This repository contains a Python script for simulating chat negotiations with ransomware groups based on real-world behavior patterns.
Author: Antonio Brandao
Data Source: Based on real ransomware chat logs from Casualtek/Ransomchats.
Special Thanks: Valéry Marchive for insights and contributions.
- Behavior Analysis: Reads behavior patterns from text files extracted from actual ransomware negotiations, allowing for realistic simulation of ransomware group interactions.
- API Flexibility: Supports integration with either OpenAI or xAI Grok APIs, giving flexibility in AI model usage for responses.
- User Interface: Offers a command-line interface with color-coded outputs to differentiate between user and ransomware responses.
- File Management: Includes a script to update terminology from 'behavior' to 'behaviour' for consistency with British English or specific project needs.
- Choose between OpenAI or xAI Grok for AI-powered responses in simulated ransomware negotiations.
- Select from a list of ransomware groups, sorted by the size of their behavior data, to simulate interactions.
- Engage in a simulated negotiation where the AI responds based on predefined behavior patterns.
- Python 3.x
openailibrary for OpenAI API integrationcoloramafor colored terminal text on Windows- An API key for either OpenAI or xAI Grok services
- Clone the repository:
git clone https://github.com/toniall/ransomchat.git
cd ransomchat- Set up and activate a virtual environment:
python3 -m venv venv
source venv/bin/activate # For Linux/macOS- Install dependencies:
pip install -r requirements.txtpython3 RamsonChat.py
python3 RamsonChatPyQt.py- Choose your API and enter the API Key:
- Select the Behaviour Folder:
- Select the Ransomware Group for the Negotiations:
- Start the Chat:
This tool is for educational, research, or demonstration purposes only. It should not be used for any malicious activities or to engage with actual ransomware groups.