{ "chat_id": "Chat: *************6B2E47", "messages": [ { "party": "Victim", "content": "[Chat started]", "timestamp": "08.05.2023 03:34:30 UTC" }, { "party": "Victim", "content": "give me proof that you have comptomised us", "timestamp": "08.05.2023 03:35:18 UTC" }, { "party": "LockBit 3.0", "content": "Hello.", "timestamp": "08.05.2023 03:41:23 UTC" }, { "party": "LockBit 3.0", "content": "We have about a terabyte and a half of your customer data", "timestamp": "08.05.2023 03:42:40 UTC" }, { "party": "Victim", "content": "ok how do we know that", "timestamp": "08.05.2023 03:43:31 UTC" }, { "party": "LockBit 3.0", "content": "We can provide you file tree of stolen data", "timestamp": "08.05.2023 03:44:14 UTC" }, { "party": "Victim", "content": "let me see that", "timestamp": "08.05.2023 03:44:38 UTC" }, { "party": "LockBit 3.0", "content": "You choose any two files of no more than a megabyte from the ones we stole and we can give them to you.", "timestamp": "08.05.2023 03:45:00 UTC" }, { "party": "Victim", "content": "you dont even know who's data you have stolen ", "timestamp": "08.05.2023 03:49:03 UTC" }, { "party": "Victim", "content": "show me that customer data you think you hv stole it ", "timestamp": "08.05.2023 03:50:43 UTC" }, { "party": "LockBit 3.0", "content": "File: [banksbitree.zip]", "timestamp": "08.05.2023 03:52:55 UTC" }, { "party": "LockBit 3.0", "content": "File: [proofs.zip]", "timestamp": "08.05.2023 03:56:54 UTC" }, { "party": "LockBit 3.0", "content": "BSMCOLLECTION Database (check your last backup from it) - a lot of customers data Some interesting from SPM-HESTU - a lot of customers data Medalion Some from Swift", "timestamp": "08.05.2023 03:57:35 UTC" }, { "party": "Victim", "content": "what price do you want?", "timestamp": "13.05.2023 02:18:44 UTC" }, { "party": "LockBit 3.0", "content": "It depends on your greed, what can the largest bank in the country with multibillion-dollar revenues offer me for a quality pentest of your corporate network?", "timestamp": "13.05.2023 09:13:13 UTC" }, { "party": "Victim", "content": "It looks like you want big things, if that's the case, we'll confirm with other things, do you have a stolen username, password, like a pin or something else?", "timestamp": "13.05.2023 09:56:28 UTC" }, { "party": "LockBit 3.0", "content": "You will find out about this after all the stolen data is published, in case you do not want to pay for a quality pentest of your corporate network.", "timestamp": "13.05.2023 13:29:28 UTC" }, { "party": "Victim", "content": "ok, can I buy for 100,000 USD? you like?", "timestamp": "13.05.2023 14:27:05 UTC" }, { "party": "LockBit 3.0", "content": "20 000 000 $", "timestamp": "13.05.2023 15:31:53 UTC" }, { "party": "Victim", "content": "why is it so big, at least give us 1 sample username and password you stole we will take it at 10,000,000 dollars", "timestamp": "13.05.2023 15:55:53 UTC" }, { "party": "LockBit 3.0", "content": "Your competitors and scammers will be looking for logins and passwords in the databases after the data is published.", "timestamp": "13.05.2023 16:09:30 UTC" }, { "party": "Victim", "content": "So is there anyone else who wants to buy it?", "timestamp": "13.05.2023 16:10:14 UTC" }, { "party": "LockBit 3.0", "content": "We will not disclose this information.", "timestamp": "13.05.2023 16:11:55 UTC" }, { "party": "LockBit 3.0", "content": "An example of a login to the Internet banking.", "timestamp": "13.05.2023 21:31:41 UTC" }, { "party": "LockBit 3.0", "content": "202194016611 20Darkstar94!", "timestamp": "13.05.2023 21:31:50 UTC" }, { "party": "LockBit 3.0", "content": "Would you be more comfortable paying in bitcoin or monero?", "timestamp": "13.05.2023 21:32:16 UTC" }, { "party": "LockBit 3.0", "content": "Be a man, promise - do it.", "timestamp": "15.05.2023 16:37:37 UTC" } ] }