Ransomware negotiation(s) with  lockbit3



Avatar

[Chat started]

28.07.2022 00:24:59 UTC
Avatar

hi bro i am krrc

28.07.2022 00:37:39 UTC
Avatar

About 15 servers. How much are they? EFDD05527F449763F18FB02B2C21837D

28.07.2022 00:44:31 UTC

Hi, first you better to know where here to help our customers

28.07.2022 06:15:52 UTC
Avatar

Also we downloaded 2TB data from your network, we can share samples and proof

28.07.2022 06:16:38 UTC
Avatar

You can use trial decryptor to test your sample file

28.07.2022 06:18:58 UTC
Avatar

Proof = https://anonfiles.com/ta73Za07y7/Proof_rar : ASDNAKSDsah9802io13!@19ujioalls

28.07.2022 06:34:52 UTC
Avatar
Avatar

What should I offer?

28.07.2022 06:38:42 UTC

as we know your holding your price is 8M

28.07.2022 06:39:25 UTC
Avatar
Avatar

give password

28.07.2022 06:39:44 UTC

ASDNAKSDsah9802io13!@19ujioalls

28.07.2022 06:39:56 UTC
Avatar
Avatar

8M?

28.07.2022 06:42:00 UTC

yes, for decryptor and delete your data from our servers for ever

28.07.2022 06:42:33 UTC
Avatar
Avatar

How many btc is 8m?

28.07.2022 06:43:17 UTC

use google

28.07.2022 06:43:29 UTC
Avatar

now, almost 345,4

28.07.2022 06:44:15 UTC
Avatar
Avatar

0.3btc?

28.07.2022 06:46:10 UTC

what is you mean?

28.07.2022 06:46:32 UTC
Avatar
Avatar

Is it 3.4btc?

28.07.2022 06:47:04 UTC

not its 345

28.07.2022 06:47:25 UTC
Avatar
Avatar

Approximately how much is it in btc?

28.07.2022 06:47:58 UTC

345btc = 8.000.000

28.07.2022 06:48:19 UTC
Avatar

its you should pay

28.07.2022 06:48:28 UTC
Avatar
Avatar

345btc???

28.07.2022 06:48:56 UTC

yes, the price in dollar is important not in btc! your revenue is 1B dollar

28.07.2022 06:50:00 UTC
Avatar

you have Stock Symbol

28.07.2022 06:51:39 UTC
Avatar

according to your holding and financial data, its fair price and you can pay that

28.07.2022 06:53:16 UTC
Avatar
Avatar

How many servers are there?

28.07.2022 06:53:16 UTC

you mean on your network?

28.07.2022 06:53:34 UTC
Avatar

according to dsquery 10102

28.07.2022 06:54:54 UTC
Avatar

we know about your insurance too

28.07.2022 06:55:43 UTC
Avatar
Avatar

server ip?

28.07.2022 06:59:20 UTC

130.1.22.0/24 130.1.24.0/24 172.16.16.0/24 130.1.171.0/24

28.07.2022 07:33:07 UTC
Avatar

also 10.100 range

28.07.2022 07:33:27 UTC
Avatar

also \\130.1.24.42\ backup of OS

28.07.2022 07:34:27 UTC
Avatar

our locker try to lock all pc in network

28.07.2022 07:35:29 UTC
Avatar
Avatar

I'm in a meeting with a customer. Hold on a minute, please.

28.07.2022 08:53:46 UTC

tell your active hours in GMT time

28.07.2022 08:55:53 UTC
Avatar

we forgot to tell we downloaded all your staff's mailboxes (inbox,sentbox,draft,deleted)

28.07.2022 09:18:00 UTC
Avatar

https://anonfiles.com/a3R7a319y9/Emails_rar : SADNASDBikdiah891i

28.07.2022 09:18:10 UTC
Avatar

we have detected new price for you.

28.07.2022 10:06:20 UTC
Avatar

18M $

28.07.2022 10:07:06 UTC
Avatar
Avatar

why 18M$?

28.07.2022 10:29:33 UTC

why not?

28.07.2022 10:31:18 UTC
Avatar
Avatar

This company is manufacturing. i Thinks 8m$ It's too much Finally, I want to recover about 15 servers. How much does it cost to recover only 15 servers?

28.07.2022 10:38:06 UTC

price depends from revenue

28.07.2022 10:38:34 UTC
Avatar

18m$ very small price for you

28.07.2022 10:39:02 UTC
Avatar

you will lost much more if refuse pay

28.07.2022 10:39:20 UTC
Avatar
Avatar

Can you tell me why 18m$? I need to get back to the client

28.07.2022 10:44:14 UTC

because you big and rich company

28.07.2022 10:44:39 UTC
Avatar

have stock symbol

28.07.2022 10:44:49 UTC
Avatar

big company = big ransom, small company = small ransom

28.07.2022 10:50:29 UTC
Avatar
Avatar

I don't think the client company will be able to pay that amount.

28.07.2022 10:53:24 UTC

no problem simple restore backup and wait leak at our blog

28.07.2022 10:54:21 UTC
Avatar

http://lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion/

28.07.2022 10:54:29 UTC
Avatar
Avatar

I talked to the client. 18M dollars is too expensive If you adjust the amount, I think there will be room for negotiation.

28.07.2022 11:33:10 UTC
Avatar

85 Ransomware infected servers We only need 15 restoration, but I also think 18M$ is too expensive.

28.07.2022 11:36:33 UTC

its no matter how many system locked, you are paying both decryptor and data leak prevent

28.07.2022 12:06:24 UTC
Avatar

what is your clients offer?

28.07.2022 12:08:25 UTC
Avatar
Avatar

Wait a minute. I'll try

28.07.2022 12:10:44 UTC
Avatar

It's such an important decision Internal discussion is needed. I'll answer you tomorrow.

28.07.2022 12:44:22 UTC

We can give discount if you pay quickly.

28.07.2022 13:13:49 UTC
Avatar
Avatar

are you there?

29.07.2022 03:18:12 UTC

yes

29.07.2022 05:56:10 UTC
Avatar
Avatar

I got a call from a customer. The client company has been having a meeting since last night. However, as of now, it has not been concluded, so it is expected to be decided around Monday in three days. I think I can let you know on Monday.

29.07.2022 14:27:11 UTC
Avatar

The client says they don't know what information you're referring to as $1B in sales. My Client is an IT service company, so do you have any information about the company my client provides? Isn't it saying that sales are $1B? I'm also acting as an agent in the middle, so I don't know what they're discussing I don't know exactly what they’re discussing, and they just say that they need more time

01.08.2022 09:15:07 UTC

They're bluffing.

01.08.2022 16:49:38 UTC
Avatar

Apparently the reputation of your company and the value of the stock on the stock exchange are of no value to your client since he is behaving this way.

01.08.2022 16:50:41 UTC
Avatar
Avatar

What did we do? I don't know what you mean.

02.08.2022 06:43:39 UTC
Avatar

We are doing our best to negotiate in the middle. But the amount is so big that I don't know what to do with the customer. What we want is a price adjustment.

02.08.2022 06:44:59 UTC
Avatar

Is there absolutely no room for negotiation?

02.08.2022 06:57:30 UTC

We negotiate with you, but you do not make any offers, but only bluff, how can we negotiate with you?

02.08.2022 13:57:01 UTC
Avatar

Your company's annual revenue is $10 billion, you're trying to lie to me that $18 million is a very large amount for you, it's not serious.

02.08.2022 13:58:16 UTC
Avatar
Avatar

Okay. I'll try to convince our client as soon as possible

02.08.2022 15:57:52 UTC
Avatar

My client is not lying. There's something you need to know exactly

03.08.2022 02:06:23 UTC
Avatar

The company you hacked is an IT service company, and the information you have on the server is the customer’s(of my client) information.

03.08.2022 02:08:40 UTC
Avatar

The $10B Revenue you're talking about is the Revenue of customers(of my client).

03.08.2022 02:10:02 UTC
Avatar

you hacked my client’s revenue was $70M and the profit was $4M last year. The client you hacked cannot afford to pay $18M.

03.08.2022 02:11:38 UTC
Avatar

So the client confessed to the customer and is discussing the hacking. This complicated process delays the answer. You should understand this situation

03.08.2022 02:13:34 UTC
Avatar

I think the hacked IT service company will probably offer around $500,000 at the outset

03.08.2022 02:18:39 UTC

The fact that we hacked your client's company through the IT company that serviced him does not mean that the ransom price should be less, your IT company is not interesting to us, we need the big fish, your client.

03.08.2022 22:14:46 UTC
Avatar
Avatar

I fully understand that you need Big Fish.

04.08.2022 05:54:50 UTC
Avatar

Big fish is very angry with IT service company. Because IT service company was hacked and Big fish’s information was leaked, Big Fish is saying that IT Company should pay for everything. Also If this doesn't be solved, I heard that Big Fish will cut the deal with the IT company and fill a damage compensation lawsuit.

04.08.2022 05:55:54 UTC
Avatar

I will explain again because you still don't seem to understand the current situation clearly. My client is an IT service company. You hacked through this IT service company and had Big Fish's information.

04.08.2022 05:57:50 UTC
Avatar

I will explain again because you still don't seem to understand the current situation clearly. My client is an IT service company. You hacked through this IT service company and had Big Fish's information.

04.08.2022 05:58:53 UTC
Avatar

However, IT service company cannot afford to pay $18M, as I said before. In the previous conversation, I said that IT service company would pay $500,000. Bur now IT service company seem willing to pay up to $1,000,000 for resolution. And that's big amount(one-third of the client's one-year profit)

04.08.2022 06:01:29 UTC
Avatar

Please understand the above situation accurately and give me an answer.

04.08.2022 06:03:27 UTC

I understand that your job as a negotiator is to get the ransom price as low as possible, you are a good negotiator, but in this case you are offering too small an amount for a very large company, the damage we can do to your client is absolutely incomparable to the amount you are offering. It doesn't matter who wins your lawsuit, we are now talking about saving a lot more in lost profits for your client, your client would be much better off paying us the ransom and then suing the IT company and recovering the damages. The company's stock could collapse so badly that your client would lose hundreds of millions of dollars instead of just $18 million. I appreciate the increase in buyout amount from your side and see it as a desire to make a good deal for both of us, but 1 million is absolutely not enough for a company with annual revenues of 10 billion dollars. At the same time to show respect to you as a brilliant negotiator I am ready to make a discount of 3 million dollars, in this way I am ready to completely remove all your stolen data, provide decryption keys, and forget about the fact that you have ever been attacked, our deal will be an absolute secret and no one will ever know about it. It's up to you.

04.08.2022 19:06:04 UTC
Avatar

The bottom line is that if you pay me 15 million dollars in 3 days, everyone will be happy.

04.08.2022 19:06:51 UTC
Avatar
Avatar

With this level of hacking skills, you must be very smart and logical people. It seems that we need logical conversations, not emotional ones.

05.08.2022 10:09:12 UTC
Avatar

I understand that you reasonably present the required amount depending on the size of the company's revenue Bigfish's revenue is about $2B, not $10B And Big fish's profit is much less than this. The amount you ask for is a very difficult amount to pay for even Big fish. If you need to check Big Fish's sales and profits, you can check it right away by entering the stock site. If necessary, I will send financial statements disclosed on the securities site

05.08.2022 10:11:31 UTC
Avatar

I think negotiations can proceed only when the required amount is presented again. I look forward to a positive answer.

05.08.2022 10:12:42 UTC

I am not emotional. I would be happy to see financial documents that you can show me.

05.08.2022 10:17:43 UTC
Avatar
Avatar

I can't contact you because it's the weekend now. I will contact you on Monday.

06.08.2022 04:43:19 UTC

Ok

06.08.2022 11:16:16 UTC
Avatar
Avatar

I send you the sales volume of the big fish that I checked directly on the Google Securities site.

08.08.2022 03:44:44 UTC
Avatar

In terms of $, last year's sales volume is about $1.8B. The reason why you check the exact sales volume of Big fish is because I think it's to reasonably adjust the required amount.

08.08.2022 03:46:04 UTC
Avatar

File: [매출자료.png]

08.08.2022 03:46:53 UTC

Where net profit?

08.08.2022 03:50:46 UTC
Avatar
Avatar

Net Income last year was about $30M on a $ basis. And as you know, this year is worse because of the global economic downturn.

08.08.2022 08:23:58 UTC
Avatar

File: [매출자료2.png]

08.08.2022 08:24:11 UTC
Avatar

File: [매출자료2.png]

08.08.2022 08:32:21 UTC
Avatar

File: [매출자료2.png]

08.08.2022 08:34:38 UTC
Avatar

File: [매출자료2.png]

08.08.2022 09:38:20 UTC
Avatar

https://www.sendspace.com/file/p08nhl

08.08.2022 10:23:26 UTC
Avatar

Image materials will be uploaded and automatically deleted. There is an image data in the URL above.

08.08.2022 10:25:41 UTC
Avatar

The image material is uploaded and automatically deleted. There is image data in the URL below. https://www.sendspace.com/file/p08nhl

08.08.2022 11:47:07 UTC
Avatar

https://www.sendspace.com/file/p08nhl Image materials will be uploaded and automatically deleted. There is an image data in the URL above.

08.08.2022 12:32:44 UTC

send in this chat please in archive no more 1 mb

08.08.2022 13:23:33 UTC
Avatar

7z or zip or rar

08.08.2022 13:23:39 UTC
Avatar
Avatar

Why does the written text get erased?

08.08.2022 13:31:49 UTC

its slow tor

08.08.2022 13:32:34 UTC
Avatar

wait and all text will upload

08.08.2022 13:32:47 UTC
Avatar
Avatar

https://www.sendspace.com/file/p08nhl Image materials will be uploaded and automatically deleted. There is an image data in the URL above.

08.08.2022 13:33:00 UTC

send in this chat, we not go to links

08.08.2022 13:33:22 UTC
Avatar
Avatar

File: [매출자료2.png]

08.08.2022 13:33:40 UTC
Avatar

Here's the profit picture.

08.08.2022 13:35:44 UTC

Ok

08.08.2022 13:48:53 UTC
Avatar

I need time for checking this info

08.08.2022 13:49:06 UTC
Avatar
Avatar

Okay. Please check and adjust the price.

08.08.2022 13:59:25 UTC

You're doing insider trading, so I can't give you a discount, it's a criminal offense for your management.

08.08.2022 15:35:30 UTC
Avatar

As a person who earns not entirely by legal means, I am sympathetic to the desire to make money, so I'm ready to keep this secret between us if you will not be greedy and give me 15 million.

08.08.2022 15:36:16 UTC
Avatar

Also, you are bluffing by understating your net income, your net income in March was $16 million and that is only one month, your stock is up 8% today, your business is booming, I think you should not be greedy, and be reasonable by making a deal with me.

08.08.2022 15:41:11 UTC
Avatar
Avatar

The article was deleted again What should I do?

09.08.2022 01:52:15 UTC

what you mean? send screenshot please

09.08.2022 01:52:32 UTC
Avatar

I not understand you

09.08.2022 02:18:21 UTC
Avatar

login in victim chat in 1 window

09.08.2022 02:19:34 UTC
Avatar

if you open 1 ID in two browser you may have problem

09.08.2022 02:20:00 UTC
Avatar
Avatar

What does insider trading mean? Do you mean I cheat to take a lot of fees between you and Big Fish?

09.08.2022 04:07:44 UTC
Avatar

The post will continue to be deleted. Can I move the address of the site address?

09.08.2022 08:06:14 UTC
Avatar

Let's continue the conversation here http://lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion/

09.08.2022 10:21:50 UTC
Avatar

Let's continue the conversation here http://lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion/

09.08.2022 10:53:31 UTC

Ok

09.08.2022 10:59:38 UTC
Avatar

I fix bug with chat, press F5 and you will see all message

09.08.2022 11:17:32 UTC
Avatar
Avatar

ok check

09.08.2022 11:59:39 UTC
Avatar

What does insider trading mean? Do you mean I cheat to take a lot of fees between you and Big Fish?

09.08.2022 12:06:19 UTC

Insider trading means that big fish are breaking the law and making money by dumping and dumping their stock on the exchange.

09.08.2022 12:10:39 UTC
Avatar

Your time to decide is coming to an end, we are beginning preparations to publish your 2 terabytes of corporate data on our blogs.

09.08.2022 15:18:50 UTC
Avatar

http://lockbit7z2jwcskxpbokpemdxmltipntwlkmidcll2qirbu7ykg46eyd.onion/

09.08.2022 15:20:03 UTC
Avatar

The correspondence between us will be as published as in this example.

09.08.2022 15:21:13 UTC
Avatar

http://lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion/post/L107zTa4UccNfDp562d695f5bdbf0

09.08.2022 15:21:25 UTC
Avatar

Also, you should know that after all of your information is published, the price of redemption will double and will be 30 million dollars.

09.08.2022 15:25:12 UTC
Avatar
Avatar

First of all, I am never lying about the financial figures of Big fish. And big fish says there is no problem with insider trading legally.

10.08.2022 04:26:38 UTC
Avatar

Big fish think that $10B in sales = $15M in payments. If the actual sales amount was $2B, it was naturally thought that negotiations would begin at a much lower amount. But you keep saying the same amount. And, my client has information on how much other companies with similar sales paid. Although I said the financial situation of the IT service company that has to pay the money actually and Big Fish's situation several times but you're asking for the same amount.

10.08.2022 04:27:58 UTC
Avatar

My client raised the payment to $1M -- $2M.

10.08.2022 04:36:14 UTC

Other companies paid a lot more than you, the thing is that all reasonable companies always pay quietly and quickly and no one knows about what they paid, because our deal is kept absolutely secret, with a successful transaction absolutely all traces of negotiations and all company data is removed, no one can know about the real amounts of payments companies except me, for example recently the company from NASDAQ paid 70 million dollars and its annual turnover was only 6 billion dollars, so each company is unique and the amount of the ransom is assigned depending on the value of the data we possess.

10.08.2022 09:07:06 UTC
Avatar

In this case, your client's company earns more than $15 million in net profit every month, this is the information that is contained in public sources, but your client knows that this is not all of his income, there are certain income that he hides from the tax police. Let that remain our little secret.

10.08.2022 09:15:19 UTC
Avatar

I appreciate your client's generosity and the fact that he increased the amount to two million, but just so you understand it is such a paltry sum for him that he earns it in one day.

10.08.2022 09:23:09 UTC
Avatar

I doubt that the ratio of losing the company or a huge part of the stable income of the company is worth 1 day of work of the company, in my opinion it is at least stupid and not rational.

10.08.2022 09:30:46 UTC
Avatar

Your client as a businessman knows how to assess risks, and the cost/benefit ratio, the damage from our attack is guaranteed to be more costly than $15 million.

10.08.2022 09:31:56 UTC
Avatar

Due to the rules of good manners, I am ready to bargain and also reduce the price to 14 million dollars.

10.08.2022 09:32:46 UTC
Avatar
Avatar

Of course you do things in secret. But ransomware victims share information among themselves. Big fish says the amount is too much because big fish heard there.

11.08.2022 03:03:11 UTC
Avatar

And, you keep talking about internal trading issues. Big fish says he doesn't know why you're talking about internal trading. Big fish wants you to give him more solid evidence that you have relevant information

11.08.2022 03:04:33 UTC
Avatar

And you said that the amount is determined by the value of the data you have. I don't know exactly what data you have (revealing only a few to us), but I think you're overestimating it. There is too much difference between the value of data you think and the value of data that Big fish thinks. This is the most important factor for you and Big Fish to talk about the price

11.08.2022 03:07:28 UTC
Avatar

And I think you researched the public source. The profit you're talking about is quarterly profit (three months), not one month.

11.08.2022 03:09:09 UTC

13.500.000$ is the best we can do for you.

11.08.2022 10:59:06 UTC
Avatar

If your company's reputation isn't worth the money, we can't do the deal.

11.08.2022 11:02:22 UTC
Avatar
Avatar

I'll deliver it to the customer. It's dinner time after work, so I think I'll contact you tomorrow morning

11.08.2022 12:51:29 UTC

https://www.bleepingcomputer.com/news/security/lockbit-victim-estimates-cost-of-ransomware-attack-to-be-42-million/

11.08.2022 15:43:26 UTC
Avatar

I think this article will help your client think with his head better. Atento was also very greedy, ended up paying many times more only not to us anymore.

11.08.2022 15:44:13 UTC
Avatar
Avatar

After you sent $13.5M It is such an important decision that executives in the big fish are discussing it The amount itself is too big, and there are different opinions on how to pay that large amount. I will reply as soon as my client reach a conclusion.

12.08.2022 12:21:40 UTC

Companies regularly pay us amounts and more, nothing unusual.

12.08.2022 12:55:35 UTC
Avatar
Avatar

Overseas remittance through BTC exchange has become a big issue in Korea It has been expanded to the prosecution's investigation, and the entire coin transaction is being investigated. (LINK: www.seoul.co.kr/news/newsView.php?id=20220815015003&wlog_tag3)

15.08.2022 07:52:53 UTC
Avatar

So it's hard to transfer a large amount at once A small amount of money should be remitted first and the status should be watched to see if the prosecution notices.

15.08.2022 07:54:53 UTC
Avatar

We will now discuss how to trade. Because I need to make sure it's restored The entire remittance is difficult and will be traded little by little. I want to make a recovery transaction for 3 servers each. How much does it cost to recover three servers each? We should pay attention not only to data leakage but also to the prosecution's surveillance.

15.08.2022 07:56:27 UTC

There is no technical possibility to decrypt only 3 servers, your company is encrypted with one key, if I give you a decryptor, then you decrypt absolutely all the computers in the network.

15.08.2022 12:15:52 UTC
Avatar

If you want to make a transaction between us, you will find the opportunity to buy cryptocurrency. A lot of individuals sell cryptocurrency, you can buy cryptocurrency for cash including, Korea is famous for its cryptomillionaires. If you want to make a transaction between us, you will find the opportunity to buy cryptocurrency. So many individuals sell cryptocurrency, you can buy cryptocurrency for cash including, Korea is famous for its crypto millionaires. Various companies around the world including even third world countries somehow managed to buy cryptocurrency, and you living in a country where every person has 3 higher education, in a country where the total mass of the population is the smartest people, can't handle it? I don't believe in such a thing?

15.08.2022 12:19:44 UTC
Avatar

No one can ever forbid the director of your company to buy any amount of cryptocurrency with his personal earned money. In addition, you can use the anonymous cryptocurrency Monero, transactions in this currency are not tracked in the blockchain and your prosecutor's office will never know anything.

15.08.2022 12:21:22 UTC
Avatar

The prosecutor's office will be much happier studying 2 terabytes of your data than some cryptocurrency transactions on the Internet.

15.08.2022 12:23:42 UTC
Avatar
Avatar

I know that each server has an ID value. So I also know that split transactions are possible. You must verify that data recovery is possible on the server. We have to show the restored one to the customer. You should gain credibility by showing that it has been restored. So I want a split deal. $13,500,000 is a huge amount. It is difficult for customers to remit money at once, and they can remit money while watching data recovery. Please tell me how to do the split transaction

15.08.2022 12:55:20 UTC

You are mistaken.

15.08.2022 13:28:40 UTC
Avatar

Id consists of 32 characters, the first 16 characters is part of the public key that encrypts your data, the second part consists of the second 16 characters is a random set of data that has nothing to do with encryption keys, the second 16 characters are needed to ensure that no one can get into our chat, so we achieve a private conversation.

15.08.2022 13:29:50 UTC
Avatar

If you are not sure if the decryptor works, you can collect 10-20 files from different computers, I will decrypt them for free.

15.08.2022 13:30:42 UTC
Avatar

But you will receive the universal decryptor only after paying the full amount.

15.08.2022 13:31:28 UTC
Avatar

If you are afraid to transfer the whole amount you can split it into several payments, for example make 7 payments to different wallets of 2 million dollars.

15.08.2022 13:32:31 UTC
Avatar

Payment can be made within a week, 1 day - 2 million, so you can pay less noticeably for your favorite procrustean.

15.08.2022 13:35:57 UTC
Avatar
Avatar

Will you restore the db to the test? It is important to see that data is recovered one by one.

15.08.2022 13:58:55 UTC
Avatar

If it is not 3 pieces, I want to recover 5 pieces per ID.

15.08.2022 14:04:11 UTC

I don't understand you.

15.08.2022 14:10:26 UTC
Avatar

Do you want to restore some very valuable file such as a database for a test? it is not possible. You can collect from the whole company not very valuable documents which are of no particular value, moreover after decrypting these files I will check their contents that they are of no value and only after that I will give them to you.

15.08.2022 14:11:25 UTC
Avatar
Avatar

Can't we split it up and recover it little by little?

15.08.2022 14:47:28 UTC

Of course not, then you would have no desire to pay the full amount, you are trying to deceive me and decipher the most important data

15.08.2022 14:56:33 UTC
Avatar
Avatar

I want you to give me a suggestion. Is it possible to trade $500,000 at a time?

15.08.2022 15:02:50 UTC
Avatar

We have 2TB of data. If we don't keep our promise, I know you'll reopen and gossip about the data. If you spread the rumor, we will lose a lot of money due to stock price fluctuations. I need 2tb. Don't spread the word Therefore, we will do our best to keep our promise. 1. Don't spread it. 2. Delete 2tb after completion of transaction. 3. I request restoration little by little by little.

15.08.2022 15:21:58 UTC

Yes, I don't mind going out of my way to help you keep our deal a secret from the police and prosecutors, they are always sticking their noses where they don't need to and want to collect more taxes. Moreover, you can divide the amount into any numbers, not necessarily an even value of 500 thousand or 1 million or 2 million, you can use a random number generator and make many random payments to many purses, for example to 1 purse you can send 563 thousand dollars, to 2 purse 435 thousand dollars, as convenient and safe for you.

15.08.2022 15:27:02 UTC
Avatar

You can be absolutely sure that your data is safe, all data will be destroyed, no one will ever know about our attack on you and that we had a deal, after I provide you with proof of removal of all your information and you decrypt all your data we will delete this chat room and you will continue to prosper and make hundreds of millions of dollars.

15.08.2022 15:28:38 UTC
Avatar

You are very lucky that you were attacked by us, we are the largest faction in the world and always take responsibility for their words, for us reputation is as important as for you. If we ever cheated even one person, no one would pay us in the future.

15.08.2022 15:29:29 UTC
Avatar
Avatar

Then, how much do I have to tell you so that I can trade little by little?

15.08.2022 15:31:38 UTC

I don't understand you.

15.08.2022 15:32:10 UTC
Avatar

Paraphrase, tell me more about what you want.

15.08.2022 15:32:28 UTC
Avatar
Avatar

I want a recovery request by partitioning.

15.08.2022 15:33:29 UTC

I told you that's not possible because then you wouldn't pay the full amount, you would decrypt critical files for you.

15.08.2022 15:39:27 UTC
Avatar

I can demonstrate that the decryptor works on a few dozen files taken from any computer in your network, this is enough to know that the decryptor works successfully.

15.08.2022 15:40:29 UTC
Avatar
Avatar

We have 2TB of data. We need restoration and want to erase your data. So I'll close the deal. Please tell me how I can recover the data in installments.

15.08.2022 15:43:43 UTC

We can remove data in installments, decryptor for the whole network only after paying the full amount.

15.08.2022 15:44:43 UTC
Avatar
Avatar

I know. We will continue the recovery process to the end. I want to delete the data you have. But the customer can't believe it's working properly. You guys need to recover little by little. You have to pay little by little and recover normally to make an additional deposit.

15.08.2022 15:47:49 UTC

No need to cheat, all files on the network are encrypted with the same locker, all of them are decrypted equally successfully.

15.08.2022 15:49:41 UTC
Avatar

If your client feels more comfortable, we can encrypt the test bench and then decrypt it in front of him.

15.08.2022 15:50:01 UTC
Avatar

Prepare your computer for the encryption and decryption test, I will give you two programs, one which encrypts and one which decrypts. Your client will make sure that everything works successfully and with peace of mind will pay us.

15.08.2022 15:50:43 UTC
Avatar

File: [encryptor.exe.7z]

15.08.2022 15:54:56 UTC
Avatar

encrypt any PC of your client or virtual machine, then write to new chat with new ID from test PC and I give you free decryptor for this PC

15.08.2022 15:55:26 UTC
Avatar

In this way your client will make sure that the decoder works and that there are no problems.

15.08.2022 15:55:50 UTC
Avatar
Avatar

It doesn't matter that you can infect and treat it. It is important to restore our infected data to normal. And it is important to delete the data you have.

15.08.2022 16:02:45 UTC

Yes, this will be done after payment.

15.08.2022 16:03:36 UTC
Avatar
Avatar

You need to recover one ID each.

15.08.2022 16:04:51 UTC

Do I look like a fool who will give you a decryptor for backups? stop this cycr.

15.08.2022 16:05:37 UTC
Avatar
Avatar

What is a backup for decryptor? Are you saying that we can't recover by division?

15.08.2022 16:07:58 UTC

I mean, I don't have a decryptor for the 1st id, either all id or nothing.

15.08.2022 16:09:34 UTC
Avatar

You can check this on a test computer, encrypt several computers, I will give you a decryptor for 1 computer but with it you can decrypt all computers.

15.08.2022 16:10:24 UTC
Avatar

Your time is running out, we are starting to upload your data to the blog for publication.

19.08.2022 03:22:54 UTC
Avatar

If you want to stop publishing, make a payment of $13,500,000 to this bitcoin wallet bc1qnhgmuz5kdjn5rqjhayn9n8e8lvumjjpnnjdczz

19.08.2022 03:24:09 UTC
Avatar
Avatar

With the program you sent me, I organized an environment for encryption and decryption and I am conducting a test.

19.08.2022 08:25:21 UTC

How much time you need?

19.08.2022 11:16:34 UTC
Avatar
Avatar

The server has been in error for 5 days. The conversation has been sent to the current test file. Please check the chat window.

26.08.2022 07:51:25 UTC

File: [DECRYPTOR(LB BLACK) [735CE278DEF3F2F130C32518DD8D63CA].zip]

26.08.2022 14:06:27 UTC
Avatar

This is decryptor for test

26.08.2022 14:06:53 UTC
Avatar

http://lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion/post/dpGGTXwJUYMy8cTW63002f8b14b9c

28.08.2022 02:10:14 UTC
Avatar

http://lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion/post/YuaHw5WwiDNtpIgU63001d322ed54

28.08.2022 02:12:25 UTC
Avatar

If you do not pay the ransom in the near future, you will be treated in the same way by greedy companies.

28.08.2022 02:13:16 UTC
Avatar
Avatar

The current Lockbit homepage keeps getting errors. Test recovery is currently in progress. Hold on a minute, please.

29.08.2022 03:17:33 UTC

Minute?

30.08.2022 06:09:54 UTC
Avatar

We started a DDoS attack on your site.

01.09.2022 23:14:19 UTC
Avatar

Any news or we can publish your 2tb ?

16.09.2022 07:02:19 UTC
Avatar

?

26.09.2022 13:54:00 UTC
Avatar
Avatar

[empty message]

08.03.2023 20:10:59 UTC
Avatar

[empty message]

08.03.2023 20:11:25 UTC
Avatar

..

08.03.2023 20:12:52 UTC
Avatar

................

08.03.2023 20:15:47 UTC
Avatar

.............................

08.03.2023 20:16:39 UTC
Avatar

..................................

08.03.2023 20:17:36 UTC
Avatar

.............................

08.03.2023 20:19:12 UTC
Avatar

.............................__

08.03.2023 20:21:26 UTC

?

09.03.2023 13:20:11 UTC
Avatar
Avatar

[empty message]

04.05.2023 16:18:37 UTC
Avatar

[empty message]

04.05.2023 16:41:23 UTC
Avatar

.

04.05.2023 17:29:48 UTC
Avatar

..

04.05.2023 17:30:47 UTC

This information is provided by Valéry Marchive