Negotiation chat with different groups

Akira

Avaddon

Avos

Babuk

BlackBasta

BlackMatter

Cloak

Conti

Darkside

Dragonforce

  • 058f4b92-ae99-45c7-bf35-5d2d6754b3de – 19 message(s) voir chat
  • 05f724f8-906e-4739-8177-815852cc2c3f – 29 message(s) voir chat
  • 29BBE03074FDBB8D – 10 message(s) voir chat
  • 7A313D13EB6B4E58 – 32 message(s) voir chat
  • 89716D29D2CEE36F – 23 message(s) voir chat
  • AB0404E049514B50 – 28 message(s) voir chat
  • BD004D632D87DBA0 – 25 message(s) voir chat
  • C2A3C7249797F5ED – 66 message(s) voir chat
  • C42CDF65B97D0E92 – 30 message(s) voir chat
  • C7CD31EAAF9DE9AC – 71 message(s) voir chat
  • C8479B30418B331E – 4 message(s) voir chat
  • D6DDD9B26D7D41DB – 14 message(s) voir chat
  • FDA8141B6DD392E3 – 10 message(s) voir chat
  • b8e14e1a-548f-4eec-bd6e-a590126e57c9 – 14 message(s) voir chat

Hive

Hunters International

Mallox

NoEscape

Pear

Qilin

  • 20240429 – 3 message(s) voir chat
  • 20250203 - from @RakeshKrish12 – 36 message(s) voir chat

REvil

RansomHub

Ranzy

RunSomeWares

fog

lockbit3.0

mount-locker

trinity

Victim 27.01.2023 22:48:43 UTC
[Chat started]

LockBit 3.0 27.01.2023 22:49:52 UTC
hi. to decrypt the data and avoid publication you need to pay us. we haven't published your name on our blog yet

LockBit 3.0 27.01.2023 22:51:46 UTC
soon we will send you a tree of stolen data

Victim 27.01.2023 22:52:33 UTC
We found your telling us to come here. What is going on?

LockBit 3.0 27.01.2023 22:53:31 UTC
need to pay

LockBit 3.0 27.01.2023 22:54:42 UTC
http://lockbitfilzhrvt6eya2lvnp7te4iifzmwybendqclgujqbzu3k4gaid.onion/r/EmcJ0p6nJv#59UjkgcJ3APksKHGhDXjpNhhXTNkiMXxsVAGPmV7DOA=

Victim 28.01.2023 14:10:03 UTC
Thank you for the list. You said we need to pay, how much is that?

LockBit 3.0 28.01.2023 17:13:02 UTC
250000$

LockBit 3.0 28.01.2023 17:13:29 UTC
after payment, we will delete your data and provide a decryptor

Victim 29.01.2023 15:32:02 UTC
The list is with leadership for review. Is this the full list of all data taken?

LockBit 3.0 29.01.2023 15:35:40 UTC
yes

LockBit 3.0 30.01.2023 12:51:00 UTC
time to pay now

Victim 30.01.2023 14:12:26 UTC
Thank you for answering our questions. The leadership is reviewing the file list. No one was here over the weekend to get this done. Thank you for your patience.

LockBit 3.0 30.01.2023 14:14:21 UTC
OK

Victim 31.01.2023 15:09:59 UTC
the list is rather large! How much data in all did you take? It seems like alot!

LockBit 3.0 31.01.2023 17:16:04 UTC
all the data we took is on this list. when you pay, we will permanently delete it, and decrypt all your systems. the sooner you pay, the sooner it will be over and you will go back to your old life

Victim 01.02.2023 14:29:52 UTC
How do we know you have this data?

LockBit 3.0 01.02.2023 14:31:07 UTC
select some files from the tree, and we will send them

Victim 02.02.2023 13:49:01 UTC
OK. I will get with my leadership so they can choose what files to send.

LockBit 3.0 02.02.2023 14:20:41 UTC
hurry

Victim 03.02.2023 14:03:48 UTC
It's a long list. How much data is this?! We are hopeful to have the file names for you today or tomorrow morning.

LockBit 3.0 03.02.2023 14:06:39 UTC
ok

Victim 04.02.2023 13:34:47 UTC
Here is the list of files. NEWBRIDGE\2021 DMHAS license\licenses expansion\attachmentsCO - Parsippany.pdf \ NEWBRIDGE\HR\HR FORMS\Job Posting & Change FormsCHANGE OF STATUS Checklist 1.14.2020.docx \ NEWBRIDGE\HR\Job Announcements\2022Clinician Sparta-FT internal- 9.2.22.docx \ NEWBRIDGE\HR\HR FORMS\AccommodationsAccommodation REQUEST - Employee.docx \ NEWBRIDGE\2021 DMHAS license\continuation letter 1.26.21New Bridge Services Inc. 1-26-21 Continuation Letter (003).docx

LockBit 3.0 04.02.2023 15:01:28 UTC
ok, wait

LockBit 3.0 04.02.2023 15:32:14 UTC
http://lockbitfile2tcudkcqqt2ve6btssyvqwlizbpv5vz337lslmhff2uad.onion/r/tASrJy1eXM#9fOlbyIxE9fmiNNfZSDfX9PJ19RHcrlhxrJ9/99f7Bg=

LockBit 3.0 04.02.2023 15:32:31 UTC
password qtuhK4vpjG^fgM5ZRm$psn5mO

Victim 05.02.2023 14:13:15 UTC
Thank you for the files. I will give them to my leadership to review.

LockBit 3.0 05.02.2023 14:20:11 UTC
OK

Victim 07.02.2023 17:26:34 UTC
what is the next step in this process?

LockBit 3.0 07.02.2023 17:27:04 UTC
You pay

Victim 08.02.2023 14:17:21 UTC
How do we know you can fix our systems?

LockBit 3.0 08.02.2023 14:30:14 UTC
You have the opportunity to make test decryptions

LockBit 3.0 08.02.2023 14:31:15 UTC
After payment, we will provide you with a decryptor for the entire network, identify vulnerabilities and delete your data

Victim 09.02.2023 14:23:11 UTC
How do we make test decryptions?

LockBit 3.0 09.02.2023 14:27:49 UTC
There is a mention on your page, upload a small encrypted file

LockBit 3.0 09.02.2023 14:30:22 UTC
Please perform the actions faster.Otherwise, we will change the negotiator, and make mentions of your company on the blog.

LockBit 3.0 09.02.2023 15:54:14 UTC
I know that your goal is to drag out negotiations as long as possible so that we get nervous and agree to a smaller amount. by asking dumb questions you are playing against yourself and risk getting blogged. the test decryptor window is to the left of the chat.

Victim 09.02.2023 20:34:17 UTC
We are not trying to drag anything out. We have never dealt with anything like this before and I wanted to be sure. I will get my leadership team to give me some files.

LockBit 3.0 09.02.2023 20:43:48 UTC
you can say what you want, but we have a lot of experience and we understand everything. each machine has its own ID. for a successful transcription you need to take the file from your PC, with the ID you are logged into the chat! or go to the chat with the ID of the PC from which you take the file for test decryption

Victim 10.02.2023 17:10:11 UTC
The decrypted file that you sent us looks corrupt. Can we send you another one.

LockBit 3.0 10.02.2023 17:53:46 UTC
You can follow the link to the chat from any PC, take the file from this PC and use the test decryption

Victim 10.02.2023 19:44:28 UTC
We tried to do it on another PC. Your decrypt tester is not letting us upload any more files.

LockBit 3.0 10.02.2023 19:47:38 UTC
send the file, we will decrypt it for you. it should not be an important file, a picture or pdf

Victim 10.02.2023 19:52:30 UTC
https://anonfiles.com/6cC1jbX1y7/LcfUDlk_dB6AsqMxo

Victim 10.02.2023 19:53:06 UTC
We've tried to attach more files in the chat but it wont work. Does this work for you?

LockBit 3.0 10.02.2023 19:58:37 UTC
ok, wait

LockBit 3.0 11.02.2023 06:09:27 UTC
File: [inetres.adm.7z]

Victim 13.02.2023 14:49:12 UTC
Thank you for the file. I gave it to my leadership to review.

LockBit 3.0 13.02.2023 14:50:08 UTC
hurry up! very slow

Victim 14.02.2023 15:26:58 UTC
My leadership said that they don't know what that file was that you sent and they wanted to send another one.

LockBit 3.0 14.02.2023 15:32:25 UTC
You sent us the file yourself. Okay. Send us another file

LockBit 3.0 14.02.2023 19:23:08 UTC
You will do the test yourself faster if you perform the action correctly.Your visiting this chat room once a day does not contribute to the solution.

Victim 14.02.2023 20:22:30 UTC
Ok. We will find one and get back to you ASAP.

LockBit 3.0 14.02.2023 20:24:09 UTC
hurry up

Victim 15.02.2023 19:45:34 UTC
Since all the names were changed on our files it is taking a long time making the appropriate selection.

LockBit 3.0 15.02.2023 19:52:45 UTC
It takes a maximum of 1 hour.We are well aware that you are a representative of the recovery company and want to earn yourself.But in fact you are damaging your clients and yourself as a negotiator

LockBit 3.0 16.02.2023 09:27:18 UTC
http://lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion/post/MM3CQtzq3b0kInv663edf735a5c73

LockBit 3.0 16.02.2023 09:28:12 UTC
You have time to think about whether to drag out the negotiations further, or pay up and close the matter quietly.

Victim 16.02.2023 14:25:40 UTC
I'm not part of a recovery company. We are trying to work with you. Once you publish our data there will be no point in talking with you. I will check with my team on the status of getting more sample files.

LockBit 3.0 16.02.2023 14:29:44 UTC
don't care! you won't scare us with this. you've been taking too long, whoever you are. your name will be published first, and then only your details. if you don't pay, others will pay. our patience is over

Victim 16.02.2023 23:08:52 UTC
https://anonfiles.com/V2Ad7eYfy1/6X0RFtq_dB6AsqMxo

LockBit 3.0 16.02.2023 23:15:45 UTC
ok, wait

LockBit 3.0 18.02.2023 11:23:28 UTC
File: [Quality Management Coordinator 12.1.2017.pdf.7z]

LockBit 3.0 20.02.2023 12:26:55 UTC
when will you pay?!

Victim 21.02.2023 14:12:04 UTC
My leadership is going to meet to discuss this.

LockBit 3.0 21.02.2023 14:13:48 UTC
Hurry up

Victim 22.02.2023 16:04:18 UTC
The leadership meeting has been delayed due to something beyond our control. Thank you for your continued patience with us.

LockBit 3.0 22.02.2023 16:09:54 UTC
If you hope that by delaying negotiations you will lower the price, you are mistaken

Victim 24.02.2023 15:11:12 UTC
I am not trying to delay negotiations. I have not heard back from the board yet.

LockBit 3.0 27.02.2023 06:23:24 UTC
it's time to pay

Auteur/autrice

sdgadmin@tux.ovh