Ransomware negotiation(s) with  lockbit3



Avatar

[Chat started]

23.11.2022 19:43:52 UTC
Avatar

Good day. I need assistance with decryption of files. Can you confirm the process please?

23.11.2022 19:45:33 UTC
Avatar

Are you there?

23.11.2022 19:56:44 UTC

hi

23.11.2022 20:07:12 UTC
Avatar

to decrypt the data and avoid publication you need to pay us. we haven't published your name on our blog yet

23.11.2022 20:07:37 UTC
Avatar
Avatar

what is the fee for the decryption ?

23.11.2022 20:07:59 UTC

120k$

23.11.2022 20:09:21 UTC
Avatar

we will soon send you a tree of stolen data

23.11.2022 20:09:51 UTC
Avatar
Avatar

USD?

23.11.2022 20:09:54 UTC

yes

23.11.2022 20:10:02 UTC
Avatar
Avatar

USD?

23.11.2022 20:10:10 UTC

yes!

23.11.2022 20:10:27 UTC
Avatar

we stolen 85gb

23.11.2022 20:10:44 UTC
Avatar
Avatar

Are you willing to drop the price of 120k?

23.11.2022 20:10:45 UTC

no

23.11.2022 20:11:06 UTC
Avatar
Avatar

can you send me the tree of stolen data so that I can confirm this data is ours?

23.11.2022 20:11:41 UTC
Avatar

Also, how doI get the funding to you

23.11.2022 20:12:13 UTC

Yes, we'll send it soon.

23.11.2022 20:12:36 UTC
Avatar
Avatar

You are sending in the chat window or to an email address?

23.11.2022 20:12:57 UTC

I'll send you a link to our file sharing service

23.11.2022 20:14:38 UTC
Avatar
Avatar

ok

23.11.2022 20:14:53 UTC

http://lockbitfile2tcudkcqqt2ve6btssyvqwlizbpv5vz337lslmhff2uad.onion/r/_2oTnkjYde#8woUZkWE9Q5YsQ8jBLzyzMxBNpKPmDe2IU8g8eVSM4E=

23.11.2022 20:23:15 UTC
Avatar
Avatar

I have to get the other personal id as these are not the files we were expecting

23.11.2022 20:32:12 UTC
Avatar

There is another machine from this breach that I would like the data for. I need a moment to get that personal ID file

23.11.2022 20:32:58 UTC

If you don't pay, the files from the tree will be published. we don't care how you feel about them

23.11.2022 20:37:01 UTC
Avatar

This information is provided by Valéry Marchive & Julien Mousqueton