Ransomware negotiation(s) with  lockbit3



Avatar

[Chat started]

17.02.2023 14:22:37 UTC

hi. to decrypt the data and avoid publication you need to pay us.

17.02.2023 14:25:39 UTC
Avatar
Avatar

We got notice that our name and screenshots of some of our data were posted to your TOR darknet site. We are interested in learning more about this situation. Have you sold the data?

17.02.2023 14:25:46 UTC

soon we will send you a tree of stolen data

17.02.2023 14:25:56 UTC
Avatar

we did not sell your data. we will publish it for free

17.02.2023 14:26:32 UTC
Avatar
Avatar

ok, has the data been sold yet? How much data do you have?

17.02.2023 14:26:44 UTC

We'll send you the tree now, wait for it.

17.02.2023 14:27:16 UTC
Avatar
Avatar

ok

17.02.2023 14:27:24 UTC

124gb - confidential files, financial reports, hr, passports

17.02.2023 14:27:53 UTC
Avatar

Download link: http://lockbitfile2tcudkcqqt2ve6btssyvqwlizbpv5vz337lslmhff2uad.onion/r/FtAmteMZSo#xWzK5WIC7vBW3wzgFup6/RaJMPtdmyk9QGNud23AZ00=

17.02.2023 14:41:17 UTC
Avatar

Password: B@N$m@piDSvsErZQc(XEEuy6c

17.02.2023 14:41:31 UTC
Avatar
Avatar

Thank you. We will take a look. I'm having a hard time getting into you Tor chat. It keeps timing out.

17.02.2023 18:05:46 UTC

I and other companies have no complaints. try restarting TOR or using other links from the note

17.02.2023 18:51:50 UTC
Avatar

Hi, what's the news?

20.02.2023 13:28:55 UTC
Avatar
Avatar

My leadership assessing the value of the data. How much to keep it from being published?

21.02.2023 13:10:00 UTC

1,500,000$ USD

21.02.2023 13:18:52 UTC
Avatar
Avatar

That seems a little excessive to me, but I'll pass it on to my leadership.

21.02.2023 13:21:13 UTC

If you pay quickly, we'll give you a discount.

21.02.2023 13:22:47 UTC
Avatar

While we're negotiating we've paused the timer and hidden you from the blog

21.02.2023 13:24:02 UTC
Avatar
Avatar

What kind of discount?

21.02.2023 13:25:04 UTC

If you pay within 48 hours, we will give you a 30% discount

21.02.2023 13:26:06 UTC
Avatar
Avatar

I'll pass that along to leadership.

21.02.2023 13:27:35 UTC

Ok

21.02.2023 13:27:52 UTC
Avatar

what news?

22.02.2023 19:43:32 UTC
Avatar
Avatar

Leadership is still evaluating the data and deciding on if it's important enough to pay you. How would we know for sure if you deleted all our data? Or not sold it?

22.02.2023 21:29:42 UTC

We do not sell data, without publication. And most importantly - our reputation.

22.02.2023 21:34:21 UTC
Avatar

it's time to pay

27.02.2023 20:39:44 UTC
Avatar
Avatar

Considering the data you took it is not worth $1.5M to us, nor will you be able to sell the data for even a fraction of that amount on the dark web, what is the least amount you will consider for payment?

01.03.2023 12:41:58 UTC

We are not talking about selling your data. we will put it on our blog for free for everyone if you do not pay. you are negotiating for a very long time, and this will not play into your hands. we know that you are specifically delaying negotiations so that we agree to a lower amount. on the contrary, if you pay quickly we can give you a discount for speed.

01.03.2023 12:49:16 UTC
Avatar
Avatar

What is the discount?

02.03.2023 15:18:22 UTC

we are ready to give you a 30% discount on a quickly payment

02.03.2023 17:42:59 UTC
Avatar
Avatar

Our data is not worth $1M to you or us, but I'll take it to leadship because I'm just the messenger. It will be Monday before I will be able to get back to you. The leadership team will not be around this weekend.

03.03.2023 21:44:28 UTC

I think you'll understand how much your data is worth after it's published. When you incur reputational losses, fines from the state, courts and others. You will lose even more money than we are asking for. For your company, with multimillion-dollar revenues, paying that amount and forgetting about it won't be a big deal. I'm sure your boss has much more money in his personal cryptocurrency account

03.03.2023 21:55:47 UTC
Avatar

when wiil you pay?

08.03.2023 22:34:38 UTC
Avatar

This information is provided by Valéry Marchive