Ransomware negotiation(s) with  lockbit3



Avatar

[Chat started]

08.05.2023 03:34:30 UTC
Avatar

give me proof that you have comptomised us

08.05.2023 03:35:18 UTC

Hello.

08.05.2023 03:41:23 UTC
Avatar

We have about a terabyte and a half of your customer data

08.05.2023 03:42:40 UTC
Avatar
Avatar

ok how do we know that

08.05.2023 03:43:31 UTC

We can provide you file tree of stolen data

08.05.2023 03:44:14 UTC
Avatar
Avatar

let me see that

08.05.2023 03:44:38 UTC

You choose any two files of no more than a megabyte from the ones we stole and we can give them to you.

08.05.2023 03:45:00 UTC
Avatar
Avatar

you dont even know who's data you have stolen

08.05.2023 03:49:03 UTC
Avatar

show me that customer data you think you hv stole it

08.05.2023 03:50:43 UTC

File: [banksbitree.zip]

08.05.2023 03:52:55 UTC
Avatar

File: [proofs.zip]

08.05.2023 03:56:54 UTC
Avatar

BSMCOLLECTION Database (check your last backup from it) - a lot of customers data Some interesting from SPM-HESTU - a lot of customers data Medalion Some from Swift

08.05.2023 03:57:35 UTC
Avatar
Avatar

what price do you want?

13.05.2023 02:18:44 UTC

It depends on your greed, what can the largest bank in the country with multibillion-dollar revenues offer me for a quality pentest of your corporate network?

13.05.2023 09:13:13 UTC
Avatar
Avatar

It looks like you want big things, if that's the case, we'll confirm with other things, do you have a stolen username, password, like a pin or something else?

13.05.2023 09:56:28 UTC

You will find out about this after all the stolen data is published, in case you do not want to pay for a quality pentest of your corporate network.

13.05.2023 13:29:28 UTC
Avatar
Avatar

ok, can I buy for 100,000 USD? you like?

13.05.2023 14:27:05 UTC

20 000 000 $

13.05.2023 15:31:53 UTC
Avatar
Avatar

why is it so big, at least give us 1 sample username and password you stole we will take it at 10,000,000 dollars

13.05.2023 15:55:53 UTC

Your competitors and scammers will be looking for logins and passwords in the databases after the data is published.

13.05.2023 16:09:30 UTC
Avatar
Avatar

So is there anyone else who wants to buy it?

13.05.2023 16:10:14 UTC

We will not disclose this information.

13.05.2023 16:11:55 UTC
Avatar

An example of a login to the Internet banking.

13.05.2023 21:31:41 UTC
Avatar

202194016611 20Darkstar94!

13.05.2023 21:31:50 UTC
Avatar

Would you be more comfortable paying in bitcoin or monero?

13.05.2023 21:32:16 UTC
Avatar

Be a man, promise - do it.

15.05.2023 16:37:37 UTC
Avatar

This information is provided by Valéry Marchive & Julien Mousqueton