Negotiation chat with different groups

Akira

Avaddon

Avos

Babuk

BlackBasta

BlackMatter

Cloak

Conti

Darkside

Dragonforce

  • 058f4b92-ae99-45c7-bf35-5d2d6754b3de – 19 message(s) voir chat
  • 05f724f8-906e-4739-8177-815852cc2c3f – 29 message(s) voir chat
  • 29BBE03074FDBB8D – 10 message(s) voir chat
  • 7A313D13EB6B4E58 – 32 message(s) voir chat
  • 89716D29D2CEE36F – 23 message(s) voir chat
  • AB0404E049514B50 – 28 message(s) voir chat
  • BD004D632D87DBA0 – 25 message(s) voir chat
  • C2A3C7249797F5ED – 66 message(s) voir chat
  • C42CDF65B97D0E92 – 30 message(s) voir chat
  • C7CD31EAAF9DE9AC – 71 message(s) voir chat
  • C8479B30418B331E – 4 message(s) voir chat
  • D6DDD9B26D7D41DB – 14 message(s) voir chat
  • FDA8141B6DD392E3 – 10 message(s) voir chat
  • b8e14e1a-548f-4eec-bd6e-a590126e57c9 – 14 message(s) voir chat

Hive

Hunters International

Mallox

NoEscape

Pear

Qilin

  • 20240429 – 3 message(s) voir chat
  • 20250203 - from @RakeshKrish12 – 36 message(s) voir chat

REvil

RansomHub

Ranzy

RunSomeWares

fog

lockbit3.0

mount-locker

trinity

Victim 25.01.2023 09:57:20 UTC
[Chat started]

Victim 25.01.2023 10:02:39 UTC
Good morning, you encrypted some of our machines.

LockBit 3.0 25.01.2023 11:52:59 UTC
Hello, you pay - we give you decryptor.

Victim 25.01.2023 11:53:24 UTC
What about our data?

LockBit 3.0 25.01.2023 12:07:39 UTC
after payment you will receive a decryptor and all copies of the data will be deleted from our servers

Victim 25.01.2023 13:04:45 UTC
what did you steal? and what amount of money are you looking for?

LockBit 3.0 25.01.2023 13:14:13 UTC
we copy 30Gb data. file listing only after payment. Price for yoour company is 400k USD in Bitcoin or 380k USD in Monero

Victim 25.01.2023 13:15:02 UTC
Why would we believe you without any proof? At first you only mentioned teh decryptor.

LockBit 3.0 25.01.2023 13:21:50 UTC
You think I didn't take anything from your network? Why do you need proof if your files are encrypted? Obviously, I took the files when I was a guest at your place.

LockBit 3.0 25.01.2023 13:22:30 UTC
File: [1.png]

LockBit 3.0 25.01.2023 13:22:36 UTC
File: [2.png]

LockBit 3.0 25.01.2023 13:22:49 UTC
File: [3.png]

LockBit 3.0 25.01.2023 13:22:55 UTC
File: [4.png]

Victim 26.01.2023 15:37:32 UTC
Ok we checked with the people who know that data. That is not critical. And I saw, that you deleted the decryptor, so you can't decrypt anymore?

LockBit 3.0 26.01.2023 16:23:28 UTC
Decryptor will delete at - 2023-03-16 22:04:06

LockBit 3.0 26.01.2023 20:20:04 UTC
Decryptor not deleted.

Victim 27.01.2023 16:05:53 UTC
Now it shows correctly. Thanks. So to be frank. The encryption is not really an issue. The lost data might be. However, as I said, the data above is not critical. Management will need something better.

LockBit 3.0 27.01.2023 17:27:36 UTC
Ok, we will be prepare your database for public

LockBit 3.0 29.01.2023 13:49:33 UTC
your data is huge. the screenshots above are examples of random files. but what will be critical for you - may be in the total volume of data. Are we going to negotiate further?

LockBit 3.0 29.01.2023 13:50:26 UTC
http://lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion/post/pBI4qxYrgfRwnYPN63d679e4254be

Auteur/autrice

sdgadmin@tux.ovh