Ransomware negotiation(s) with  lockbit3



Avatar

[Chat started]

12.09.2022 09:54:30 UTC
Avatar

Hallo, I would like to decrypt a file

12.09.2022 10:03:45 UTC
Avatar

We would like to get back our files etc. Our personal ID is 0384F759C4124EF970C8201B0AE06EBD. What are you're instructions to get our data back ?

12.09.2022 10:08:50 UTC

Hello, the price for your whole network is 100k USD.

12.09.2022 10:57:55 UTC
Avatar

We have steal, malbox.edb and all your users files, If you don t pay we will public them, take in consideration we don t have what to do with them..

12.09.2022 11:02:05 UTC
Avatar

The file you tried to decrypted is too big, try with a smaller file. I recomand a .jpg

12.09.2022 12:22:28 UTC
Avatar
Avatar

Hello, I consulted this number and this is not a realistic offer. We have backup and are able to restore, this is going to take some time and money. We are willing to pay 5k.

12.09.2022 12:44:02 UTC

If you have backup, why are u here? I deleted ur nas myself, ur altaro saved locally not cloud

12.09.2022 12:45:31 UTC
Avatar
Avatar

We have older backup files on external devices

12.09.2022 12:46:06 UTC

Come with a better offer than 5k

12.09.2022 12:46:54 UTC
Avatar
Avatar

So we are here because it's going to take time to restore those and enter the missing data

12.09.2022 12:46:55 UTC

Come with a better offer. 5k i will not accept it.

12.09.2022 12:48:22 UTC
Avatar
Avatar

I have to consult but I think they won't accept anything higher

12.09.2022 12:49:21 UTC

You are from the it company ?

12.09.2022 12:49:43 UTC
Avatar

They hired you to speak with us? or what ?

12.09.2022 12:52:43 UTC
Avatar
Avatar

yes we are

12.09.2022 12:53:30 UTC
Avatar

I consulted with the customer and they can pay 6k, this is maximum, they cant pay more.

12.09.2022 12:56:04 UTC

As we said, no midleman.. because in the past they fuckedup our negotians.

12.09.2022 12:57:19 UTC
Avatar

6 k not gonna happen.

12.09.2022 12:58:12 UTC
Avatar
Avatar

give us a normal number than

12.09.2022 12:59:20 UTC

Normal ? 95k usd

12.09.2022 13:00:19 UTC
Avatar
Avatar

Final offer: 10k or we will begin restoring the backup that is offsite. You can respond till 15:30 CEST

12.09.2022 13:05:03 UTC

The lowest we can go, 60k, have a good day.

12.09.2022 13:08:03 UTC
Avatar
Avatar

good luck men

12.09.2022 13:09:46 UTC

ty

12.09.2022 13:11:35 UTC
Avatar

We accept 15k euro! last and final price.

12.09.2022 18:43:13 UTC
Avatar

10k"

14.09.2022 11:10:54 UTC
Avatar

This information is provided by Valéry Marchive & Julien Mousqueton