Ransomware negotiation(s) with  lockbit3



Avatar

[Chat started]

23.01.2023 15:21:44 UTC
Avatar

You encrypted our network, what are you asking for to decrypt?

23.01.2023 15:23:00 UTC

And we also downloaded data from your network

23.01.2023 15:52:31 UTC
Avatar
Avatar

ok, so what are you asking for?

23.01.2023 16:57:24 UTC

500000$

23.01.2023 17:20:48 UTC
Avatar
Avatar

Can you provide us a list of the files you took to prove you actually have our data?

23.01.2023 18:25:57 UTC

ok wait

23.01.2023 18:36:11 UTC
Avatar

File: [GUAR.txt]

23.01.2023 19:37:34 UTC
Avatar

this is a small part tree of the stolen data . we will not send a full tree, so as not to violate the confidentiality of data. You can select multiple files from the list, we will send them to you, as proof. please note that the lines in square brackets are folders and not files

23.01.2023 19:38:43 UTC
Avatar
Avatar

I cannot get that file to download, can you give it to me from somewhere else, its timing out

23.01.2023 20:10:57 UTC

http://lockbitfile2tcudkcqqt2ve6btssyvqwlizbpv5vz337lslmhff2uad.onion/r/B7nw21zyp0#Vs4i8UYkOND+l9CJbdl41d7D63q4mqOqFKr5J51WnTc=

23.01.2023 20:17:51 UTC
Avatar
Avatar

ok thanks, I was able to download that one

23.01.2023 20:40:29 UTC

Have you checked out the files?

25.01.2023 05:43:24 UTC
Avatar
Avatar

we did but ther are only a few files in that list, we arent paying you anything for like 15 files, none of those files you showed us have any value to use. Please provide a full file listing

29.01.2023 18:21:26 UTC

ok

29.01.2023 18:31:25 UTC
Avatar

http://lockbitfile2tcudkcqqt2ve6btssyvqwlizbpv5vz337lslmhff2uad.onion/r/7euRu5oS8H#o4JXC3kNBGtz92nX2rD/dcr6+ugjn58jEq50mrdP2is=

29.01.2023 18:52:34 UTC
Avatar

ggjQNoHymP#y*5W!fqu(%%Z#2

29.01.2023 18:52:45 UTC
Avatar
Avatar

OK i will take this to my boss and see what he says

30.01.2023 13:46:25 UTC

OK

30.01.2023 13:58:23 UTC
Avatar

http://lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion/post/bDjEc78I3iPrVRdZ63dc58d7a5332

03.02.2023 00:44:28 UTC
Avatar
Avatar

So, we are still looking through the data and will get back to you in a couple of days

13.02.2023 18:05:51 UTC

In a few days your data will already be published. hurry up

13.02.2023 18:15:58 UTC
Avatar

When will you pay? Our patience is running out.

15.02.2023 12:14:53 UTC
Avatar
Avatar

you said we had until the 18th, we are still looking through the data. This not easy, its alot of data and all we have are file names to trace back to. We also are having trouble figuring out where the data came from to be able to look at it to determine what it is

15.02.2023 15:19:47 UTC
Avatar

this is no simple task

15.02.2023 15:20:12 UTC

you are doing the wrong thing. while you are doing nonsense, we will publish your data. this data was taken from your network, don't you know where and what data is stored on your network? this is very stupid, no one is doing what you are doing now, although we have taken millions of files from some companies

15.02.2023 16:38:56 UTC
Avatar

Hi, what's the news?

20.02.2023 13:29:04 UTC
Avatar

This information is provided by Valéry Marchive