[Chat started]
06.07.2022 14:40:03 UTC
Hello.
06.07.2022 15:06:59 UTC
I think you understand what situation you are in, you have 2 options for the development of events, the first is that you start cooperating with us, pay the amount we need, get the decryptor program, we delete the files stolen from you. Either you keep silent and refuse us and we will start publishing the personal data of your customers, you have a fairly extensive database.
06.07.2022 15:19:04 UTC
little sample from your database export, https://oshi.at/iEbH
06.07.2022 16:28:51 UTC
Hi,
08.07.2022 13:04:19 UTC
i have 2 questions How much data in GB or TB have you exfiltrate? And how much would you like?
08.07.2022 13:05:22 UTC
did you get our example? let's say we have more than 1 TB, we will issue all the rest of the information after payment.
08.07.2022 15:37:18 UTC
the decryption price for you is 1.400.000$ after payment, we will immediately issue you a decryptor, a list of databases stolen from you, and also their removal.
08.07.2022 15:39:04 UTC
yes, could you send me a new sample please ?
08.07.2022 15:42:40 UTC
One sample is enough. Think about payment, you have little time, our patience is running out.
08.07.2022 15:44:56 UTC
in fact the files that i've downloaded is an old files, if you don't have a fresher sample, I wouldn't buy it at this price..
08.07.2022 15:54:47 UTC
We will gradually publish the files downloaded from you, first unloading from the databases, then the databases themselves, then the files. You have a price, think. This price also includes the decryptor program.
08.07.2022 16:00:39 UTC
Regarding the relevance of the data, it is strange that fresh dates are registered there, specifically in the first database that is ready for publication.
08.07.2022 16:02:07 UTC
don't want to negociate ?
08.07.2022 16:06:12 UTC
Wait for your offers.
08.07.2022 16:06:49 UTC
ok if you send me a new fresh sample ..
08.07.2022 16:08:44 UTC
You were given one example, that's enough, our task is to show you that we have something, and then think for yourself. I'm listening to your payment suggestions.
08.07.2022 16:12:36 UTC
ok then I will wait for your first publications ..
08.07.2022 16:18:51 UTC
Good.
08.07.2022 16:20:47 UTC
For the other targets, you've published different files and for us just this database extract. so i have a doubt if you have other files, i am ready to negotiate but if you have only this database, it will not be at this price..
08.07.2022 16:32:03 UTC
We are open to negotiations about the price, we have given everything you need. Files will not be opened until publication.
08.07.2022 16:37:04 UTC
Think about your reputation, you have money, pay and keep customer data safe.
08.07.2022 16:38:04 UTC
see you later .. i'm sorry i'm sick i have the covid
08.07.2022 16:42:51 UTC
Good luck. Get well.
08.07.2022 16:49:44 UTC
You still have 3 days to think about your clients and make us an offer based on the data we gave you.
08.07.2022 16:51:10 UTC
File: [4.png]
08.07.2022 18:39:16 UTC
One of the bases that is ready for publication on Monday.
08.07.2022 18:39:56 UTC
We offer you $100,000 for everything, knowing that it's the weekend and everything is complicated
09.07.2022 08:24:21 UTC
in addition it is the holidays in France
09.07.2022 08:26:40 UTC
I will go to your meeting and make an offer of one day, 600.000 for everything, and the issue with us is closed. Believe me, we don't usually make such offers.
09.07.2022 09:40:35 UTC
I can't go to a meeting I have covid, but I already know their answer..
09.07.2022 09:58:27 UTC
The initial amount that was billed to your company is 1.400.000, we are ready to meet you and reduce the amount to 600.000 thousand dollars, but this is a one-day offer, after payment you will receive a complete list of the files that we stole from you, we undertake to delete them, and you will also receive a decryptor program that will decrypt all computers that have been attacked on your network.
09.07.2022 10:02:47 UTC
if I don't have the list of files I couldn't negotiate with the management..
09.07.2022 10:06:28 UTC
I know that you have the cards in hand, but my hands are tied without the list
09.07.2022 10:07:15 UTC
I've already sent you more than I'm allowed to, and I'm going to meet you. You should work with what you have, if you want to negotiate with us, we are waiting for a new offer from you of a more realistic amount.
09.07.2022 10:12:23 UTC
I have nothing more to offer you at the moment and the screenshot of the database does not speak to us..
09.07.2022 10:15:27 UTC
Now I will send you a couple more tables from this database.
09.07.2022 10:17:20 UTC
ok if I have marbles I can negotiate without marbles I cannot .. it"s a french expression
09.07.2022 10:19:57 UTC
I will definitely remember this expression. By the way, do not forget about another marbles called the decoder program
09.07.2022 10:21:33 UTC
The system is gradually getting back in place.
09.07.2022 10:26:31 UTC
https://transfer.sh/iEw0MT/client_hist.xls
09.07.2022 10:28:10 UTC
https://transfer.sh/ogfAkQ/box.xls
09.07.2022 10:28:28 UTC
When you download the files, tell me I will delete them.
09.07.2022 10:28:37 UTC
ok for me you can delete them
09.07.2022 10:51:24 UTC
done.
09.07.2022 11:15:48 UTC
you don't have more crunchy ?
09.07.2022 11:21:04 UTC
That's enough, we are waiting for your offer. Everything else after payment.
09.07.2022 11:26:20 UTC
not for us ..
09.07.2022 11:30:56 UTC
Then wait for publications, 100.000 does not suit us.
09.07.2022 11:31:38 UTC
sorry , it is not who decides ..
09.07.2022 11:33:38 UTC
maybe it will be clearer
09.07.2022 11:34:23 UTC
wait and see ... is it sunny in russia?
09.07.2022 11:41:06 UTC
I don’t know, I think you need to ask Ivan with whom your administrator communicates.
09.07.2022 11:42:01 UTC
Today is a short day, we are waiting for an offer for payment, then we can talk about the weather.
09.07.2022 11:45:09 UTC
Which of our administrators? sincerely i don't understand ..
09.07.2022 11:53:42 UTC
When we got on [redacted]'s computer, he was in correspondence with Ivan.
09.07.2022 11:55:26 UTC
After payment, you will receive not only a decryptor and deletion of files, but I will also give you a couple of tips for free on how not to get into such situations. I'm waiting for payment offers.
09.07.2022 12:02:21 UTC
The flaw is the human so unfortunately there will always be flaws..
09.07.2022 12:07:50 UTC
i'm like you, i wait ...
09.07.2022 12:09:12 UTC
Waiting for what?
09.07.2022 12:10:57 UTC
decision of my direction ...
09.07.2022 12:11:46 UTC
Is it a good business ransomware?
09.07.2022 12:13:31 UTC
The returns are certainly good, but you have to evaluate the consequences and live with it. This business does not forgive mistakes.
09.07.2022 12:16:02 UTC
I understand, each his cross ;-)
09.07.2022 12:18:16 UTC
Correctly. How are you feeling ? Is oxygen saturation in the blood normal?
09.07.2022 12:22:59 UTC
It's good for the moment, I have a fever and I cough
09.07.2022 12:40:43 UTC
to prepare the ground, could you send me your bitcoin wallet ?
10.07.2022 11:58:35 UTC
as soon as you are ready for payment, tell me, I will issue the address. Wallets are valid for a limited time.
10.07.2022 12:01:27 UTC
ola, if it's too limited it will never work, the processes are long here ... i prefer prepare the ground
10.07.2022 12:06:00 UTC
I need to know the specific time, then I can prepare the wallet.
10.07.2022 12:07:20 UTC
In addition, if we agree on the terms, then I will delete the post from the blog.
10.07.2022 12:08:31 UTC
i don't know ... it's not my responsibility
10.07.2022 12:08:45 UTC
I understand, but we need to come to something, let's say you say that you will pay within 2 days, during which time I will delete the post from the blog and give you the address.
10.07.2022 12:11:42 UTC
you will have to leave the wallet for at least a day, otherwise it is not even worth imagining the payment, the decision-making circuits are very very long with us.
10.07.2022 15:08:30 UTC
bc1qp5erh27wesmm8sxljg9p39nua02gd02e4cwk2e
10.07.2022 15:09:20 UTC
i transfert .. thanks
10.07.2022 15:10:06 UTC
I have deleted the blog post and if things get resolved soon I will delete your files from our servers and issue you with a decryptor. If you make the wrong decision, you know the consequences. I'm waiting for you with news.
10.07.2022 15:13:50 UTC
Sorry management won't go over $100,000 , i just received the information .. up to you.
10.07.2022 16:55:42 UTC
No, it's up to you, we are not satisfied with this amount.
10.07.2022 16:57:41 UTC
300.000$, our last offer to you.
10.07.2022 16:59:27 UTC
In case of refusal, we will gradually publish your files, starting with OTD_CLIENT and OTD_BOX (full export) - https://ibb.co/Ss8tLh2. Next, we will begin to gradually lay out your entire databases. It will definitely hurt your reputation. For the last time, are you sure about your decision?
11.07.2022 01:39:13 UTC
You can see what I have prepared for publication at this link. http://fqh4kwyk4it3iakg2k6mknglsfrrcuvawhjux3i36j5ocgwicaz7wdad.onion/
11.07.2022 01:39:33 UTC
150000$ no more ..
11.07.2022 07:25:52 UTC
I'm starting to post files, all the best.
11.07.2022 08:36:26 UTC
ok you have the card in your hand, not me .. i'm not decide ..
11.07.2022 08:54:35 UTC
http://lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion/post/9IlY2fpFeC4ml6Ud62cc276550736
11.07.2022 13:39:28 UTC
The last price is 300.000$ you have 4 hours to make a decision.
11.07.2022 13:41:58 UTC
Management doesn’t want to pay anymore, not even $100,000, it has reconsidered its decision ...
11.07.2022 13:58:24 UTC
i finished my work .. bye
11.07.2022 13:58:54 UTC
Bye
11.07.2022 14:00:39 UTC
http://lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion/post/B2WZ7LY40FmXgY1r62cc3b188a595
11.07.2022 15:01:38 UTC
thanks
11.07.2022 15:15:13 UTC
Just in case management changes their mind and takes care of the customers.
11.07.2022 15:21:28 UTC
This information is provided by Valéry Marchive & Julien Mousqueton
