{
    "chat_id": "Chat: *************DD3ED9",
    "messages": [
        {
            "party": "Victim",
            "content": "[Chat started]",
            "timestamp": "06.07.2022 14:40:03 UTC"
        },
        {
            "party": "LockBit 3.0",
            "content": "Hello.",
            "timestamp": "06.07.2022 15:06:59 UTC"
        },
        {
            "party": "LockBit 3.0",
            "content": "I think you understand what situation you are in, you have 2 options for the development of events, the first is that you start cooperating with us, pay the amount we need, get the decryptor program, we delete the files stolen from you. Either you keep silent and refuse us and we will start publishing the personal data of your customers, you have a fairly extensive database.",
            "timestamp": "06.07.2022 15:19:04 UTC"
        },
        {
            "party": "LockBit 3.0",
            "content": "little sample from your database export, https://oshi.at/iEbH",
            "timestamp": "06.07.2022 16:28:51 UTC"
        },
        {
            "party": "Victim",
            "content": "Hi,",
            "timestamp": "08.07.2022 13:04:19 UTC"
        },
        {
            "party": "Victim",
            "content": "i have 2 questions How much data in GB or TB have you exfiltrate? And how much would you like?",
            "timestamp": "08.07.2022 13:05:22 UTC"
        },
        {
            "party": "LockBit 3.0",
            "content": "did you get our example? let's say we have more than 1 TB, we will issue all the rest of the information after payment.",
            "timestamp": "08.07.2022 15:37:18 UTC"
        },
        {
            "party": "LockBit 3.0",
            "content": "the decryption price for you is 1.400.000$ after payment, we will immediately issue you a decryptor, a list of databases stolen from you, and also their removal.",
            "timestamp": "08.07.2022 15:39:04 UTC"
        },
        {
            "party": "Victim",
            "content": "yes, could you send me a new sample please ? ",
            "timestamp": "08.07.2022 15:42:40 UTC"
        },
        {
            "party": "LockBit 3.0",
            "content": "One sample is enough. Think about payment, you have little time, our patience is running out.",
            "timestamp": "08.07.2022 15:44:56 UTC"
        },
        {
            "party": "Victim",
            "content": "in fact the files that i've downloaded is an old files, if you don't have a fresher sample, I wouldn't buy it at this price..",
            "timestamp": "08.07.2022 15:54:47 UTC"
        },
        {
            "party": "LockBit 3.0",
            "content": "We will gradually publish the files downloaded from you, first unloading from the databases, then the databases themselves, then the files. You have a price, think. This price also includes the decryptor program.",
            "timestamp": "08.07.2022 16:00:39 UTC"
        },
        {
            "party": "LockBit 3.0",
            "content": "Regarding the relevance of the data, it is strange that fresh dates are registered there, specifically in the first database that is ready for publication.",
            "timestamp": "08.07.2022 16:02:07 UTC"
        },
        {
            "party": "Victim",
            "content": "don't want to negociate ? ",
            "timestamp": "08.07.2022 16:06:12 UTC"
        },
        {
            "party": "LockBit 3.0",
            "content": "Wait for your offers.",
            "timestamp": "08.07.2022 16:06:49 UTC"
        },
        {
            "party": "Victim",
            "content": "ok if you send me a new fresh sample ..",
            "timestamp": "08.07.2022 16:08:44 UTC"
        },
        {
            "party": "LockBit 3.0",
            "content": "You were given one example, that's enough, our task is to show you that we have something, and then think for yourself. I'm listening to your payment suggestions.",
            "timestamp": "08.07.2022 16:12:36 UTC"
        },
        {
            "party": "Victim",
            "content": "ok then I will wait for your first publications ..",
            "timestamp": "08.07.2022 16:18:51 UTC"
        },
        {
            "party": "LockBit 3.0",
            "content": "Good.",
            "timestamp": "08.07.2022 16:20:47 UTC"
        },
        {
            "party": "Victim",
            "content": "For the other targets, you've published different  files and for us just this database extract. so i have a doubt if you have other files, i am ready to negotiate but if you have only this database, it will not be at this price..",
            "timestamp": "08.07.2022 16:32:03 UTC"
        },
        {
            "party": "LockBit 3.0",
            "content": "We are open to negotiations about the price, we have given everything you need. Files will not be opened until publication.",
            "timestamp": "08.07.2022 16:37:04 UTC"
        },
        {
            "party": "LockBit 3.0",
            "content": "Think about your reputation, you have money, pay and keep customer data safe.",
            "timestamp": "08.07.2022 16:38:04 UTC"
        },
        {
            "party": "Victim",
            "content": "see you later .. i'm sorry i'm sick i have the covid ",
            "timestamp": "08.07.2022 16:42:51 UTC"
        },
        {
            "party": "LockBit 3.0",
            "content": "Good luck. Get well.",
            "timestamp": "08.07.2022 16:49:44 UTC"
        },
        {
            "party": "LockBit 3.0",
            "content": "You still have 3 days to think about your clients and make us an offer based on the data we gave you.",
            "timestamp": "08.07.2022 16:51:10 UTC"
        },
        {
            "party": "LockBit 3.0",
            "content": "File: [4.png]",
            "timestamp": "08.07.2022 18:39:16 UTC"
        },
        {
            "party": "LockBit 3.0",
            "content": "One of the bases that is ready for publication on Monday.",
            "timestamp": "08.07.2022 18:39:56 UTC"
        },
        {
            "party": "Victim",
            "content": "We offer you $100,000 for everything, knowing that it's the weekend and everything is complicated",
            "timestamp": "09.07.2022 08:24:21 UTC"
        },
        {
            "party": "Victim",
            "content": "in addition it is the holidays in France",
            "timestamp": "09.07.2022 08:26:40 UTC"
        },
        {
            "party": "LockBit 3.0",
            "content": "I will go to your meeting and make an offer of one day, 600.000 for everything, and the issue with us is closed. Believe me, we don't usually make such offers.",
            "timestamp": "09.07.2022 09:40:35 UTC"
        },
        {
            "party": "Victim",
            "content": "I can't go to a meeting I have covid, but I already know their answer..",
            "timestamp": "09.07.2022 09:58:27 UTC"
        },
        {
            "party": "LockBit 3.0",
            "content": "The initial amount that was billed to your company is 1.400.000, we are ready to meet you and reduce the amount to 600.000 thousand dollars, but this is a one-day offer, after payment you will receive a complete list of the files that we stole from you, we undertake to delete them, and you will also receive a decryptor program that will decrypt all computers that have been attacked on your network.",
            "timestamp": "09.07.2022 10:02:47 UTC"
        },
        {
            "party": "Victim",
            "content": "if I don't have the list of files I couldn't negotiate with the management..",
            "timestamp": "09.07.2022 10:06:28 UTC"
        },
        {
            "party": "Victim",
            "content": "I know that you have the cards in hand, but my hands are tied without the list",
            "timestamp": "09.07.2022 10:07:15 UTC"
        },
        {
            "party": "LockBit 3.0",
            "content": "I've already sent you more than I'm allowed to, and I'm going to meet you. You should work with what you have, if you want to negotiate with us, we are waiting for a new offer from you of a more realistic amount.",
            "timestamp": "09.07.2022 10:12:23 UTC"
        },
        {
            "party": "Victim",
            "content": "I have nothing more to offer you at the moment and the screenshot of the database does not speak to us..",
            "timestamp": "09.07.2022 10:15:27 UTC"
        },
        {
            "party": "LockBit 3.0",
            "content": "Now I will send you a couple more tables from this database.",
            "timestamp": "09.07.2022 10:17:20 UTC"
        },
        {
            "party": "Victim",
            "content": "ok if I have marbles I can negotiate without marbles I cannot .. it\"s a french expression ",
            "timestamp": "09.07.2022 10:19:57 UTC"
        },
        {
            "party": "LockBit 3.0",
            "content": "I will definitely remember this expression. By the way, do not forget about another marbles called the decoder program",
            "timestamp": "09.07.2022 10:21:33 UTC"
        },
        {
            "party": "Victim",
            "content": "The system is gradually getting back in place.",
            "timestamp": "09.07.2022 10:26:31 UTC"
        },
        {
            "party": "LockBit 3.0",
            "content": "https://transfer.sh/iEw0MT/client_hist.xls",
            "timestamp": "09.07.2022 10:28:10 UTC"
        },
        {
            "party": "LockBit 3.0",
            "content": "https://transfer.sh/ogfAkQ/box.xls",
            "timestamp": "09.07.2022 10:28:28 UTC"
        },
        {
            "party": "LockBit 3.0",
            "content": "When you download the files, tell me I will delete them.",
            "timestamp": "09.07.2022 10:28:37 UTC"
        },
        {
            "party": "Victim",
            "content": "ok for me you can delete them",
            "timestamp": "09.07.2022 10:51:24 UTC"
        },
        {
            "party": "LockBit 3.0",
            "content": "done.",
            "timestamp": "09.07.2022 11:15:48 UTC"
        },
        {
            "party": "Victim",
            "content": "you don't have more crunchy ?",
            "timestamp": "09.07.2022 11:21:04 UTC"
        },
        {
            "party": "LockBit 3.0",
            "content": "That's enough, we are waiting for your offer. Everything else after payment.",
            "timestamp": "09.07.2022 11:26:20 UTC"
        },
        {
            "party": "Victim",
            "content": "not for us ..",
            "timestamp": "09.07.2022 11:30:56 UTC"
        },
        {
            "party": "LockBit 3.0",
            "content": "Then wait for publications, 100.000 does not suit us.",
            "timestamp": "09.07.2022 11:31:38 UTC"
        },
        {
            "party": "Victim",
            "content": "sorry , it is not who decides ..",
            "timestamp": "09.07.2022 11:33:38 UTC"
        },
        {
            "party": "LockBit 3.0",
            "content": "maybe it will be clearer",
            "timestamp": "09.07.2022 11:34:23 UTC"
        },
        {
            "party": "Victim",
            "content": "wait and see ... is it sunny in russia? ",
            "timestamp": "09.07.2022 11:41:06 UTC"
        },
        {
            "party": "LockBit 3.0",
            "content": "I don\u2019t know, I think you need to ask Ivan with whom your administrator communicates.",
            "timestamp": "09.07.2022 11:42:01 UTC"
        },
        {
            "party": "LockBit 3.0",
            "content": "Today is a short day, we are waiting for an offer for payment, then we can talk about the weather.",
            "timestamp": "09.07.2022 11:45:09 UTC"
        },
        {
            "party": "Victim",
            "content": "Which of our administrators? sincerely i don't understand ..",
            "timestamp": "09.07.2022 11:53:42 UTC"
        },
        {
            "party": "LockBit 3.0",
            "content": "When we got on [redacted]'s computer, he was in correspondence with Ivan.",
            "timestamp": "09.07.2022 11:55:26 UTC"
        },
        {
            "party": "LockBit 3.0",
            "content": "After payment, you will receive not only a decryptor and deletion of files, but I will also give you a couple of tips for free on how not to get into such situations. I'm waiting for payment offers.",
            "timestamp": "09.07.2022 12:02:21 UTC"
        },
        {
            "party": "Victim",
            "content": "The flaw is the human so unfortunately there will always be flaws.. ",
            "timestamp": "09.07.2022 12:07:50 UTC"
        },
        {
            "party": "Victim",
            "content": "i'm like you, i wait ...",
            "timestamp": "09.07.2022 12:09:12 UTC"
        },
        {
            "party": "LockBit 3.0",
            "content": "Waiting for what?",
            "timestamp": "09.07.2022 12:10:57 UTC"
        },
        {
            "party": "Victim",
            "content": "decision of my direction ...",
            "timestamp": "09.07.2022 12:11:46 UTC"
        },
        {
            "party": "Victim",
            "content": "Is it a good business ransomware?",
            "timestamp": "09.07.2022 12:13:31 UTC"
        },
        {
            "party": "LockBit 3.0",
            "content": "The returns are certainly good, but you have to evaluate the consequences and live with it. This business does not forgive mistakes.",
            "timestamp": "09.07.2022 12:16:02 UTC"
        },
        {
            "party": "Victim",
            "content": "I understand, each his cross ;-)",
            "timestamp": "09.07.2022 12:18:16 UTC"
        },
        {
            "party": "LockBit 3.0",
            "content": "Correctly. How are you feeling ? Is oxygen saturation in the blood normal?",
            "timestamp": "09.07.2022 12:22:59 UTC"
        },
        {
            "party": "Victim",
            "content": "It's good for the moment, I have a fever and I cough ",
            "timestamp": "09.07.2022 12:40:43 UTC"
        },
        {
            "party": "Victim",
            "content": "to prepare the ground, could you send me your bitcoin wallet ? ",
            "timestamp": "10.07.2022 11:58:35 UTC"
        },
        {
            "party": "LockBit 3.0",
            "content": "as soon as you are ready for payment, tell me, I will issue the address. Wallets are valid for a limited time.",
            "timestamp": "10.07.2022 12:01:27 UTC"
        },
        {
            "party": "Victim",
            "content": "ola, if it's too limited it will never work, the processes are long here ... i prefer prepare the ground",
            "timestamp": "10.07.2022 12:06:00 UTC"
        },
        {
            "party": "LockBit 3.0",
            "content": "I need to know the specific time, then I can prepare the wallet.",
            "timestamp": "10.07.2022 12:07:20 UTC"
        },
        {
            "party": "LockBit 3.0",
            "content": "In addition, if we agree on the terms, then I will delete the post from the blog.",
            "timestamp": "10.07.2022 12:08:31 UTC"
        },
        {
            "party": "Victim",
            "content": "i don't know ... it's not my responsibility",
            "timestamp": "10.07.2022 12:08:45 UTC"
        },
        {
            "party": "LockBit 3.0",
            "content": "I understand, but we need to come to something, let's say you say that you will pay within 2 days, during which time I will delete the post from the blog and give you the address.",
            "timestamp": "10.07.2022 12:11:42 UTC"
        },
        {
            "party": "Victim",
            "content": "you will have to leave the wallet for at least a day, otherwise it is not even worth imagining the payment, the decision-making circuits are very very long with us.",
            "timestamp": "10.07.2022 15:08:30 UTC"
        },
        {
            "party": "LockBit 3.0",
            "content": "bc1qp5erh27wesmm8sxljg9p39nua02gd02e4cwk2e",
            "timestamp": "10.07.2022 15:09:20 UTC"
        },
        {
            "party": "Victim",
            "content": "i transfert .. thanks",
            "timestamp": "10.07.2022 15:10:06 UTC"
        },
        {
            "party": "LockBit 3.0",
            "content": "I have deleted the blog post and if things get resolved soon I will delete your files from our servers and issue you with a decryptor. If you make the wrong decision, you know the consequences. I'm waiting for you with news.",
            "timestamp": "10.07.2022 15:13:50 UTC"
        },
        {
            "party": "Victim",
            "content": "Sorry management won't go over $100,000 , i just received the information .. up to you.",
            "timestamp": "10.07.2022 16:55:42 UTC"
        },
        {
            "party": "LockBit 3.0",
            "content": "No, it's up to you, we are not satisfied with this amount.",
            "timestamp": "10.07.2022 16:57:41 UTC"
        },
        {
            "party": "LockBit 3.0",
            "content": "300.000$, our last offer to you.",
            "timestamp": "10.07.2022 16:59:27 UTC"
        },
        {
            "party": "LockBit 3.0",
            "content": "In case of refusal, we will gradually publish your files, starting with OTD_CLIENT and OTD_BOX (full export) - https://ibb.co/Ss8tLh2. Next, we will begin to gradually lay out your entire databases. It will definitely hurt your reputation. For the last time, are you sure about your decision?",
            "timestamp": "11.07.2022 01:39:13 UTC"
        },
        {
            "party": "LockBit 3.0",
            "content": "You can see what I have prepared for publication at this link. http://fqh4kwyk4it3iakg2k6mknglsfrrcuvawhjux3i36j5ocgwicaz7wdad.onion/",
            "timestamp": "11.07.2022 01:39:33 UTC"
        },
        {
            "party": "Victim",
            "content": "150000$ no more .. ",
            "timestamp": "11.07.2022 07:25:52 UTC"
        },
        {
            "party": "LockBit 3.0",
            "content": "I'm starting to post files, all the best.",
            "timestamp": "11.07.2022 08:36:26 UTC"
        },
        {
            "party": "Victim",
            "content": "ok you have the card in your hand, not me .. i'm not decide .. ",
            "timestamp": "11.07.2022 08:54:35 UTC"
        },
        {
            "party": "LockBit 3.0",
            "content": "http://lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion/post/9IlY2fpFeC4ml6Ud62cc276550736",
            "timestamp": "11.07.2022 13:39:28 UTC"
        },
        {
            "party": "LockBit 3.0",
            "content": "The last price is 300.000$ you have 4 hours to make a decision.",
            "timestamp": "11.07.2022 13:41:58 UTC"
        },
        {
            "party": "Victim",
            "content": "Management doesn\u2019t want to pay anymore, not even $100,000, it has reconsidered its decision ...",
            "timestamp": "11.07.2022 13:58:24 UTC"
        },
        {
            "party": "Victim",
            "content": "i finished my work .. bye",
            "timestamp": "11.07.2022 13:58:54 UTC"
        },
        {
            "party": "LockBit 3.0",
            "content": "Bye",
            "timestamp": "11.07.2022 14:00:39 UTC"
        },
        {
            "party": "LockBit 3.0",
            "content": "http://lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion/post/B2WZ7LY40FmXgY1r62cc3b188a595",
            "timestamp": "11.07.2022 15:01:38 UTC"
        },
        {
            "party": "Victim",
            "content": "thanks",
            "timestamp": "11.07.2022 15:15:13 UTC"
        },
        {
            "party": "LockBit 3.0",
            "content": "Just in case management changes their mind and takes care of the customers.",
            "timestamp": "11.07.2022 15:21:28 UTC"
        }
    ]
}