Chat

Negotiation chat with different groups

Akira

Avaddon

Avos

Babuk

BlackBasta

BlackMatter

Cloak

Conti

Darkside

Dragonforce

  • 058f4b92-ae99-45c7-bf35-5d2d6754b3de – 19 message(s) voir chat
  • 05f724f8-906e-4739-8177-815852cc2c3f – 29 message(s) voir chat
  • 29BBE03074FDBB8D – 10 message(s) voir chat
  • 7A313D13EB6B4E58 – 32 message(s) voir chat
  • 89716D29D2CEE36F – 23 message(s) voir chat
  • AB0404E049514B50 – 28 message(s) voir chat
  • BD004D632D87DBA0 – 25 message(s) voir chat
  • C2A3C7249797F5ED – 66 message(s) voir chat
  • C42CDF65B97D0E92 – 30 message(s) voir chat
  • C7CD31EAAF9DE9AC – 71 message(s) voir chat
  • C8479B30418B331E – 4 message(s) voir chat
  • D6DDD9B26D7D41DB – 14 message(s) voir chat
  • FDA8141B6DD392E3 – 10 message(s) voir chat
  • b8e14e1a-548f-4eec-bd6e-a590126e57c9 – 14 message(s) voir chat

Hive

Hunters International

Mallox

NoEscape

Pear

Qilin

  • 20240429 – 3 message(s) voir chat
  • 20250203 - from @RakeshKrish12 – 36 message(s) voir chat

REvil

RansomHub

Ranzy

RunSomeWares

fog

lockbit3.0

mount-locker

trinity

Victim 29.06.2022 18:55:36 UTC
[Chat started]
Victim 29.06.2022 18:57:50 UTC
Hello we are writing you as you ask in your note. How do we get our files back?
LockBit 3.0 29.06.2022 18:58:06 UTC
Hello. Please tell us your company name and confirm you are an official representative of the company.
Victim 29.06.2022 18:58:58 UTC
We are Wabtech, I am IT mgr with firm. Thank you.
LockBit 3.0 29.06.2022 18:59:06 UTC
You must pay us to get your files back.
Victim 29.06.2022 18:59:59 UTC
How much are you asking for?
LockBit 3.0 29.06.2022 19:00:10 UTC
$25 million for universal decryptor and destruction of stolen files.
Victim 30.06.2022 12:57:28 UTC
Hello, we moved to here as you asked.
Victim 30.06.2022 12:58:22 UTC
You mentioned you took out data, we need to understand that better. Please show us what you have taken so I can take this to the bosses. Thank you.
LockBit 3.0 30.06.2022 15:09:56 UTC
https://temp.sh/ApbPz/wabtec_full.7z
LockBit 3.0 30.06.2022 15:10:03 UTC
password = 5446731864718376751313472162
Victim 30.06.2022 16:20:41 UTC
Thank you for this. I will send this to our bosses for review.
Victim 01.07.2022 17:53:31 UTC
Our team and bosses are reviewing your large list. How much data is that? Also, would you kindly let us pick some files our of your list to ask for so we know you do indded have our data? Thank you.
LockBit 3.0 01.07.2022 19:47:51 UTC
About 2 TB. Yes.
Victim 02.07.2022 20:06:46 UTC
Hello, can we please receive these files back from you?
Victim 02.07.2022 20:07:00 UTC
F:\wabtec\files\WCSSRV0453_Commercial_Functions\Commercial Functions\Marketing\Marketing Effectiveness\Training Conferences\What a Declining Business Media Means to CEOs.pdf F:\wabtec\files\CommercialKnowledgePortal\Commercial Knowledge Portal\Competitor Intelligence\CI at Tradeshows\2010 InnoTrans\InnoTrans 2010 Photos\Voith\Gravita Switcher\DSC01672.jpg F:\wabtec\files\CRDSRV0008_Documentation_and_Manuals\Documentation and Manuals\Vishay Strain Gauge Manuals\Vishay Micro Measurements\Vishay M-Line Accessories.pdf F:\wabtec\files\wcssrv036_RCV_Public_Drive\RCV_Public_Drive\SAFETY\Carson\Incident -Injury Forms\WGS SAFETY ALERT NOTICE TEMPLATE.docx F:\wabtec\files\LPZSRV0014_Technologie\Technologie\ToPs_Daten\Dokumente\LASER\DATEN\5185766_1.pdf F:\wabtec\files\VCISRV0028_Project_Engineering\Project Engineering\Engineering Administration\Policies, Procedures and Guidelines\Travel Policy\Wabtec Travel and Entertainment Policy - Final_2019-11-01.pdf F:\wabtec\files\WCTSRV0018\g\PLM\WTDSRV0014\projects\DenverP3_CP\1-56468_SLDPRT\D\whereused.pdmw F:\wabtec\files\WCMSRV0006_Pre-stagedData\Pre-stagedData\Completed Projects\QJHO01001-JohnHolland-Certification of Points\E - Engineering\E2 - Deliverables\CMC - Turnout Certification\Checksheets\03.05.2018 F:\wabtec\files\Departments_hr\HR\BENEFITS\WELLNESS 2016\Wabtec Online Store Flyer.docx F:\wabtec\Manufacturing\CAR projects\Wabtec QIP Assessment Info Request.xlsx F:\wabtec\files\WTDSRV0030_Materials\Materials\Packing Slips OSWH\2022\May 2022\5-23-22.pdf F:\wabtec\files\Finance1\turbo_LP\fixed assets\TNX\Tooling\50311 Balancing tool.pdf F:\wabtec\files\BSLSRV0001_Customer_Files\Customer Files\1. Customer Information\Siemens Mobility\2021\Purchase Orders\PO 4509763478, SO-0014037, 49364-14, 2021-12-14\Buy America Certificate_Rev.1 (PO 4509763478) - Signed Dec. 22, 2021.pdf F:\wabtec\files\WBJSRV0002_Accounting\Accounting\ABNER\ateixeira\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\SH5IQIL6\597D3FCACB12FBFAC9CEBBAFF93D[1].jpg
Victim 02.07.2022 20:07:17 UTC
14 total please.
LockBit 3.0 03.07.2022 04:20:47 UTC
https://temp.sh/mSrti/files.7z
LockBit 3.0 03.07.2022 04:20:57 UTC
password = 5446731864718376751313472162
Victim 03.07.2022 15:43:13 UTC
Thank you for this. Sending to the bosses for review, be back in touch.
Victim 04.07.2022 18:49:32 UTC
Hello, can you please decrypt these files so we know your key works per your message on this site?
Victim 04.07.2022 18:49:59 UTC
File: [registry.xml.lockbit]
LockBit 3.0 04.07.2022 19:21:38 UTC
File: [registry.7z]
Victim 05.07.2022 19:32:11 UTC
Thank you. So if we were considering payment, would we get 1. Working decryptor tool 2. Our data back or deleted 3. Guarantee to not publish it or leak it on dark web 4. Tell us how you got into our network? Please let us know.
LockBit 3.0 05.07.2022 19:34:46 UTC
1 yes 2 yes 3 yes 4 no
Victim 06.07.2022 20:28:50 UTC
Ok, letting bosses know the above. We are still reviewing the data dump due to size, and will be talking to the bank to see how much funds we would be avle to come up with. Be back in touch.
Victim 08.07.2022 14:36:56 UTC
Hello, is this all of the data you have taken from us, in your file listing? Can you please let us know. Thank you.
LockBit 3.0 08.07.2022 16:07:24 UTC
Yes
Victim 09.07.2022 12:40:46 UTC
Ok, that is good for us to know. We will be trying to come up with as many funds as we can and are circling up with the bank when they open after the weekend. How do we get BTC? Thanks.
LockBit 3.0 09.07.2022 15:01:24 UTC
You can use crypto exchanges to get btc.
LockBit 3.0 12.07.2022 17:57:34 UTC
So? Weekend ended long time ago. Are you ready to pay?
Victim 12.07.2022 21:16:22 UTC
Hello we are engaged with the bank, the logistics are going to take a little bit of time. This is not something we are used to deal with. We need some more time please.
LockBit 3.0 13.07.2022 11:29:20 UTC
You must hurry up. We're not going to wait you forever. We'll have to raise the price by friday if we won't receive full payment by tomorrow evening.
Victim 14.07.2022 01:44:35 UTC
Hello our bosses and executive team are in contact with the bank about logistics and how much we can get, this is not something they normally do so the logistics are hard and take some time. We cannot make this happen by Friday, we are asking for more time, next week please. We are talking to you in good faith and thank you for your help so far.
LockBit 3.0 14.07.2022 07:24:03 UTC
You already have spent 3 weeks. It's more than enough to check your balance and obtain cryptocurrency. The price will be raised to 30M from tomorrow.
LockBit 3.0 22.07.2022 12:39:57 UTC
Hello. Another week passed. Should we wait for payment or we may proceed to the publication of your files?
LockBit 3.0 24.07.2022 16:17:29 UTC
Are you there?
LockBit 3.0 25.07.2022 11:01:05 UTC
???
LockBit 3.0 28.07.2022 10:04:33 UTC
wtf?

Auteur/autrice

sdgadmin@tux.ovh