Chat

Negotiation chat with different groups

Akira

Avaddon

Avos

Babuk

BlackBasta

BlackMatter

Cloak

Conti

Darkside

Dragonforce

  • 058f4b92-ae99-45c7-bf35-5d2d6754b3de – 19 message(s) voir chat
  • 05f724f8-906e-4739-8177-815852cc2c3f – 29 message(s) voir chat
  • 29BBE03074FDBB8D – 10 message(s) voir chat
  • 7A313D13EB6B4E58 – 32 message(s) voir chat
  • 89716D29D2CEE36F – 23 message(s) voir chat
  • AB0404E049514B50 – 28 message(s) voir chat
  • BD004D632D87DBA0 – 25 message(s) voir chat
  • C2A3C7249797F5ED – 66 message(s) voir chat
  • C42CDF65B97D0E92 – 30 message(s) voir chat
  • C7CD31EAAF9DE9AC – 71 message(s) voir chat
  • C8479B30418B331E – 4 message(s) voir chat
  • D6DDD9B26D7D41DB – 14 message(s) voir chat
  • FDA8141B6DD392E3 – 10 message(s) voir chat
  • b8e14e1a-548f-4eec-bd6e-a590126e57c9 – 14 message(s) voir chat

Hive

Hunters International

Mallox

NoEscape

Pear

Qilin

  • 20240429 – 3 message(s) voir chat
  • 20250203 - from @RakeshKrish12 – 36 message(s) voir chat

REvil

RansomHub

Ranzy

RunSomeWares

fog

lockbit3.0

mount-locker

trinity

Victim 25.01.2023 01:27:51 UTC
[Chat started]
Victim 25.01.2023 01:31:21 UTC
I found your note on my machines what do I do now?
LockBit 3.0 25.01.2023 06:05:47 UTC
hi
LockBit 3.0 25.01.2023 06:05:47 UTC
do you need decrypt?
LockBit 3.0 25.01.2023 06:07:18 UTC
we have attacked your corporate network all your 4 TRUST domains
LockBit 3.0 25.01.2023 06:07:54 UTC
and also all your servers are encrypted inside ESXI
LockBit 3.0 25.01.2023 06:09:10 UTC
we also stole 250 GB of your data from all 4 of your networks, if our negotiations are unsuccessful, you will face high fines for GDRP
LockBit 3.0 25.01.2023 06:12:24 UTC
everything is encrypted inside the virtualization of your servers, too, in order to restore all servers, this can be done with our decryptor
Victim 25.01.2023 14:55:22 UTC
How much is it going to cost us?
LockBit 3.0 25.01.2023 15:17:12 UTC
price for decrypt, delete your data on our servers,conducting an audit of your cybersecurity company and how we infiltrated you will cost = 4 500 000 USD in BTC
LockBit 3.0 25.01.2023 15:24:04 UTC
are you interested in the list of files that we stole from you?
Victim 25.01.2023 15:24:53 UTC
I am interested. Can you provide the list of files taken?
LockBit 3.0 25.01.2023 15:26:04 UTC
10 min
LockBit 3.0 25.01.2023 15:35:07 UTC
http://lockbitfile2tcudkcqqt2ve6btssyvqwlizbpv5vz337lslmhff2uad.onion/r/2oqRhBeCMe#lNxFt9KkQR6blBzgFQ0GUUxKSbQo6SQJf8xN8yYHqps=
LockBit 3.0 25.01.2023 15:35:20 UTC
listing here
Victim 26.01.2023 14:13:30 UTC
I downloaded the list. If I give you a few file names can you provide those files to show you still have them?
LockBit 3.0 26.01.2023 14:14:05 UTC
yes give me name files
Victim 26.01.2023 20:38:42 UTC
Can you provide "cable specifications sheets-ctsp-sm8.pdf" and "tbs-sysmap 8 12 2010.pdf"?
LockBit 3.0 26.01.2023 20:41:59 UTC
yes
LockBit 3.0 26.01.2023 20:42:01 UTC
wait
LockBit 3.0 26.01.2023 20:51:58 UTC
File: [Cable Specification Sheets - CTSP-SM8.pdf]
LockBit 3.0 26.01.2023 20:52:56 UTC
File: [TBS-Sysmap 8 12 2010.pdf]
Victim 26.01.2023 21:13:11 UTC
The second file just sends me to another lockbit page and doesn't load anything?
LockBit 3.0 26.01.2023 21:20:14 UTC
now I'm moving through the file sharing service
LockBit 3.0 26.01.2023 21:27:41 UTC
http://lockbitfilzhrvt6eya2lvnp7te4iifzmwybendqclgujqbzu3k4gaid.onion/r/ra7EVq5naF#1VV81qZWUW7DRFlvRRQAjhWZJJiBp/Bsfxuc+90gRR4=
Victim 27.01.2023 23:01:59 UTC
Can i give you files to prove you can decrypt them?
LockBit 3.0 27.01.2023 23:09:06 UTC
Yes. You can make a test decryption by uploading the file to our portal.
LockBit 3.0 30.01.2023 19:03:54 UTC
I am notifying you that in a month your decryptor will be deleted forever automatically. and you won't be able to restore your systems.
Victim 30.01.2023 19:13:23 UTC
ok sorry had issues grabbing file. I am testing the decryption link on the chat.
LockBit 3.0 30.01.2023 19:18:56 UTC
ok
LockBit 3.0 30.01.2023 20:11:02 UTC
you can take any small file from your PC and do the test yourself
LockBit 3.0 31.01.2023 17:56:55 UTC
so that you do not delay the negotiations and there is no action from you, then within 48 hours we will publish your company on our leaks website
Victim 31.01.2023 20:06:45 UTC
I have the file and testing today. I did find something odd though and wanted to get confirmation from you.
Victim 31.01.2023 20:07:26 UTC
We found another note on one of our servers claiming to be lockbit2 and has a completely different link. Do I have to go to that link to?
LockBit 3.0 31.01.2023 20:08:16 UTC
we have encrypted you with several types of our software
LockBit 3.0 31.01.2023 20:08:59 UTC
lockbit 2.0 (red), lockbit black, lockbit esxi version
Victim 31.01.2023 20:09:36 UTC
Is the same decryptor used or will we get multiple decryptors?
LockBit 3.0 31.01.2023 20:10:48 UTC
get your own decriptors for each version, they are convenient for us and you will not have any problems
LockBit 3.0 31.01.2023 20:11:45 UTC
you can test from the version you found to make a test
Victim 31.01.2023 20:13:24 UTC
Ok, i grabbed a file that is too big anyways I need to grab a smaller file. I will grab a file from the lockbit 2.0 one.
LockBit 3.0 31.01.2023 20:14:51 UTC
yes good
LockBit 3.0 01.02.2023 14:17:36 UTC
any updates?
Victim 01.02.2023 14:35:31 UTC
I got the file and testing decryption soon.
Victim 01.02.2023 14:36:34 UTC
I received a message the file cannot be decrypted?
LockBit 3.0 01.02.2023 14:38:03 UTC
send me the file here
Victim 01.02.2023 14:38:12 UTC
File: [insink.txt.lockbit]
LockBit 3.0 01.02.2023 14:51:07 UTC
File: [insink.txt]
LockBit 3.0 01.02.2023 15:00:49 UTC
test is working! when will you make the payment?
LockBit 3.0 02.02.2023 15:39:59 UTC
any updates?
Victim 02.02.2023 17:11:11 UTC
$4.5 million is a lot of money.
LockBit 3.0 02.02.2023 17:15:18 UTC
the price is from your income of your all companies! you're not a small company
LockBit 3.0 03.02.2023 14:52:02 UTC
why are you delaying the negotiations? are you waiting for publicity about your companies? or until the time of the decrypt runs out and he retires?
Victim 03.02.2023 14:55:39 UTC
We are not delaying. I am willing to negotiate the price but $4.5 million is too much.
LockBit 3.0 03.02.2023 14:56:51 UTC
I am waiting for a serious offer from you closer to our price (I am ready to discuss a discount)
Victim 03.02.2023 14:57:24 UTC
What discount are you will to give?
LockBit 3.0 03.02.2023 14:58:09 UTC
30%
LockBit 3.0 03.02.2023 14:58:43 UTC
payment for 72 hours discount will be valid
LockBit 3.0 03.02.2023 15:23:43 UTC
will you have enough time?
LockBit 3.0 03.02.2023 21:19:42 UTC
have you discussed our offer with the boss?
LockBit 3.0 06.02.2023 12:40:27 UTC
any updates?
LockBit 3.0 06.02.2023 13:05:26 UTC
your time is running out soon (discount), as well as you will lose the chance to return everything and get big fines for GTRD
Victim 06.02.2023 18:43:56 UTC
Sorry was trying to access the page and it wouldn't load. So i tried the other links and it gave me a blank chat.
Victim 06.02.2023 18:44:43 UTC
I sent everything across, my boss needs more time he had to get a board meeting together. Even with the discount $3mil is a lot of money we can't get that together quickly
LockBit 3.0 06.02.2023 19:55:47 UTC
you can write to any chat to us
LockBit 3.0 06.02.2023 19:56:33 UTC
How much time do you need?
Victim 06.02.2023 20:20:25 UTC
Ok, I didn't know that. Thanks.
Victim 06.02.2023 20:21:11 UTC
We have the board meeting tomorrow afternoon. Could you give us another 48 hours. I would have a better understanding of the amount we can have together.
LockBit 3.0 06.02.2023 21:31:59 UTC
yes, we are making concessions to you on time!
Victim 06.02.2023 22:14:48 UTC
Thank you! I will keep you updated.
LockBit 3.0 07.02.2023 19:52:35 UTC
we wait you
LockBit 3.0 08.02.2023 15:34:09 UTC
how did the board of directors' negotiations go? the time you asked for will soon be over
Victim 08.02.2023 21:54:21 UTC
We are still here. The board is behind us it is more about collection of funds.
LockBit 3.0 08.02.2023 22:31:45 UTC
how much time do you need?
Victim 09.02.2023 14:07:25 UTC
I am not sure. Just a slow process. Our insurance only covered so much. We have to make up the difference. I will get a better time frame for you. Trying to figure it out ourselves
LockBit 3.0 09.02.2023 14:10:37 UTC
will we be able to fix the amount in bitcoins with you now? due to the high volatility of cryptocurrencies, it is better to fix immediately (for 48 hours)
Victim 09.02.2023 14:11:59 UTC
Sorry, I don't understand
LockBit 3.0 09.02.2023 14:13:15 UTC
you will transfer the amount in bitcoins, the amount equivalent to the one we agreed with you, the price of cryptocurrencies often changes and we need to fix the amount that you have to transfer to us
LockBit 3.0 09.02.2023 14:18:32 UTC
138.5 BTC you need a transaction to us WALLETS
LockBit 3.0 09.02.2023 14:19:07 UTC
do we fix this amount for 48 hours?
Victim 09.02.2023 14:25:03 UTC
I understand. So instead of usd comparison we would do 138.5 btc. We are working to get that amount of cash to purchase the btc. insurance only covered a small percentage so we have to come up with the rest.
LockBit 3.0 09.02.2023 14:31:23 UTC
hurry up, we made concessions to you and gave you a discount from our first price
LockBit 3.0 10.02.2023 15:58:24 UTC
do you have time in our time (48 hours)?
LockBit 3.0 10.02.2023 20:51:31 UTC
you here?
Victim 10.02.2023 20:52:08 UTC
I am still hear just trying to work on getting it together. It's a lot of money to pull together and it is taking time.
LockBit 3.0 10.02.2023 21:11:50 UTC
how much time do you need? we will issue a post about you in the near future! don't try to leave for the weekend!
Victim 11.02.2023 21:07:59 UTC
didn't leave its not easy to get 3 mil when insurance doesn't help. We are working on the loans but it will be at least Monday.
LockBit 3.0 11.02.2023 21:14:50 UTC
ok we wait you
LockBit 3.0 13.02.2023 16:32:12 UTC
any updates?
LockBit 3.0 13.02.2023 21:29:38 UTC
what news do you have?
LockBit 3.0 14.02.2023 17:55:50 UTC
ok, since you don't tell us anything, it was decided to create a blog with your companies in our blog in 3-4 hours. we will publish documents and correspondence with you (with a payment timer)
LockBit 3.0 14.02.2023 19:44:38 UTC
File: [lyonhealy.com-full-listing.rar]
LockBit 3.0 14.02.2023 20:45:27 UTC
I'm sorry I messed up the chat, it's not for you!
LockBit 3.0 14.02.2023 20:46:09 UTC
we have issued a block, with a timer and proof that we were in your network! 48 hours to get in touch
LockBit 3.0 15.02.2023 12:11:12 UTC
http://lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion/post/np4U8qdHNfB9QQT363ebf44bea050
LockBit 3.0 15.02.2023 14:36:40 UTC
the private link is valid for 48 hours, then you will be in our blog, will we delay the payment?
LockBit 3.0 16.02.2023 18:42:21 UTC
why are you here?
LockBit 3.0 16.02.2023 18:47:08 UTC
will you be silent as well? are we publishing all your data?
LockBit 3.0 16.02.2023 18:47:24 UTC
we will also publish this correspondence with you
LockBit 3.0 16.02.2023 20:01:02 UTC
attached our chat! it will be at the expiration of the timer!

Auteur/autrice

sdgadmin@tux.ovh