{ "chat_id": "Chat: *************83E679", "messages": [ { "party": "Victim", "content": "[Chat started]", "timestamp": "02.01.2023 19:09:19 UTC" }, { "party": "Victim", "content": "Hello dear sirs, How much to unencrypt files on my network?", "timestamp": "02.01.2023 19:10:34 UTC" }, { "party": "Victim", "content": "bump", "timestamp": "02.01.2023 21:47:37 UTC" }, { "party": "LockBit 3.0", "content": "300 000$ fo all", "timestamp": "03.01.2023 00:04:44 UTC" }, { "party": "LockBit 3.0", "content": "300 000$ for all pc", "timestamp": "03.01.2023 00:05:24 UTC" }, { "party": "LockBit 3.0", "content": "Also, if you have any thoughts of refusing to pay 2023-02-21 07:16:07, we will publish the data that was stolen from your online storage. If you choose to use the backups you have, we will simply publish your company's financial documents. At the moment your documents are being processed in our TOR cloud storage, in about 2 weeks they will be available. For now, we can only report the volume of stolen data - 30 GB.", "timestamp": "03.01.2023 00:20:38 UTC" }, { "party": "Victim", "content": "Thank you for the update. I will let management know.", "timestamp": "03.01.2023 00:26:35 UTC" }, { "party": "LockBit 3.0", "content": "ok", "timestamp": "03.01.2023 00:27:37 UTC" }, { "party": "Victim", "content": "Trying to understand what 300,000 is for. This will unencrypt the files on network? I am being told that some are encrypted with lockbit 2.0 and others with 3.0. Is this able to be done at once?", "timestamp": "03.01.2023 20:04:42 UTC" }, { "party": "LockBit 3.0", "content": "300,000 for all computers. We will give you both versions of the decryptor for both the 2.0 and 3.0 Black versions", "timestamp": "03.01.2023 20:06:33 UTC" }, { "party": "Victim", "content": "And the published data?", "timestamp": "03.01.2023 20:10:21 UTC" }, { "party": "LockBit 3.0", "content": "The data will not be published and will be deleted automatically upon payment", "timestamp": "03.01.2023 20:11:00 UTC" }, { "party": "Victim", "content": "Thank you. I will relay the information.", "timestamp": "03.01.2023 20:13:44 UTC" }, { "party": "LockBit 3.0", "content": "ok", "timestamp": "03.01.2023 20:15:09 UTC" }, { "party": "LockBit 3.0", "content": "File: [files_tree_b4e3588c39.txt]", "timestamp": "05.01.2023 05:26:10 UTC" }, { "party": "LockBit 3.0", "content": "This is a list of your data that was stolen.", "timestamp": "05.01.2023 05:27:13 UTC" }, { "party": "Victim", "content": "Is this a complete list?", "timestamp": "05.01.2023 12:22:15 UTC" }, { "party": "LockBit 3.0", "content": "Yes", "timestamp": "05.01.2023 12:22:46 UTC" }, { "party": "Victim", "content": "Thank you, I will relay.", "timestamp": "05.01.2023 12:23:24 UTC" }, { "party": "LockBit 3.0", "content": "ok", "timestamp": "05.01.2023 12:23:34 UTC" }, { "party": "LockBit 3.0", "content": "any info?", "timestamp": "07.01.2023 19:22:38 UTC" }, { "party": "LockBit 3.0", "content": "http://lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion/post/VYc1R91Gxwt5BDy663ba99b790b12", "timestamp": "09.01.2023 16:43:52 UTC" }, { "party": "Victim", "content": "We are recieving phone call because we are no communicating in chat. I this your team or am I communicating on the wrong channel? I have been tasked in finding out what country your group originates from and if there is any movement on the number you have given?", "timestamp": "09.01.2023 16:45:18 UTC" }, { "party": "LockBit 3.0", "content": "Yes the call was indeed made by us", "timestamp": "09.01.2023 16:46:19 UTC" }, { "party": "LockBit 3.0", "content": "We attack companies all over the world and speak virtually every language.", "timestamp": "09.01.2023 16:50:11 UTC" }, { "party": "Victim", "content": "I'm sure you do, but to which country is the money going when you get paid?", "timestamp": "09.01.2023 16:52:38 UTC" }, { "party": "Victim", "content": "Also, is there a movement on the 300,000", "timestamp": "09.01.2023 16:54:01 UTC" }, { "party": "LockBit 3.0", "content": "The payment is made in BTC cryptocurrency and you will never know about it. However, we can say that we are not political hackers, you just have weak security and we need money, that's all.", "timestamp": "09.01.2023 16:55:29 UTC" }, { "party": "LockBit 3.0", "content": "bc1qx9upga7f09tsetqf78wa3qrmcjar58mkwz6ng6 - BTC wallet", "timestamp": "09.01.2023 16:57:36 UTC" }, { "party": "Victim", "content": "300,000 is a lot of $$. Can that be reduced?", "timestamp": "09.01.2023 16:58:59 UTC" }, { "party": "Victim", "content": "On your feed, it says $500,000", "timestamp": "09.01.2023 16:59:15 UTC" }, { "party": "LockBit 3.0", "content": "If the documents that we have get into the public domain, believe me, this amount will seem insignificant because of the losses that can result from leak", "timestamp": "09.01.2023 17:00:50 UTC" }, { "party": "Victim", "content": "I will take that information back to them.", "timestamp": "09.01.2023 17:02:23 UTC" }, { "party": "LockBit 3.0", "content": "This is the price for your competitors, if someone wants to buy your company's internal documentation, we will sell it to them, but the sooner you pay the amount offered to you, the less likely it is that someone will use the information", "timestamp": "09.01.2023 17:03:05 UTC" }, { "party": "LockBit 3.0", "content": "If you want to keep your data from falling into the wrong hands or other organizations, you need to resolve the $300,000 ransom payment as soon as possible, and the data will be destroyed", "timestamp": "09.01.2023 17:05:09 UTC" }, { "party": "LockBit 3.0", "content": "And accordingly you get a decryptor for both versions of Lockbit 2.0 and 3.0 black", "timestamp": "09.01.2023 17:06:12 UTC" }, { "party": "Victim", "content": "Appreciate the clarification", "timestamp": "09.01.2023 17:07:21 UTC" }, { "party": "LockBit 3.0", "content": "Do you have any new information? Have you started preparing to pay yet?", "timestamp": "10.01.2023 18:07:05 UTC" }, { "party": "Victim", "content": "I do not at this time. ", "timestamp": "11.01.2023 14:37:45 UTC" }, { "party": "LockBit 3.0", "content": "You have 17 days left, we advise you to prepare everything in advance", "timestamp": "11.01.2023 14:38:54 UTC" }, { "party": "Victim", "content": "Noted.", "timestamp": "11.01.2023 15:22:53 UTC" }, { "party": "LockBit 3.0", "content": "Hi, do you have any new information?", "timestamp": "13.01.2023 19:56:20 UTC" }, { "party": "LockBit 3.0", "content": "We are willing to drop the price for you. The final price is $200,000 this is our final offer!", "timestamp": "25.01.2023 17:44:24 UTC" } ] }