The chat begins with the individual from Shook Lin & Bok
(You) asking the Akira negotiator
(We) why they had never responded to their emails. Akira responds that the only secure channel for negotiations is their chat. But what they claim doesn’t match the reality… evidently.
You: This is [EDITED]. You did not reply to my emails for a long time
We: We have responded that we can communicate in this chat only. It is secured.
Akira provides the victim with the file tree (listing.7z).
We: These files were taken from your network prior to encryption. You can pick 2-3 random files up to 10 MB each from the list and we will upload them to this chat as a proof of possession. To prove that we can properly decrypt your data you can upload 2-3 encrypted files up to 10 MB each to our chat and we will upload decrypted copies back.
[…] Let me know whether you’re interested in a whole deal or in parts. This will affect the final price.
If we don’t get a respond within next 24 hours, we will be forced to announce your corporate data leak on our blog.
You: We will download examine the files to verify they all belong to us. This might take longer than 24 hours as our IT team is very busy. Please be very patient with us.