Chat

Negotiation chat with different groups

Akira

Avaddon

Avos

Babuk

BlackBasta

BlackMatter

Cloak

Conti

Darkside

Dragonforce

  • 058f4b92-ae99-45c7-bf35-5d2d6754b3de – 19 message(s) voir chat
  • 05f724f8-906e-4739-8177-815852cc2c3f – 29 message(s) voir chat
  • 29BBE03074FDBB8D – 10 message(s) voir chat
  • 7A313D13EB6B4E58 – 32 message(s) voir chat
  • 89716D29D2CEE36F – 23 message(s) voir chat
  • AB0404E049514B50 – 28 message(s) voir chat
  • BD004D632D87DBA0 – 25 message(s) voir chat
  • C2A3C7249797F5ED – 66 message(s) voir chat
  • C42CDF65B97D0E92 – 30 message(s) voir chat
  • C7CD31EAAF9DE9AC – 71 message(s) voir chat
  • C8479B30418B331E – 4 message(s) voir chat
  • D6DDD9B26D7D41DB – 14 message(s) voir chat
  • FDA8141B6DD392E3 – 10 message(s) voir chat
  • b8e14e1a-548f-4eec-bd6e-a590126e57c9 – 14 message(s) voir chat

Hive

Hunters International

Mallox

NoEscape

Pear

Qilin

  • 20240429 – 3 message(s) voir chat
  • 20250203 - from @RakeshKrish12 – 36 message(s) voir chat

REvil

RansomHub

Ranzy

RunSomeWares

fog

lockbit3.0

mount-locker

trinity

Victim 06.03.2023 04:48:57 UTC
[Chat started]
Victim 06.03.2023 04:54:05 UTC
hello?
LockBit 3.0 06.03.2023 06:45:33 UTC
Hello
LockBit 3.0 06.03.2023 13:22:04 UTC
if you want decrypt, you'd better start a dialogue
Victim 06.03.2023 15:20:07 UTC
OK. I read you took files and that you have a decryptor to decrypt files. What are these files and how do I know you can decrypt the files you left?
LockBit 3.0 06.03.2023 15:58:15 UTC
Send me some encrypted files, I will decrypt them for free.
LockBit 3.0 06.03.2023 21:16:45 UTC
I see you're not in rush having business with us. I don't think it's in your interest to be penalized for that.
LockBit 3.0 08.03.2023 12:54:28 UTC
If you keep quiet I will start to leak your data
Victim 08.03.2023 13:54:35 UTC
It take time to collect files wait please
Victim 08.03.2023 13:57:45 UTC
File: [Laval encrypted files.zip]
Victim 08.03.2023 13:59:45 UTC
File: [Sayabec encrypted files.zip]
Victim 08.03.2023 14:00:06 UTC
Can you show me the files you took and what your demands are?
Victim 08.03.2023 14:00:21 UTC
I uploaded some test files
LockBit 3.0 08.03.2023 14:17:56 UTC
wait for test decrypt
LockBit 3.0 08.03.2023 14:18:19 UTC
i'll provide you some proofs of stolen data soon
LockBit 3.0 08.03.2023 14:22:12 UTC
vm files are not allowed for test decrypt, just not important files like .log file
LockBit 3.0 08.03.2023 14:25:07 UTC
while i'm preparing proof for you let's talk about business
LockBit 3.0 08.03.2023 14:26:30 UTC
you need to pay 8 million doolars to get decription software and deleating stolen data
Victim 08.03.2023 14:33:47 UTC
That is a lot of money, so we need to see what data you took to assess what the business is able to discuss.
Victim 08.03.2023 14:34:47 UTC
all files I gave you are low value. I would not send you anything important but we do want to ensure VM files would be able to decrypt
LockBit 3.0 08.03.2023 14:34:47 UTC
it's a good price for your company
Victim 08.03.2023 14:35:50 UTC
We can certainly discuss what is a good price and how we can be assured of agreement.
LockBit 3.0 08.03.2023 14:36:50 UTC
decryption software works with all files but we have rules and for trial decrypt vm files are not allowed
LockBit 3.0 08.03.2023 14:37:49 UTC
of course
LockBit 3.0 08.03.2023 14:38:04 UTC
I'll come back later with proofs
LockBit 3.0 08.03.2023 15:11:09 UTC
.vmx impossible free decrypt
LockBit 3.0 08.03.2023 15:12:30 UTC
File: [decrypted_key.rar]
Victim 08.03.2023 15:29:30 UTC
vmx is a config file. Why is that not decryptable?
Victim 08.03.2023 15:30:38 UTC
take a partial screenshot so we know your decryptor works.
LockBit 3.0 08.03.2023 21:40:36 UTC
File: [1.png]
LockBit 3.0 08.03.2023 21:40:37 UTC
File: [3.png]
LockBit 3.0 08.03.2023 21:40:38 UTC
File: [5.png]
LockBit 3.0 08.03.2023 21:40:42 UTC
File: [4.png]
LockBit 3.0 08.03.2023 21:40:54 UTC
File: [2.png]
Victim 09.03.2023 15:18:05 UTC
can I get a list of the files taken rathrer than a few files?
LockBit 3.0 09.03.2023 15:33:41 UTC
File: [1.7z]
LockBit 3.0 09.03.2023 15:33:55 UTC
File: [1.7z]
Victim 09.03.2023 15:34:49 UTC
ty will review
LockBit 3.0 09.03.2023 15:37:24 UTC
get a move on, 3 days already gone and i don't see your offers
Victim 09.03.2023 15:42:12 UTC
is this a partial list? did you mean to send 1.7z and 2.7z?
LockBit 3.0 09.03.2023 15:44:59 UTC
no
LockBit 3.0 09.03.2023 15:45:38 UTC
check this list and lets talk about business
LockBit 3.0 11.03.2023 20:21:35 UTC
Your time is almost up.
Victim 13.03.2023 04:19:57 UTC
show me these files Employee Roster HYZ 10312018.xls, Devis Entretien Ménager Uniboard-Unires Val-d'or 2023.docx, Employee Total Hours Report HY1 Salary 10312018.xls, PAYROLL9122015.xls, Mont-Laurier vs LaBaie HDF.xls, Panneaux de paille.xls,
Victim 13.03.2023 04:20:21 UTC
please bear with us time-wise. We are trying to deal with this as quickly as possible. Thank you.
LockBit 3.0 13.03.2023 07:35:06 UTC
choose 3 of thees files
LockBit 3.0 13.03.2023 07:59:46 UTC
File: [files (1).7z]
LockBit 3.0 13.03.2023 08:00:13 UTC
here you go
Victim 13.03.2023 14:54:35 UTC
ty
LockBit 3.0 14.03.2023 09:20:41 UTC
Stop stalling, I want to see numbers from you, otherwise I am preparing a press release.
LockBit 3.0 14.03.2023 12:46:46 UTC
you have 6 hours to give me answer
Victim 14.03.2023 16:13:52 UTC
We would like to reach an agreement however we are not sure how you reached that price you are asking for? Can you offer a price that we can digest and agree?
LockBit 3.0 14.03.2023 18:33:31 UTC
Before encrypting any network we do deeply study them. We know how much you can pay.
Victim 14.03.2023 20:53:10 UTC
How do you know how much debt we carry? None of the information you may have seen would include that. Is there any flexibility on the price?
LockBit 3.0 14.03.2023 20:56:45 UTC
I don't really want to keep this conversation What do you want? Give me your offer
Victim 14.03.2023 20:58:21 UTC
I have no interest in insulting you with an offer because your starting amount is significant than what we have liquidity to allocate to this without debtors locking us out.
LockBit 3.0 14.03.2023 21:03:10 UTC
I still want to see your offer. Well maybe we need to prepare a blog post for you and close this chat. I can't decide
Victim 14.03.2023 22:27:26 UTC
but why did you post us?
Victim 14.03.2023 22:28:50 UTC
can you remove our post?
Victim 14.03.2023 22:29:22 UTC
our board has agreed to offer 500k to close this incident. Do we have a deal?
LockBit 3.0 14.03.2023 22:30:36 UTC
Because it semms you don't want to make a deal and waisting time
LockBit 3.0 14.03.2023 22:32:25 UTC
the blog private now, i just want you know that i'm not joking with you
LockBit 3.0 14.03.2023 22:36:23 UTC
The amount is nothing for such a company. You have a time until tomorrow to make a real offer. Otherwise I will put a blog to a public page.
Victim 14.03.2023 22:36:23 UTC
we know that.
Victim 14.03.2023 22:36:57 UTC
but you see? I told you that you do not understand our situation so why even ask for an offer?
Victim 14.03.2023 22:37:44 UTC
Look I just need to tell my management something. Are you able to provide a more reasonable price or not? the fact you already published means the company needs to take calls from the media.
LockBit 3.0 14.03.2023 23:36:56 UTC
What was you doing last week? You just wasting my time. You see my price
Victim 15.03.2023 04:27:26 UTC
you are asking for a large amount and this requires high level of approvals. We cannot move so quickly. I know you want to get paid quickly but if I decided to ghost you we would not have been here.
LockBit 3.0 15.03.2023 11:59:52 UTC
today i will public your blog, tomorrow i will start to upload your data for public access.
Victim 15.03.2023 13:28:42 UTC
I just want to confirm for my management, you are not interested in discussing your demands? correct?
LockBit 3.0 15.03.2023 15:08:02 UTC
i'm not interested in 500k$
Victim 15.03.2023 15:09:39 UTC
Is there a middle ground we can reach agreement on?
LockBit 3.0 15.03.2023 17:17:44 UTC
i dont want to answer questions, a want to see real offer. show me what you got
LockBit 3.0 15.03.2023 17:18:47 UTC
btw discount possible just if you pay on this week
Victim 15.03.2023 17:59:44 UTC
I understand, but I am sure you know how boards work, they want to approve a specific amount not some imaginary number. If you can advise what is a realistic number for a deal I am happy to present it.
LockBit 3.0 15.03.2023 18:13:27 UTC
8m $ is very realistic number for your company. i can give you discount 10% just if you pay this week. This is a good result of your work.
LockBit 3.0 16.03.2023 12:34:26 UTC
any update?
Victim 16.03.2023 16:04:40 UTC
I hope to hear from management very soon
LockBit 3.0 16.03.2023 16:33:05 UTC
hurry up
Victim 16.03.2023 19:13:20 UTC
Just completed a board discussion and the board is willing to settle this at 1.5m $ this is a big increase as you can see from our former amount but we hope you can see how serious we are to address the situation in an amicable fashion.
LockBit 3.0 16.03.2023 21:15:44 UTC
I can't access that amount
LockBit 3.0 16.03.2023 22:28:05 UTC
I see you're not impressed an effect of our blog post. Tomorrow the blog will be available again with. I don't care if it will not increase the offer but at least next time the recovery company will make things faster
Victim 17.03.2023 00:07:34 UTC
I am awaiting our management executive to confirm what is possible in terms of an amount for this case. You have to understand we are looking at data and cost of the incident to us. I will likely respond to you tomorrow. If you publish us again, it will have no more impact that your publication already did.
Victim 17.03.2023 04:05:27 UTC
We scheduled an afternoon board meeting as I am at my limit from a $ perspective. I will be in touch tomorrow afternoon/evening time frame.
LockBit 3.0 17.03.2023 17:54:51 UTC
so what?
Victim 17.03.2023 21:45:01 UTC
we are just finishing the meeting where the Board approved 3.0m $ and we see you posted our company again
LockBit 3.0 17.03.2023 21:52:34 UTC
are you ready to pay right now?
Victim 18.03.2023 00:08:17 UTC
Absolutely not. You posted us when I explained to you that we might increase our number. Remove the fucking post and I will try to save this on Monday but I am literally not promising anything. It is your choice.
LockBit 3.0 18.03.2023 00:23:39 UTC
first of all it's your words
LockBit 3.0 18.03.2023 00:23:46 UTC
"If you publish us again, it will have no more impact that your publication already did. "
LockBit 3.0 18.03.2023 00:25:08 UTC
second thing ufter using "fucking" your price is 5 million and it's your last price
LockBit 3.0 18.03.2023 00:28:18 UTC
I warned you several times, you thing that you can do what you want. probably no.
Victim 18.03.2023 01:21:42 UTC
you have the power. I told you what I said, I stand behind my statements. Your call.
LockBit 3.0 18.03.2023 11:24:12 UTC
you know the price, work on it.

Auteur/autrice

sdgadmin@tux.ovh