Hive Log 4
5/26/2026, 9:36:04 AM
Hive11/2/2021, 5:52:00 PM
Hello and welcome to Hive. How may I help you?
Hive11/3/2021, 1:40:00 PM
Hello! Waiting for your decision, otherwise I will be forced to raise the price if ignored and put your information on my information auction.
Victim11/5/2021, 4:30:00 PM
Anyone still here?
Hive11/5/2021, 4:50:00 PM
hi
Hive11/5/2021, 4:51:00 PM
How may I help you?
Victim11/5/2021, 5:57:00 PM
What's your intention here?
Hive11/5/2021, 6:20:00 PM
We don't care about your company files, we don't care about that, we're only interested in profit. This is business. Are you ready to make a deal?
Hive11/5/2021, 6:23:00 PM
Decrypting your server and removing stolen confidential files from your servers costs you $200,000 in bitcoins.
Victim11/5/2021, 6:25:00 PM
Wow...$200,000 in bitcoins is serious money. No idea who you are or what data you're talking about.
Hive11/5/2021, 6:29:00 PM
After payment, you will receive: 1) Transcription software 2) Promise of non-disclosure 3) Access to storage of decrypted files 4) Security report To convince you to pay, we can make calls to your customers to notify them of the incident.
Victim11/5/2021, 6:37:00 PM
Trust me, that's the last thing I need. Just trying to get details from you. Just feeling very targeted right now.
Victim11/5/2021, 6:37:00 PM
How do I know you have files?
Hive11/5/2021, 7:06:00 PM
If you are willing to cooperate, I will give you some files to confirm, but it does not matter, as it is silly to think that we have not downloaded anything when big money is being decided. You can read public news and our publications to be sure of our words http://hiveleakdbtnp76ulyhi52eag6c6tyc3xw7ez7iqy6wc34gd2nekazyd.onion/
Hive11/5/2021, 7:11:00 PM
lacveeam1.lac.[redacted].com MDVTSQL1 lacsql2012.lac.[redacted].com SQLCLUSTER02 lacwsus.lac.[redacted].com CIFSFTPDATA What files from these hosts are you interested in? Maybe you are interested in other hosts, tell me the name of the host
Victim11/5/2021, 7:55:00 PM
Which hosts did you take files from?
Hive11/6/2021, 2:35:00 AM
I don't know which hosts your data was downloaded from. We took only those files that were of interest and could be sold to third parties. Typically, customer data, databases, financial reports, corporate email archives and other classified and confidential data related to the company's activities (technological developments, blueprints, drug clinical trials, software codes, etc.) are downloaded.
Victim11/6/2021, 3:13:00 AM
Can you show us what the files of interest were?
Hive11/6/2021, 11:02:00 AM
We selected several random files from the downloaded repository and attached to the panel. You can watch it.
Victim11/6/2021, 7:22:00 PM
Can you decrypt these 2 files?
Hive11/6/2021, 7:36:00 PM
I have decrypted both files
Victim11/7/2021, 12:13:00 AM
Are these all the files you took from me?
Victim11/7/2021, 1:31:00 AM
Can you give me a list of all the files you have?
Victim11/7/2021, 2:28:00 PM
Are you here?
Hive11/7/2021, 2:33:00 PM
hi
Hive11/7/2021, 2:59:00 PM
We have uploaded a list of all your files that we have. You can see them in the panel.
Victim11/7/2021, 3:55:00 PM
Thanks, we'll take a look today. So basically if we don't pay, everything in this list gets onto your site?
Hive11/7/2021, 4:06:00 PM
Yes, the files will be revealed here on the site. We will also study them in more detail and post them on other forums. You should understand that this information can get to intruders.
Victim11/7/2021, 8:56:00 PM
Understood. We are uploading the files with the key file now.
Hive11/7/2021, 8:59:00 PM
ok
Hive11/7/2021, 9:04:00 PM
These both files contain sensitive info. I will not disclose them to you before payment. Choose another files or I can upload them to you truncated
Victim11/8/2021, 2:23:00 PM
We have hundreds of files like this that need to be unlocked. These two alone won't make a difference. We just want to make sure your tool works since there's little value in paying if we can't get these files fixed.
Hive11/8/2021, 2:28:00 PM
We are well-known organization and our decryptor works. Otherwise you would able to read about any issues with other companies which are hundreds.
Victim11/8/2021, 3:22:00 PM
We've seen it work on the first 2 files you fixed but we've heard that encryption can sometimes corrupt files too. The last thing we want to do is pay and not get our files back. We can't afford to pay a dime without knowing that your tool will get us back up and running. Sorry if this isn't a normal ask. We're just against a wall right now and this would really help.
Hive11/8/2021, 4:08:00 PM
Upload any other files and a corresponding key(s) without any important info in them.
Victim11/8/2021, 4:44:00 PM
We're just worried about this particular file type. That's the main issue.
Hive11/8/2021, 6:00:00 PM
I already decrypt these two last files you uploaded, but I can't send you them to you due to sensitive info inside
Hive11/8/2021, 6:01:00 PM
So you will be able to do the same right after you'll purchase the decryption software
Victim11/8/2021, 6:37:00 PM
Not sure how we'll be able to pay without seeing it. I've read a lot online and people are always running into issues with decryption. This is going to be a risk no matter what, but we need certain assurances
Victim11/8/2021, 7:51:00 PM
If you can't send the files, can you send a screenshot?
Hive11/8/2021, 9:00:00 PM
We will answer you a little bit later.
Hive11/8/2021, 9:09:00 PM
I have uploaded shorten files
Victim11/8/2021, 9:18:00 PM
We'll review them. If they look good, then we can pay $100,000. That's a little more cash than what we actually have, but we'll take a step towards you to make this happen. Do we have an agreement?
Hive11/8/2021, 9:47:00 PM
The price is not a subject to discuss.
Victim11/8/2021, 9:51:00 PM
This isn't about a low ball. No idea how to get our hands on $200,000. What's something reasonable you'd consider?
Hive11/8/2021, 10:40:00 PM
The price of $ 200,000 was announced at the very beginning of the negotiations. After that, you continued negotiations, specifying all the necessary information for you. thereby you agreed to the announced amount. You didn't just waste your time on this, did you? Your company look can afford this amount and you know it. We did not overstate the cost, the price is optimal for you. I ask you to make a decision and make a payment as soon as possible. Then we will fulfill all the stated conditions immediately.
Victim11/9/2021, 12:23:00 AM
We were trying to see if this was a viable solution before discussing the financial side. It wouldn't make sense for us to go through with this if we weren't sure on what we were getting from you. We're a small business and we figured you wouldn't accept a small price. $100,000 is not a small price.
Victim11/9/2021, 5:26:00 AM
If we can move some money around and increase what we can send you to $150,000 will you accept? This is a lot of money for us, we're just a small business and we're trying to take a step in reaching a quick agreement with you.
Hive11/9/2021, 7:20:00 AM
I fully understand you. I understand what a difficult situation you are in. And for this reason, I will help you, I agree to $ 170,000. I will ask you to also help me and make the payment quickly.
Victim11/9/2021, 8:18:00 AM
Ok, it's late right now but I will bring this to my team first thing in the morning. Thank you
Victim11/9/2021, 3:23:00 PM
Is the wallet [redacted]? Also, what will we get from you if we pay $170,000?
Hive11/9/2021, 3:33:00 PM
After payment you will get: 1) The decryption software 2) Promise of non-disclosure 3) Access to exfiltrated files storage 4) Security report
Hive11/9/2021, 3:37:00 PM
Yes, our wallet [redacted]
Victim11/9/2021, 8:02:00 PM
Paid. Can we get the tool now?
Hive11/9/2021, 8:19:00 PM
Wait a little bit. We'll get to step 1 soon.
Victim11/9/2021, 9:24:00 PM
and steps 2-4?
Hive11/9/2021, 9:58:00 PM
3) Access to exfiltrated files storage mega.nz login megashara@onionmail.org Password [redacted]
Hive11/9/2021, 10:20:00 PM
4) Security report https://dropmefiles.net/en/[redacted]
Victim11/10/2021, 12:32:00 AM
checking this out