Ransomware negotiation(s) with  lockbit3



Avatar

[Chat started]

15.07.2022 15:24:55 UTC
Avatar

How much is it to decrypt my files

15.07.2022 15:30:21 UTC
Avatar

Hello?

15.07.2022 17:16:08 UTC
Avatar

I was just checking to see how to get my files back

15.07.2022 19:26:55 UTC

All operators are busy at the moment, please wait for an answer.

16.07.2022 01:23:55 UTC
Avatar

Hello

16.07.2022 10:03:03 UTC
Avatar

To decrypt your files and prevent us of destructive actions against your company you will need to pay $120 000 . We also have all your files.

16.07.2022 10:03:16 UTC
Avatar
Avatar

One hundred and twenty thousand dollars?

16.07.2022 15:47:53 UTC

yes

16.07.2022 15:49:04 UTC
Avatar
Avatar

There is no way my customer can pay that. That is an insurmountable ammount of money.

16.07.2022 15:50:12 UTC

We take into account your profits and the amount of work needed to encrypt your information, that's how the sum is calculated.

16.07.2022 16:02:24 UTC
Avatar

What would you like to offer me?

16.07.2022 16:03:43 UTC
Avatar
Avatar

Anymore than 8,000usd would bankrupt my company, and then I would lose everything anyway.

16.07.2022 16:09:47 UTC

Well, this isn't true. Even by public official data about your revenue it's obvious that you are capable of paying 120,000$. You may make your own offer about the price but it shouldn't differ from mine by a large sum.

16.07.2022 16:25:30 UTC
Avatar
Avatar

Well I have some good news. There was a backup we found that you did not get to. So we will not need your services.

21.07.2022 17:43:29 UTC

We will sell your files.

21.07.2022 20:17:05 UTC
Avatar
Avatar

You do not have my files

21.07.2022 20:44:10 UTC

Why are you telling me this information about another backup copy?

21.07.2022 21:26:23 UTC
Avatar

You didn't even ask for proof about the files we have acquired. The information about an attack on your company will spread like wildfire on the Internet when we publish it. You will most likely pay a fine bigger than the sum we are asking for.

21.07.2022 21:28:45 UTC
Avatar
Avatar

If you have the files then prove it.

21.07.2022 21:33:08 UTC

Ok. It will take some time. I will send you a list of files soon

21.07.2022 21:38:21 UTC
Avatar
Avatar

a list a files is not proof of anything .. that just means you Looked at the files. the connection my customer has is complete crap and no way you transffered that many files off of their server... Proof would be showing me screen shots of the files you have

21.07.2022 21:39:31 UTC

Good. I will send you screenshots of several files.

21.07.2022 21:43:46 UTC
Avatar

https://prnt.sc/[redacted]

22.07.2022 09:52:25 UTC
Avatar

https://prnt.sc/[redacted]

22.07.2022 09:53:23 UTC
Avatar

https://prnt.sc/[redacted]

22.07.2022 09:54:15 UTC
Avatar

https://prnt.sc/[redacted]

22.07.2022 09:55:09 UTC
Avatar

Have you made a decision?

26.07.2022 14:35:12 UTC
Avatar

http://lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion/post/dpgrmsJyo4M11cL362e7fe29e97df

01.08.2022 16:27:28 UTC
Avatar

This information is provided by Valéry Marchive & Julien Mousqueton