Negotiation chat with different groups

Akira

Avaddon

Avos

Babuk

BlackBasta

BlackMatter

Cloak

Conti

Darkside

Dragonforce

  • 058f4b92-ae99-45c7-bf35-5d2d6754b3de – 19 message(s) voir chat
  • 05f724f8-906e-4739-8177-815852cc2c3f – 29 message(s) voir chat
  • 29BBE03074FDBB8D – 10 message(s) voir chat
  • 7A313D13EB6B4E58 – 32 message(s) voir chat
  • 89716D29D2CEE36F – 23 message(s) voir chat
  • AB0404E049514B50 – 28 message(s) voir chat
  • BD004D632D87DBA0 – 25 message(s) voir chat
  • C2A3C7249797F5ED – 66 message(s) voir chat
  • C42CDF65B97D0E92 – 30 message(s) voir chat
  • C7CD31EAAF9DE9AC – 71 message(s) voir chat
  • C8479B30418B331E – 4 message(s) voir chat
  • D6DDD9B26D7D41DB – 14 message(s) voir chat
  • FDA8141B6DD392E3 – 10 message(s) voir chat
  • b8e14e1a-548f-4eec-bd6e-a590126e57c9 – 14 message(s) voir chat

Hive

Hunters International

Mallox

NoEscape

Pear

Qilin

  • 20240429 – 3 message(s) voir chat
  • 20250203 - from @RakeshKrish12 – 36 message(s) voir chat

REvil

RansomHub

Ranzy

RunSomeWares

fog

lockbit3.0

mount-locker

trinity

Victim 22.07.2022 18:14:05 UTC
[Chat started]

Victim 22.07.2022 18:27:56 UTC
Hello

Victim 22.07.2022 18:29:27 UTC
Hello, our files have been encrypted. We would like to discuss getting a decryption key

LockBit 3.0 22.07.2022 18:35:56 UTC
Hello

LockBit 3.0 22.07.2022 18:38:56 UTC
To decrypt your files and prevent us of destructive actions against your company you will need to pay $200 000 . We also have all your files.

Victim 22.07.2022 18:43:16 UTC
I will inform the management

LockBit 3.0 22.07.2022 18:44:14 UTC
ok

Victim 22.07.2022 18:46:01 UTC
Domain controller password does not work now. Did you change that password

LockBit 3.0 22.07.2022 19:20:03 UTC
Yes. We will return all of the information after the payment.

LockBit 3.0 22.07.2022 19:21:04 UTC
Also, you will receive recommendations on how to improve the security of your network.

Victim 22.07.2022 22:12:40 UTC
Management received a direct call to cell phone. Caller stated he was you. Stated ransom was $500K. Management spooked. Can't pay that much. Business is a small business. Is your group fragmented or something? Management doesn't know what to believe now.

LockBit 3.0 22.07.2022 22:25:37 UTC
How did the caller introduce himself? When was the call? How did the caller suggest to contact?

Victim 22.07.2022 22:40:04 UTC
I was not part of the entire call and don't know how call introduced self. The call was around 4PM ET. He never suggested contact because management would not agree to any price since numbers so high. Advised management that this venue showed only proof of decrypt.

Victim 22.07.2022 22:40:52 UTC
Management cannot pay anywhere close to 6 figures. Just not there to pay and have no insurance.

LockBit 3.0 22.07.2022 22:49:05 UTC
I will clarify all the information and answer you

LockBit 3.0 23.07.2022 16:58:14 UTC
The price for you is 200,000$. There will not be any extra payments or charges, that's the final sum. We always follow the said conditions, as it's crucial for our reputation. After you have paid the sum, we will provide you with a decryptor for all of your files and also delete the downloaded files from your network on our servers. You will also be provided with a full report on vulnerabilities within your network and given recommendations on increasing the safety of it. We guarantee that all the steps above will be fulfilled by us.

LockBit 3.0 26.07.2022 14:34:22 UTC
Have you made a decision?

Auteur/autrice

sdgadmin@tux.ovh