AM
look like it's work...
Victim4/5/2021, 7:03:00 AM
can you also help us to understand how you did that?
Victim4/5/2021, 7:04:00 AM
we want to found out loophole in our network
Avaddon4/5/2021, 7:33:00 AM
Weak passwords.
Victim4/5/2021, 7:41:00 AM
but how you could come in to our network?
Avaddon4/5/2021, 7:42:00 AM
I will clarify this point.
Victim4/5/2021, 7:47:00 AM
we will wait for your clarifying ant will be very thankful for your support
Avaddon4/5/2021, 7:48:00 AM
Ok
Avaddon4/5/2021, 8:16:00 AM
You guys should do penetration tests more often. Hire a professional company and they will find all loopholes in your network. It will cost you few ten thousends but you will be safe.
Avaddon4/5/2021, 8:18:00 AM
Update all services with outside internet, especially Ms Exchange server.
Victim4/5/2021, 8:21:00 AM
you used zerologon exploit ?
Avaddon4/5/2021, 8:26:00 AM
We cannot say anything more for security reasons for personal purposes.
Victim4/5/2021, 8:30:00 AM
ok , we understood , thanks for information , we will upgrade our exchange server and do several things for security
Avaddon4/5/2021, 8:58:00 AM
Ok guys, excuse us again, I hope you didn't report this to the police? :)
Victim4/5/2021, 9:21:00 AM
))
Avaddon4/5/2021, 9:23:00 AM
What does it mean ?:)
Victim4/5/2021, 9:27:00 AM
don't worry about that
Avaddon4/5/2021, 9:28:00 AM
Ok sir , good luck