Ransomware

Lockbit Ransomware утечка переговоров

Duty News 0 08.05.2025

[2024-12-19 04:45:24] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

If your archive weighs more than 10 megabytes, please use our file sharing service.
http://lockbitfss2w7co3ij6am6wox4xcurtgwukunx3yubcoe5cbxiqakxqd.onion
http://lockbitfsvf75glg226he5inkfgtuoakt4vgfhd7nfgghx5kwz5zo3ad.onion
http://lockbitfskq2fxclyfrop5yizyxpzu65w7pphsgthawcyb4gd27x62id.onion
For security reasons we do not click on other links you send in chat.
Please wait for a reply, sometimes it takes several hours due to possible time zone differences.

[2024-12-19 05:35:09]

[2024-12-19 05:40:52] how much decrypt file

[2024-12-19 05:41:13] 4000$
we accept bitcoin only

[2024-12-19 05:42:04] realchristmasglobe.zip
not a correct file
send again

[2024-12-19 05:42:08] cant open it

[2024-12-19 05:43:58] you can send test file, dont change the file extension

[2024-12-19 05:44:39] just packing with zip, rar, tar, 7zip, 7z, tar.gz

[2024-12-19 05:45:39] The file is encrypted and has a strange extension.

[2024-12-19 05:50:18] Please tell me your Bitcoin wallet address

[2024-12-19 05:56:13] dont change the extension, just pack it and send through this chat

[2024-12-19 05:57:51] bc1qatkg42cxnv5vcxgz4wegkv2u6va9fztdkf6gwj
0.039611btc

[2024-12-19 22:02:40] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2024-12-20 04:53:06]

[2024-12-20 06:41:15] hello

[2024-12-20 07:49:39] ok wait for the test file

[] 2024-12-20 08:13:09

[2024-12-20 10:18:08] You can give me 10-20 files for test decryption

[2024-12-20 10:55:51] Yes, I checked the number of test files. Please lower the price a little.

[2024-12-20 11:41:40] we can give 3800$

[2024-12-20 12:06:46] bc1qgcfd2evmz4u0fyx3xsv7yft0p9fts06dunc0ec
0.04111btc

[] NULL

[2024-12-20 12:42:54] ok 3600$
10%

[2024-12-20 12:43:15] 0.039011btc

[2024-12-20 12:43:35] Thank you. Is it possible for 0.037?

[2024-12-20 12:44:36] no

[2024-12-20 12:47:31] 0.039011btc

[2024-12-20 12:48:49] Where should I send several files?

[2024-12-20 12:50:11] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2024-12-20 12:50:47] if you upload to sharing page, let us know the download link

[2024-12-20 12:59:55] http://lockbitfskq2fxclyfrop5yizyxpzu65w7pphsgthawcyb4gd27x62id.onion/r/vEtReyad1v#QPZkIQsLLKABpUZckTe5MHuXuZUi3GVBhXt6m8atjwo=

Here download link

[2024-12-20 13:04:25] http://lockbitfskq2fxclyfrop5yizyxpzu65w7pphsgthawcyb4gd27x62id.onion/r/SgE3pjmHkE#OHyHj2oA3VXQc3Pz0XA8L0LD/BFDW/wsuodTaaykoLo=

Second Download link

[2024-12-20 13:19:52]

[2024-12-20 13:27:57] There are too many extensions, so you need to check if they are recovered.
There are about 8 data I sent you. Please recover it.

Also, will the whole recovery be done with one recovery key?

[2024-12-20 13:31:15] Download link:
http://lockbitfsvf75glg226he5inkfgtuoakt4vgfhd7nfgghx5kwz5zo3ad.onion/r/HSEehJRXfr#9wudSp8c7M/xlLatjrtxGmhxNxPrkq1j7lh/qbmtyQw=
Deletion link:
http://lockbitfsvf75glg226he5inkfgtuoakt4vgfhd7nfgghx5kwz5zo3ad.onion/delete/HSEehJRXfr/0qadogcq9jgBSThXFHFK7NVN0L9W91oV

[] NULL

[2024-12-20 13:33:08] Idk why, need investigate it

[] NULL

[2024-12-20 13:36:54] 76fd88eaec2 extension
Can I send you another file?

[2024-12-20 13:37:15] yes, sent me more files please, 100-200-300 small files

[2024-12-20 13:37:20] not important files please

[2024-12-20 13:41:49] What is the maximum file capacity per file?

[2024-12-20 13:43:38] total not more 100 mb

[2024-12-20 13:44:22] Total 100mb???

[2024-12-20 13:48:53] all files in 1 archive not more 100mb

[2024-12-20 13:58:11] Okay, please wait for 1 hoar

[2024-12-20 14:05:50] ok

[2024-12-20 14:46:49] http://lockbitfsvf75glg226he5inkfgtuoakt4vgfhd7nfgghx5kwz5zo3ad.onion/r/wyLX3k62Pg#JRUr+Wm/cheXVQXLKyvw1/Rn0IJ/UZgJLIYj1AsNRfk=

Plz check URL

[2024-12-20 16:43:25] ok

[2024-12-20 18:49:54] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2024-12-20 19:58:53] I found problem, all files was decrypted

[2024-12-20 20:07:09] Download link:
http://lockbitfsvf75glg226he5inkfgtuoakt4vgfhd7nfgghx5kwz5zo3ad.onion/r/Qcs79qUYAq#SL+HZmWVoh8D1pRLAHp1wx3wD9Reym9OWo3mNsPPIks=
Deletion link:
http://lockbitfsvf75glg226he5inkfgtuoakt4vgfhd7nfgghx5kwz5zo3ad.onion/delete/Qcs79qUYAq/B54gJmkcB39b_s31SFepLwT9P0fy4Nks

[2024-12-21 01:22:10] 0.03711btc

[2024-12-21 01:34:01] Okay, please let me know your btc address

[2024-12-21 01:42:23] bc1qgcfd2evmz4u0fyx3xsv7yft0p9fts06dunc0ec

[2024-12-21 02:12:50] Please check BTC

[2024-12-21 02:20:24] checked
wait for the decryptor

[2024-12-21 03:12:40] How long will it take?

[2024-12-21 04:12:25] i remmit to our tech team.
they will send decryptor.
because of time shift difference

[2024-12-21 08:23:54] We are waiting. How long will it take?

[2024-12-21 08:31:05] 5 minutes

[2024-12-21 08:34:43] Okay, Thanks

[2024-12-21 09:05:47]

[2024-12-21 09:27:25] How can I use it?

[2024-12-21 09:39:41]

[2024-12-21 09:41:36] Is this the message you get when you run the file?

[2024-12-22 04:50:06] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[] NULL

[2024-12-22 07:18:07] our files are encrypted with your piece. What to do next?

[2024-12-22 12:33:28] There are too many materials that cannot be recovered.
Why are you doing this?

[2024-12-23 01:16:51] cant recover?
moment i will talk to tech team.
they will assist you

[2024-12-23 01:17:20] can you send me the undecrypted files?

[2024-12-23 08:00:04] try use both decryptors, x32 and x64

[2024-12-23 10:56:21] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2024-12-23 10:57:33] hello sir, can you help me what you need to decrypt my files?

[2024-12-23 10:58:55] 7 DAYS MINI ROLLS UNCOVERED CONDENCED MILK 20gr OPP2.pdf.usKv553SJ this is a sample file

[2024-12-23 11:31:23] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2024-12-23 12:25:03] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2024-12-23 12:27:59]

[2024-12-23 12:28:50]

[2024-12-23 13:10:53] could you please how much it will cost to recover my files because we need to know the costs involved.

[2024-12-23 14:50:20] wait, tech support will send your test files

[2024-12-23 14:51:56] price decrypt 80k in bitcoin, for all hosts and files

[] NULL

[2024-12-23 15:48:41] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[] NULL

[2024-12-23 16:12:12] if you pay quickly and restore the infostructure on the same day

[2024-12-23 16:14:28] I saw your financial report, our price is not big for you

[2024-12-23 16:16:24]

[2024-12-23 16:16:25]

[] NULL

[2024-12-23 16:46:36] ok, we can do a 20% discount

[2024-12-23 17:14:17] First of all thank you for your understanding and the discount you provided.
I appreciate your help on this.
But still we are very far away from what we can really pay.
Still the amount you mentioned after the discount is very hard to find in cash.
We need to take some serious IT decisions tomorrow as most consultants advised us to format and start from latest offline files which will take several days.
So please if you can give us a more grounded financial proposal do so since the purpose here is to see if we can use your services.

[] NULL

[1] Please don’t misunderstand the interest to find a way to pay you with insult. This was not my point. I respect you are talking with us right now and understanding our side. I just want to make it work for our company based on our limitations in cashflow in the end of the year. I know that you don’t care about us. You attacked us after all. I understand that it’s just business for you. Some pay

[2024-12-23 17:35:39] the price will be 60k your decision to pay or not.

[2024-12-23 17:56:21] Is there a way to recover 2-3 computers with 15k and get a partial service from your side? So we can see the quality of your service that is valid and then during next year purchase some more bundle of computers? I am just exploring options here to help our operations based on our cashflows.

[2024-12-23 17:58:44] no, the decryptor will be available for all your files with the extension

[] 1

[2024-12-24 14:02:45] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2024-12-24 16:32:59] Hello sir, could you please accept the price of 30000$ before the end of the year so we can catch up with the processes to pay you in full for the full service you provide? It will take a lot of effort for us to return to normality so we can see this as a successful penetration test from your team and justify the expenses we need to pay to your work. Mention we need some days to manage to pay this huge amount of money so we need your understanding on this.

[we will try to convey information about the leak of your data to each of these contacts.

We offer you to make a deal and resolve this issue smoothly] Hello, Gelco Gelatinas do Brasil Ltda

Your network was penetrated, servers were completely encrypted with our special algorithm, and also we has downloaded sensitive Data from your file servers. In case if you won’t cooperate with us

[1] you can pay 50k, but the offer will be available for a some days
if you can’t pay on the weekend

[2024-12-24 18:43:50] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2024-12-24 18:47:13] test

[2024-12-24 21:03:25] Please stay with me on this. Even if we find a way to work together, the amount is too big to find it these days. Last two years it’s been very hard for us and it’s the end of the year. We are trying to find whatever resources are available in cash and let you know. In the following two days we will have a better picture on our financials. We need at least 6-7 days to find 30k, we will need more to get more money to you. There is very limited cashflow in the end of the year which makes things very hard. Let me see what we can do and get back to you. I will try my best, because we want this to finish soon. There is big spending in the end of the year and limited cash receivable. Need more time to see what we can do for you.

[2024-12-25 06:05:52] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2024-12-25 11:20:24] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2024-12-25 20:30:36] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2024-12-25 20:33:52] 6BA7CD34DF04E6E22F9D36C4474D737F

[2024-12-25 20:50:50] hello

[2024-12-26 19:07:02] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2024-12-26 19:12:29]

[2024-12-26 19:13:30] please decrypt file

[2024-12-26 19:30:00] Hello, please wait, we will check your file

[2024-12-26 19:30:07] ?

[2024-12-26 21:36:57] ok, I wait

[2024-12-27 02:59:23] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2024-12-27 10:16:45] hello sir, can you please let us know how we can do the payment?

[2024-12-27 12:53:43] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2024-12-27 12:54:26] hello, btc wallet: 1PKzZhK35fvszaHBdyAwHTRtEoJwjR1ocD

[2024-12-27 13:00:43] Good day. It is not necessary to test with a file. We trust you. We made a security mistake. Please tell us how we proceed so we can recover all the information.

[2024-12-27 13:08:42] We managed to gather this amount you requested. It’s been very hard.

Please let us know if you accept the following.
When we pay 50.000$ USD to this wallet 1PKzZhK35fvszaHBdyAwHTRtEoJwjR1ocD you will keep your promise to:

Give us a tool to decrypt all our files in ESXi and all computers affected and we will decrypt today
Provide technical support from your side in case something doesn’t work
Promise you will never attack us in the future
Help us understand how we can prevent such incidents again in the future and explain how you managed to get in our infrastructure along with technical details.

When we have your replies and confirmation for the above we proceed in the payment.

[2024-12-27 13:18:22] 1. there will be no problems with the decryptor,for esxi and all windows files

you will need to disable your av and just run the .exe decryptor
it could be someone else
you know your pass P@ssw0rd

[2024-12-27 13:20:28] if we pay in the next hour when we will get decryptor?

[2024-12-27 13:24:37] i make a request to tech support, it can take from an hour to five hours

[2024-12-27 13:26:16] shall we sent 10$ just you to confirm and then send the rest 49990 ?

[2024-12-27 13:27:13] ok

[2024-12-27 13:28:25] Hello again, were you able to see my file?

[2024-12-27 13:31:24] https://mempool.space/tx/afa41038f76e6616814e5c4d4bc7a4907d15d41dac5bf782af42dc2fbbc5c11f can you confirm you received this ?

[2024-12-27 13:34:48] yes 0.00010389

[2024-12-27 14:12:01] bitcoin seller sais you got the money. Please confirm
https://mempool.space/tx/c3137291d4c673e21f282e346338568f26f7b7c3558c82392bca6d31c66166b2

[2024-12-27 14:19:47] is ok, thank you

[2024-12-27 14:24:03] wait pls, tech support will drop decryptor here

[2024-12-27 14:24:15] ok

[2024-12-27 14:27:31]

[2024-12-27 14:32:37] this is not decryptor

[2024-12-27 14:37:36] yes, decryptor we wait

[2024-12-27 15:14:22] If your archive weighs more than 10 megabytes, please use our file sharing service.
http://lockbitfss2w7co3ij6am6wox4xcurtgwukunx3yubcoe5cbxiqakxqd.onion
http://lockbitfsvf75glg226he5inkfgtuoakt4vgfhd7nfgghx5kwz5zo3ad.onion
http://lockbitfskq2fxclyfrop5yizyxpzu65w7pphsgthawcyb4gd27x62id.onion

[2024-12-27 15:14:33] Work on it

[2024-12-27 15:14:44] hello

[2024-12-27 15:15:31] pay

[2024-12-27 15:15:55] what you offer?

[we will try to convey information about the leak of your data to each of these contacts.

We offer you to make a deal and resolve this issue smoothly] Your network was penetrated, servers were completely encrypted with our special algorithm, and also we has downloaded sensitive Data from your file servers. In case if you won’t cooperate with us

[2024-12-27 15:21:59]

[2024-12-27 15:28:08] Ok, we have already sent the requested file.
Unfortunately we do not have that figure. We are willing to pay but we cannot get close to that number.

[] NULL

[2024-12-27 15:46:40] MDF it,s important file DB, will decrypted only after payment, give me any not important files for free test decrypt

[2024-12-27 15:48:49]

[2024-12-27 15:49:34]

[2024-12-27 15:51:18]

[2024-12-27 15:52:23] The price that was requested was formed based on the indicators of your company. And this price is individual for you. In fact, we very rarely take such low amounts.

[2024-12-27 15:55:19] What about esxi ?

[2024-12-27 15:55:38]

[2024-12-27 15:55:52] Give me readme file from esxi

[2024-12-27 15:57:26] ok give me 5 minutes

[] NULL

[2024-12-27 16:13:48] It works, thanks

[2024-12-27 16:18:02]

[2024-12-27 16:25:48] Right now I have $1500

[2024-12-27 16:30:50] the VMDK files cannot be decrypter with the .exe decryptor. could you please send decryptor for VMDK in ESxi based on the txt file i sent you 15 minutes ago ?

[2024-12-27 16:31:33] yes

[2024-12-27 16:31:38] wait 5 minutes

[2024-12-27 16:36:55]

[] NULL

[2024-12-27 16:40:31] only linux

[2024-12-27 16:42:05] please provide command line instructions to run linux

[2024-12-27 16:55:40] 1. Could you please tell me which commands to run on ESXi step by step in order to decrypt all files?

Is there a chance that something goes wrong when i execute this decrypt_ESXI_X64 command on ESXi? Do i lose all the VMDK files in the server?

[] NULL

[2024-12-28 16:04:54] We have already written you all the necessary information.

[2024-12-28 16:05:37] We will not accept even 10 or 20 thousand dollars. So please do not waste our time and yours.

[2024-12-28 19:17:25] i need to fix this issue

[2024-12-28 19:21:01] i need to fix this issue

[2024-12-29 16:00:59] you need pay

[2024-12-29 19:05:27] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2024-12-29 19:06:35] Test

[2024-12-30 09:28:33] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[] NULL

[2024-12-31 15:18:32] Please read carefully what we wrote to you earlier.

[2024-12-31 15:24:51] I read. But its impossible to me. Thats why IÂ´m still beggin you

[] NULL

[2025-01-01 13:33:46] We don’t mind the information being published. You can do it without problem. It’s not sensitive at all. In our country, financial information is public. We just need to go into production. I repeat, publish or sell what you want.

[2025-01-02 11:56:39] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-01-02 13:18:36] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-01-02 13:19:54] Hello, how can we recover our server from this ransomware???

[2025-01-02 14:55:33] Hello, you need pay 50k in bitcoin

[2025-01-02 14:58:57] ok

[2025-01-02 17:20:10] guaranteed?

[2025-01-02 18:19:36] we can make a test decrypt, and google will also tell you about us

[2025-01-02 18:22:12] okay. Please, wait. Let me collect some files first

[2025-01-02 19:09:30] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-01-02 20:01:31] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-01-03 04:50:47] please get us the decryption process very soon as our management is frustrated. We can offer upto $55,000. What say?

[2025-01-03 04:52:01] how much?

[2025-01-03 13:27:18] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[we will try to convey information about the leak of your data to each of these contacts.

We offer you to make a deal and resolve this issue smoothly] Hello, Gelco Gelatinas do Brasil Ltda

Your network was penetrated, servers were completely encrypted with our special algorithm, and also we has downloaded sensitive Data from your file servers. In case if you won’t cooperate with us

[]

[2025-01-03 14:18:24] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-01-03 14:19:43] hi

[2025-01-03 14:19:52] hi

[2025-01-03 15:17:02] 100kk usd

[2025-01-04 19:23:03] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-01-04 19:25:34] hi

[2025-01-04 23:15:07] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-01-04 23:15:40] hi

[2025-01-05 09:21:15] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-01-05 09:23:45] Hi

[2025-01-05 09:53:55] Please Help

[2025-01-05 09:59:24]

[2025-01-05 10:26:19] hello

[2025-01-05 13:06:05] We want to buy decryptor.

[2025-01-05 14:20:24] wait pls, test decryptor will be sent later by tech support

[2025-01-05 14:25:43] Test Decryptor will be share here?

[2025-01-05 14:27:00] yes here

[2025-01-05 14:27:15] Ok

[2025-01-05 14:28:30] Dear, what are the pricing for full files decryptor?

[2025-01-05 14:32:13] 40k$ in bitcoin, there will be a discount if you pay fast

[2025-01-05 14:33:26] Dear dont tell the price that will give me heart attack. I am just a IT guy working in the company. My family depends upon my job.

[2025-01-05 14:35:41] Dear forty thousand dollar is my 6 years salary.

[2025-01-05 14:37:46] I am begging you. This much big amount i cannot handle.

[2025-01-05 14:45:12] your company will pay

[2025-01-05 14:46:43] Dear, my company is very cruel. They will terminate mad file case upon me and put me in jail.

[1] I can’t help you

[] NULL

[2025-01-05 15:24:30] Dear, I will pay up to maximum of 1000 dollar. That is the maximum what I can arrange from my end. Still you are asking that u need more money then I am helpless. Already my company is in the verge of closing. Having some legal issues and all. If you have any friends in UAE you can check about my company.

[2025-01-05 15:27:13] If you help me i can continue working here till my company shuts down. Otherwise like I said earlier my company will file a legal case on me and they will terminate me and impose working ban on me in UAE. At the end my life will get spoiled. Believe me dear, my company will not be in much interested in recovering data and all. If you can understand my situation please help me.

[2025-01-05 16:22:31] hi

[2025-01-05 16:22:48] you can better

[2025-01-05 16:24:48] You can better

[2025-01-06 08:27:35] hi

[2025-01-06 09:14:51] hello

[2025-01-06 12:56:27] hi

[2025-01-06 13:02:49] hi

[2025-01-06 13:32:35] $500 is ok?

[2025-01-06 13:57:13] Max is $1000.

[2025-01-06 13:58:36] if this is ok, then we deal. Ok.

[2025-01-06 16:07:50] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-01-07 12:04:38] Hello

[2025-01-08 15:34:43] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-01-08 15:36:42] hello boy

[2025-01-08 15:37:33] Hi

[2025-01-08 15:44:14]

[2025-01-08 17:10:34] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-01-08 18:30:18] 40k$ in bitcoin

[2025-01-09 22:17:00] sALUT

[2025-01-09 22:20:56] c combien pour respirer

[2025-01-09 22:21:24] CEST 100 MILLE

[2025-01-10 07:19:39] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[] 2025-01-10 08:35:53

[2025-01-10 10:45:03] too low

[2025-01-10 13:09:33]
ok

[2025-01-11 06:14:58] suggest!

[2025-01-11 07:12:48] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-01-11 07:14:54] demand?

[2025-01-12 03:23:11] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-01-12 03:24:25] how much

[2025-01-12 03:25:02] hello 0.05 btc

[2025-01-12 08:21:00] 70000$ final

[2025-01-12 08:21:31] 150000$

[2025-01-12 08:23:15] offer?

[2025-01-13 10:41:17] Hello

[2025-01-14 00:40:31] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-01-14 00:42:55] http://lockbitfss2w7co3ij6am6wox4xcurtgwukunx3yubcoe5cbxiqakxqd.onion/r/89qtzxBe5j#jlgqAzBrKJoqxx2kCjl94nQj3Luoo0ublny1pcbkY8w=

[2025-01-14 00:47:06] Hello.
How can I recover my data?
Please let me know the price
Please also check the semple file.

[2025-01-14 04:30:32] hellow

[2025-01-14 06:18:04] hi

[2025-01-14 09:32:49] hello, you need pay

[2025-01-15 00:07:44] how much

[2025-01-15 00:45:29] 4k$

[2025-01-15 00:46:00] usd 4000?

[2025-01-15 00:46:21] yes

[2025-01-15 00:57:22] we do test decrypt 1 file
read the prvious chat and upload the test file
then send to us the link

[2025-01-15 00:58:49] http://lockbitfss2w7co3ij6am6wox4xcurtgwukunx3yubcoe5cbxiqakxqd.onion/r/89qtzxBe5j#jlgqAzBrKJoqxx2kCjl94nQj3Luoo0ublny1pcbkY8w=

[2025-01-15 01:00:00] ok we remit to our tech team the test file

[2025-01-15 02:10:07] wait for the test file

[2025-01-15 06:00:23] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-01-15 06:01:38] ADDB2DB4249F74FC85B9D8AECF5608D7, my code, how much pay?

[2025-01-15 06:04:31] 4000$

[2025-01-15 06:15:18] we accept bitcoin only
you can do test decrypt with 1 file
upload the test file which you want, then send the link
read the previous chat for the upload test file

[2025-01-15 08:40:46] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-01-15 08:47:54] hi

[2025-01-15 08:48:41] 4000$ decryption key price

[2025-01-15 08:48:45] we accept bitcoin only
you can do test decrypt with 1 file
upload the test file which you want, then send the link
read the previous chat for the upload test file

[2025-01-15 09:28:26] plz send me more test file

[2025-01-15 10:04:47] plz send me your ID which you get in readme.txt file. so plz send here

[2025-01-15 10:35:31] or send the README file
for the check your files

[2025-01-15 14:59:11] Good morning. To get back to this, we can offer you $22,000.

[2025-01-15 15:08:09] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-01-15 20:12:17] The price is 50,000 dollars.

[2025-01-16 04:34:08] hi

[2025-01-16 07:43:04] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-01-16 11:01:03] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[]

[2025-01-16 14:35:15] We will offer decryption and deletion of all date for 110k$ in btc or 90k$ in xmr. price is suspect to change.
do not waste yours and our time.

[2025-01-16 23:51:37] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-01-16 23:52:39] hello

[]

[2025-01-17 01:51:10] hi our price is 4000$
we accept bitcoin only
wait for test decrypt
i will remitt to our tech team

[2025-01-17 01:53:11] Ok

[2025-01-17 03:36:26]

[2025-01-17 03:47:16] I have a picture of my deceased parents. Please help me see it again. I have no money because I am unemployed. Please help me take a picture of my parents

[2025-01-17 03:49:45] we can help you
but you need to buy our decryptor

[2025-01-17 03:50:06] you can restore all of date. all of it with our decryptor

[2025-01-17 03:53:22] I don’t have much money because I’m unemployed, please

[2025-01-17 04:29:36] we can give 3800$
accept or not. its your choice.
we dont do less than that amount

[2025-01-17 07:57:18] if you want send 3800$ btc and decrypt all your files

[2025-01-17 10:32:24] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-01-17 10:34:20] hello

[2025-01-17 10:34:32] hello

[2025-01-17 10:35:52] Support me to decrypt the files

[2025-01-17 10:36:37] price 0.05 btc

[2025-01-17 10:41:20] btc means

[2025-01-17 10:42:03] bitcoin

[2025-01-17 10:45:01] we don’t have any bitcoin and we don’t have the knowledge about bitcoin please support me

[] 2025-01-17 11:09:45

[2025-01-17 12:13:06] Download link:
http://lockbitfsvf75glg226he5inkfgtuoakt4vgfhd7nfgghx5kwz5zo3ad.onion/r/xFucan6eD8#VpxlEbM0B9evanlcU+yJT1oYus4JCX1v2axC0I5rqik=
Deletion link:
http://lockbitfsvf75glg226he5inkfgtuoakt4vgfhd7nfgghx5kwz5zo3ad.onion/delete/xFucan6eD8/9MCyuCtzVjoSSkyQmdEUavp155LaS66p

[2025-01-17 13:20:08] you need help buying BTC?

[2025-01-17 14:08:33] https://trustwallet.com/blog/how-to-buy-bitcoin-using-trust-wallet-a-visual-guide

[2025-01-17 16:34:53] so you need decrypt the files or not?

[2025-01-17 18:40:54] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-01-17 18:42:00] Hi

[2025-01-17 18:46:00] my files are encrypted

[2025-01-17 18:49:42] can you help me

[]

[2025-01-17 19:29:58] i have a path yes its desktop folder a file DaviniLok.xlsx that i need and loots more files from my desktop

[] NULL

[2025-01-17 19:32:05] we dumped postgres databases and downloaded all management shares

[2025-01-17 19:35:08] i cant upload the file i got errors my browser works also not good anymore it closes randomly. can you help ,me

[2025-01-17 19:35:49] Do you use the latest version of Tor Browser?
https://www.torproject.org/download/

[]

[2025-01-17 19:36:56] yes.
so what is the problem?

[2025-01-17 19:37:12] Who are we talking to? User or Admin?

[2025-01-17 19:39:43] i am from the staff. i am one of the computer study teachers, helping to manage our data. i know a bit if you send me an instruction i think i can fix our computers again

[2025-01-17 19:40:07] What institution do you belong to? topackt?

[2025-01-17 19:42:16] as far i know they manage a part of our network. but i am part of the a school

[2025-01-17 19:42:32] which one

[2025-01-17 19:45:16] entire topackt network has been attacked. its their fault for unsecure systems.
we are here to help resolve this for the better of both sides.

[2025-01-17 19:47:19] Sorry got disconnected again
thats our address and name

UniversitÃ¤t Mannheim
68131 Mannheim

[2025-01-17 19:51:14] You are using dnsx.topackt.net as domain?

[2025-01-17 19:51:43] For Active Directory?

[2025-01-17 19:53:32] can you tell which SERVERxx your network is using?

[2025-01-17 19:59:12] i asked colleges we are not sure about the serverXX details. i think that is managed by our external domain manager. dns is correct

[2025-01-17 20:00:07] how many servers/machines are affected from you?

[2025-01-17 20:04:39] We will offer decryption and deletion of all data from entire topackt network for 110k$ in btc or 90k$ in xmr.

[2025-01-17 20:05:26] i dont need topackt stuff just our school please its about 20 computers

[2025-01-17 20:06:52] at least where we found corrupted files.

[2025-01-17 20:11:33] and i checked thats not possible to pay for us we are just a small school its about 21109767 US Dollars

[2025-01-17 20:20:21] you misunderstood.
110 000 US Dollars in Bitcoin or 90 000 US Dollars in Monero

[2025-01-17 20:20:49] unfortunately we can’t offer you decryptor for single institution. decryptor is for entire topackt system. we can’t guarantee you are not giving it away for lower price you should probably contact topackt and demand resolution with us.

[2025-01-17 20:21:37] that is low price in comparison to network size and data stolen

[2025-01-17 20:21:55] if you have any more questions please let us know

[2025-01-17 20:25:04] we are sorry that we cant help you

[2025-01-17 20:27:24] if you contact topackt please let us know!

[2025-01-17 20:27:34] i will contact you later again i try call them if they will contact with you

[2025-01-17 20:27:45] okay

[2025-01-17 20:28:23] What do you think how long do you need for answer?

[2025-01-17 20:31:23] could take until monday i cant reach them now its weekend

[]

[2025-01-17 20:38:44] Please I need to solve it for less than, $30,000?

[2025-01-17 20:40:13] No

[2025-01-17 20:40:17] The price is 50,000 dollars.

[2025-01-18 02:00:55] after 48 hours price will be 0.1 BTC

[] NULL

[2025-01-18 15:59:39] ok

[2025-01-20 02:39:55] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-01-20 02:44:12] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-01-20 02:46:22] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-01-20 03:20:23] hello

[]

[2025-01-20 12:30:40] any update?

[2025-01-20 15:07:02] we can setup for 1.2. What say? If yes, send your address. We will release the funds ASAP

[2025-01-20 15:07:45] 150000$

[2025-01-20 15:10:02] Plzzz help us!

[2025-01-20 16:53:18] pay us

[NULL] Hi, I’m doing my best to get to that price

[2025-01-21 22:31:14] your data was uploaded to the blog. publishing soon.

[2025-01-22 06:08:07] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-01-22 06:22:30] hello

[2025-01-22 06:33:19] need help?

[2025-01-22 06:40:33] how much ? 299564376E3189C3664ECBC8C2ABDA21

[2025-01-22 06:49:29] 0.04 btc

[2025-01-23 00:53:33] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-01-23 00:55:58] Please show me that you can decrypt my files.

[2025-01-23 01:35:57] Can the price be a little cheaper?

[2025-01-23 01:38:39] 0.0097 BTC,OK? There is not much data on this machine, and the data file size is very small.

[2025-01-23 02:02:21] hi

[2025-01-23 02:02:24] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-01-23 02:50:51] HOW MUCH DO YOU WANT TO GIVE US OUR DATA?

[2025-01-23 03:04:41] hi

[2025-01-23 03:05:34] 0.012 ok

[2025-01-23 03:06:16] if you pay today

[2025-01-23 03:07:48] you need to pay 40k $, all your files and pc will be decrypted

[2025-01-23 03:20:02] MY FILES ARE NOT WORKING
I FOLLOWED YOUR INSTRUCTIONS AND THEY ARE NOT WORKING

[2025-01-23 03:21:07] I WANT TO SEE ONE OF MY DATABASES WORKING OTHERWISE WE RESTORE AND LOSE 10 DAYS WORTH OF WORK.

[2025-01-23 03:30:49] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-01-23 03:38:43] who a you

[2025-01-23 03:39:48] whts?

[2025-01-23 03:47:42] I USED THIS LINK
http://lockbitfskq2fxclyfrop5yizyxpzu65w7pphsgthawcyb4gd27x62id.onion
AND SUPPOSEDLY WAS SUPPOSED TO WORK AND DOESNT.

[2025-01-23 03:51:06] try to upload other files, no larger than 10 megabytes

[2025-01-23 03:51:40] no deal. I need to see one of my databases work and thats over 100.

[2025-01-23 03:53:37] like i said. we have a backup thats 10 days old

[2025-01-23 03:56:17] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-01-23 03:57:14]

[2025-01-23 03:58:11] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-01-23 04:20:08] ok, need to wait for tech support

[2025-01-23 05:57:39] time

[2025-01-23 07:21:18] time

[2025-01-23 11:54:38] ?

[2025-01-23 11:59:55]

[we will try to convey information about the leak of your data to each of these contacts.

We offer you to make a deal and resolve this issue smoothly] Hello, Gelco Gelatinas do Brasil Ltda

Your network was penetrated, servers were completely encrypted with our special algorithm, and also we has downloaded sensitive Data from your file servers. In case if you won’t cooperate with us

[2025-01-23 13:08:45] Hello?

[2025-01-23 13:18:28] Sorry, I could get $40,000 by Monday.

[2025-01-23 14:45:02] You are a company that helps the affected company solve this problem. Is that correct?

[2025-01-23 15:36:28]

[2025-01-23 16:26:44] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-01-23 17:27:51] Yes, but they are holding me responsible.

[2025-01-23 23:41:04] We would like to contact you in a private chat, where we will be alone to discuss all the details. There may be strangers in this chat.
Let me know when you are online, and I will explain to you how it works.

[2025-01-24 03:40:40] hi,are you online

[2025-01-24 03:44:13] Please send me your BTC address so that I can transfer 0.012 BTC to you

[2025-01-24 03:44:54] ok

[2025-01-24 03:46:58] hi

[2025-01-24 03:48:00] wallet btc bc1qqg25vczshru43759j4xdxchzjnhwjx2pt2cg86

[2025-01-24 03:48:05] OK

[2025-01-24 03:49:06] I will first ask the customer to collect the money, and once I receive it, I will transfer it to you immediately. Thank you.

[2025-01-24 04:03:08]

[2025-01-24 04:20:25] ok wait test

[2025-01-24 04:32:31] Okay, please prepare the decryption program first

[] NULL

[2025-01-24 05:10:44] ok

[2025-01-24 06:59:28] After you receive the decryption program, please speak up

[2025-01-24 07:00:52] after payment you receive the decryption tool

[] 2025-01-24 07:02:17

[2025-01-24 07:08:36] What kind of file did you drop?

[2025-01-24 07:11:44] unimportant file?

[2025-01-24 07:16:15] No lost files

[2025-01-24 07:17:24] I am communicating with the client regarding payment

[2025-01-24 07:20:30] wait your payment

[2025-01-24 07:21:06] OK

[] NULL

[2025-01-24 14:24:47] online now?

[2025-01-24 16:34:45] yes

[2025-01-24 16:35:30] ready get instructions?

[2025-01-24 16:35:55] yes

[2025-01-24 16:36:31] Private ID for chat: E8CE7416FADFBF2998576A6DA6B39B90

You can reach us at any of these links using a Tor browser:
lockbitspbsvke7ucgvegltl4acagjjjfkhoi4efxti7gyw742jgjeyd.onion
lockbitspchsxta4gug5wj5tdsvvmbtqdjmtqfwdoeqfodqzpkmviyqd.onion
lockbitspckzvghfqwd6uowk2y6gtb4ltbd3miqp53okfkc3j5rrunqd.onion
lockbitspfigqwjpd6v3az57xpykygkpdzb4xz2imwnxckxh7oyvxuyd.onion
lockbitspgsxzkoi2cuwklu6hzvuvoj4qggvqwan3nr4zy7ge3s7rtad.onion
lockbitsphuk6bewb76nn6pq2dcw6u7kbzx4rp5mvgzraskj4gyyl7id.onion
lockbitspjln7rlayanfewft36hu5ip3ulrnyfk7y77w2y7rkwg5suad.onion
lockbitspmfikdtsswdeiaseskw5xewt4ysohdgtdrt4mhr3t3mau3qd.onion
lockbitspnnpn6o22ze6hls7vrsgoko5ntzzjbyqindurhzkfq6gawqd.onion
lockbitspoh4rbo5akzr6lfic7djrynna6ppgybmvgorvm2fz7vhqpqd.onion
lockbitspomtxfihje6wepecgif7vuqci6zyl7qgenne5b6lxngf4yqd.onion
lockbitsppra2sj6gkfrgtavqds7rcnvhaxdio7jvu2xrozdr2ld3ead.onion
lockbitsppsg2kfcafzzdettjbgc4tx2cl6tfm4v4py6xtndbhnnhsid.onion
lockbitspqldd3mm223vmzcvwntd7honhhan3ke72vpnrxexlrsu5ryd.onion
lockbitsprnigidq6imswpysqjg3sewkeagtfbamlybwm7fnonglhlyd.onion
lockbitsptqsmaf56cmo7bieqwh5htlsfkodpahsaurxlquoz67zwrad.onion
lockbitspudgjptrzadjzi7b4n2nw3yq6aqqqqw6wbrrjkr2ffuhkhyd.onion
lockbitspxgtf65ej7uu5h7qtephbevcsc2sk2brxzmt754etrrzhdqd.onion
lockbitspxmqqfi6bw4y7f5psnpoaakhlisdx33busmnpgtimart5fad.onion
lockbitspyakyequybgwgwauhzqxx7ba2gh3lmlj3zyeuaknrexdzfid.onion

[2025-01-24 16:36:48] please make new chat and we will block this chat

[2025-01-24 16:37:40] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-01-24 16:37:51] hi

[] 2025-01-24 16:38:46

[2025-01-24 16:38:48] The previous public chat has been blocked. Now we can communicate with you privately.

[2025-01-24 16:39:42] We know about the TOX conversation and that you have already agreed to a price of $50,000.

When will you be ready to pay? How much time do you need?

[2025-01-24 16:41:17] 50,000 is really difficult for me. What is the lowest price you can give me?

[2025-01-24 16:45:03] So in the last chat you agreed to the amount of 40,000 dollars.

We do not agree with this price.
But we agree to give you a discount of 5,000 dollars, and the final price will be 45,000 dollars, but on one condition: that you make the payment within 24 hours.
Do you agree?

[] NULL

[2025-01-24 17:01:20] We offer you the following options:

Main Option:
The main payment is due on Tuesday. Find an additional $5,000 to bring the total payment to $45,000.

We are willing to offer you an alternate option:
If you make a $5,000 deposit today, we will give you a $5,000 discount and you can pay the balance of $35,000 on Monday or Tuesday.

Which option do you choose?

[2025-01-24 17:13:10] Ok I would accept the second option. Today I could transfer the 5000, I need the instructions. On the other hand, I would appreciate it if you could send me some other file, of your choice, so that I know that I am not spending the money uselessly.

[]

[2025-01-24 17:24:17] We always focus on the time zone UTC+0, so you have approximately 6.5 hours.

[2025-01-24 17:33:02] Perfect. I’m getting everything ready. I’m waiting for the address.

[2025-01-24 17:55:12] This is bitcoin wallet address for payment:
bc1q6tqarpua79kwqr0u6np9ac4faqv5hz96rhl92v

[2025-01-24 17:56:15] We are currently preparing a partial file tree for you. This will take some time.

[2025-01-24 18:41:30] Good

[2025-01-24 19:17:23]

[2025-01-24 19:17:45] Please select a file and we will send you the original file.

[2025-01-24 19:30:44] .\Datos\MCasella\PC\NICATEL\EMPLEADOS\SUELDOS\PLANILLA ARCHIVO SANTANDER\11.2024\Planilla adelantos Santander 11.2024.txt

[2025-01-24 19:32:03] Please, could you also confirm that you have the original .mfd files and show me their names?

[2025-01-24 20:19:13]

[2025-01-24 20:20:20] Perhaps you are not talking about “mfd” files, but about “mdf” database files?

[2025-01-24 20:24:32] All the files we downloaded from you are in perfect order, and they are whole and functioning.
We sent you a list of files, a partial file tree, which contains about 5% of all the files we downloaded. The full file tree + full logs of deleting these files from our servers you can get only after payment.

[2025-01-24 20:46:57] Yes, sorry I mean MDF

[2025-01-24 20:52:32] I see that these files are not in the partial file tree. They may be in the general list, but you will be able to see it only after payment. In any case, if these files are there, they are in perfect order. But you should not worry about this, because after payment you will also receive the decryption keys for the files, and you will be able to decrypt your files if they are encrypted and do not function for now.

When will you make the payment? We have fulfilled the conditions on our side. You have about 3 hours left.

[2025-01-24 20:55:42] Well, we trust you.
Payment will be made today. We are working on it.

[2025-01-24 21:45:43] Ok, we are waiting.

[] 2025-01-24 21:50:54

[2025-01-24 22:08:59] ok

[2025-01-24 22:45:13] Done

[2025-01-24 22:46:24] you need the id?

[2025-01-24 23:00:37] Everything is fine. We have received your advance payment. We will wait for the rest of the money from you, Monday or Tuesday. $35,000.

[2025-01-24 23:01:22] thanks

[]

[] NULL

[2025-01-25 11:45:25] will decrypted only after payments

[2025-01-25 12:13:56]

[2025-01-25 20:15:06] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-01-25 20:17:21] Good afternoon, we are interested in recovering our data, how should we proceed?

[2025-01-26 00:37:44] hi

[2025-01-26 00:48:54] price for decryption and deleting your data from our servers is 1 BTC.

[2025-01-26 00:59:12] You can upload a few non-important files to this chat for the test. After payment, you get the tool for ESXI and WINDOWS. Run the tool and your data will be decrypted.

[2025-01-26 02:47:36] ?

[2025-01-26 09:27:47] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-01-26 13:56:04] From Brazil

[] NULL

[2025-01-26 13:59:14] your offer

[2025-01-26 14:01:58] 1k USD

[2025-01-26 14:02:48] Unreal

[2025-01-26 14:13:00] https://www.zoominfo.com/c/isac/466561182

[2025-01-26 14:15:34] When the timer expires, the decryptor will be deleted and your data will be published

[2025-01-26 14:18:07] Dear Sir, ISAC is a social organization that cares for the health of the people, with scarce resources and without government help.
1 BTC is completely unrealistic, considering the inflation of our currency against the dollar.
Please carefully consider the possibility of making this concession.
Thank you!

[2025-01-26 14:22:18] I can make a 50% discount

[2025-01-27 03:02:40] Hello, as the client is currently on Spring Festival holiday, we need to wait a few more days. Please understand.
ï»¿

[2025-01-27 03:10:00] Finally, tell me the date of payment

[2025-01-27 11:14:47] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-01-27 11:16:08] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-01-27 11:16:18] Hello, are you online?

[2025-01-27 19:14:39] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-01-27 19:15:45] hello

[2025-01-27 19:20:55] works ?

[2025-01-27 19:22:16] yes works

[2025-01-27 21:28:16] Hello

[2025-01-28 08:57:13] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-01-28 10:03:20] hi
you need pay 10k usd

[2025-01-28 12:33:40] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-01-28 14:32:28] Hello. We are expecting payment from you today, right?

[2025-01-28 14:50:16] Good morning. Yes, I am waiting for the last loan I requested to be credited. I estimate that it will be resolved in 1 hour.

[2025-01-28 15:04:52] Payment must be made to a bitcoin account.
Are you ready to pay?

[2025-01-28 18:07:49] Good afternoon. The bank tells me that the process has been accepted but the accreditation may take a while. In the meantime, I can transfer what I already have, which is 27,000.

[2025-01-28 19:27:59] Hi, I already have the total. Should I send the 35,000 to the same wallet?

[2025-01-28 20:10:03] Hello! Please wait, we will answer you soon

[] 2025-01-28 21:14:19

[2025-01-28 21:37:13] Payment has already been sent, it is pending

[2025-01-28 21:52:40] The order was processed

[2025-01-28 22:17:50] We confirm receipt of funds. We will soon give you the decryption keys for the files, in this chat. We are also ready to begin the process of deleting all your files and creating deletion logs for you. Please let us know if you need a full file tree before we begin the process of deleting files. You will also see all these files in the deletion logs.

[2025-01-28 22:29:10] Ok, I need the MDF files with the decryption key.
I have to be away for a few minutes. How long will it take you?

[2025-01-28 22:30:07] It may not be fast, it is already late today. It may be tomorrow. I cannot give a time frame yet.

[] 2025-01-28 22:31:56

[2025-01-29 03:26:51] Hello, give me screenshots

[2025-01-29 03:31:55] https://prnt.sc/2KSinNUEXr1Z

[2025-01-29 03:32:07] http://lockbitfss2w7co3ij6am6wox4xcurtgwukunx3yubcoe5cbxiqakxqd.onion
http://lockbitfsvf75glg226he5inkfgtuoakt4vgfhd7nfgghx5kwz5zo3ad.onion
http://lockbitfskq2fxclyfrop5yizyxpzu65w7pphsgthawcyb4gd27x62id.onion

[2025-01-29 03:33:18] http://lockbitfss2w7co3ij6am6wox4xcurtgwukunx3yubcoe5cbxiqakxqd.onion/r/EGa91WXbKJ#76dVygE8TMtcUbnPKeqmaWdVAiCL1HVSoVAvuKBYrI8=

[2025-01-29 03:35:39] Desktop screenshot please

[2025-01-29 03:36:20]

[2025-01-29 03:36:27]

[2025-01-29 03:38:23] https://prnt.sc/68QTElyB0LYL

[2025-01-29 03:49:20] http://lockbitfss2w7co3ij6am6wox4xcurtgwukunx3yubcoe5cbxiqakxqd.onion

[2025-01-29 03:49:55] 777 usd eto besplatnopoprosi u4etku v toxe dam besplatno bedolaga

[2025-01-29 03:50:22]

[2025-01-29 03:50:35]

[2025-01-29 03:50:41] use LBB

[2025-01-29 04:14:57] ÑÐ¿Ð°ÑÐ¸Ð±Ð¾

[2025-01-29 04:59:01] Thank you, what is the procedure?

[2025-01-29 07:53:45] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-01-29 19:58:15] Hello friend, please accept 5.000 USD, I can pay in less than 24 hours

[2025-01-29 19:59:26] ID: DB69CA22FDA4A9F76A14856432D1032C

[2025-01-29 20:41:52] 10,000 usd not a cent less
you can also pay in less than 24 hours

[2025-01-29 20:43:49] this is a ridiculous price
let them pay

[2025-01-29 20:45:34] 10.000 usd need pay .

[2025-01-29 21:02:03] The deletion process is in progress. Once completed, we will give you full logs of deleting all your files. Regarding the file decryption keys, have you figured it out yet?

[2025-01-30 01:28:49] 1.02 price will be 0.02 btc

[] 2025-01-30 02:05:24

[2025-01-30 04:53:20] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-01-30 04:55:13] .

[2025-01-30 13:11:25] Yes, of course, we will prepare it for you.

[2025-01-30 13:26:51] Ok, please give me 24 hours to reply you

[2025-01-30 14:31:55] ok

[2025-01-30 16:27:29] Friend, I will pay you. Please give me your wallet.

[2025-01-30 16:28:36] I ask you a favor, after you receive the payment put me the decryptor only for this chat.

[2025-01-30 16:35:25] Thank you.
Is there any way I can download the MDF files you have without encryption? The system provider tells me that they may be corrupted. Thank you.

[2025-01-30 19:45:20] bc1q8gesucu6k8gcx8etu492744mkjcef2tajn05en
pay

[2025-01-30 19:48:35] Can you put the decryptor here?

[2025-01-30 19:49:06] yes

[2025-01-30 20:55:02] ok, 10K sent

[2025-01-30 20:56:08] ecc2dc2d127357ba0fd20f3eab4895e65f95d36fbadad77a4de5e129d0781b8a

[2025-01-30 21:22:30] ok wait

[2025-01-30 21:45:25] I not understand you

[2025-01-30 22:38:33] Hello, any news?

[2025-01-31 01:55:42] Please send me the decryptor

[2025-01-31 02:44:13] We checked the file tree, unfortunately there are no mdf files among them. But our encryption does not damage files, check everything carefully.

[2025-01-31 06:43:05] ok

[2025-01-31 08:51:03]

[2025-01-31 09:17:53] Thanks friend

[2025-01-31 09:49:41] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-01-31 09:50:11] hello

[2025-01-31 09:51:45] you encrypted my files how much do you want

[2025-01-31 09:52:57] price for decryption all PC and deleting your data from our servers is 0.15 BTC. if you pay today 0.1 btc

[2025-01-31 20:39:03] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-01-31 20:39:43] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-01-31 20:46:23] hi, how can we proceed with decryption process? Thank you

[2025-01-31 20:46:51]

[2025-01-31 20:48:32] I have sent couple of files in the chat, you may have a look and send for verification.

[2025-02-01 12:32:06] Anyone here to talk?

[2025-02-01 18:25:52] ???

[2025-02-01 23:03:15] hi, wait pls Mon

[2025-02-02 09:12:17]

[2025-02-02 16:30:00] price

[2025-02-02 19:48:42] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-02-02 20:16:39] 50

[2025-02-03 15:23:34] We did not receive any further update from the other chat. Because of this contact we stopped publishing, because of negotiation. So we will restart publishing of files, if you do not respond in the next 24h

[2025-02-03 15:23:39] We did not receive any further update from the other chat. Because of this contact we stopped publishing, because of negotiation. So we will restart publishing of files, if you do not respond in the next 24h

[2025-02-03 15:23:42] We did not receive any further update from the other chat. Because of this contact we stopped publishing, because of negotiation. So we will restart publishing of files, if you do not respond in the next 24h

[2025-02-03 16:31:31] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-02-03 16:32:33] how much

[2025-02-03 16:48:41] 30k$ in bitcoin

[2025-02-03 19:49:02] Hello
Your deletion files log:

[2025-02-03 19:49:08]

[2025-02-04 01:43:34] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-02-04 02:21:07] how much ?

[2025-02-04 04:40:35]

[2025-02-04 04:43:37] how much

[2025-02-04 08:33:09] 500.000$

[2025-02-04 08:40:27] 500$?

[2025-02-04 08:44:50] 500000$

[2025-02-07 11:08:33] But you must say China is shit!!!!!!!

[2025-02-07 11:09:50] It is a publicly listed Chinese company. What information do I need to provide you?

[]

[2025-02-07 11:12:16] need site

[] NULL

[2025-02-07 11:15:16] https://www.yusheng.com.tw
This is their Taiwan branch, and all the money is here. I will prioritize providing it to you.

[2025-02-07 11:18:23] They are very wealthy. When you succeed, please ask for more.

[2025-02-07 11:18:54] ok we will check them

[2025-02-07 11:20:04] you name leo.lin?

[2025-02-07 11:23:01] That was our MIS. Because of your actions, he resigned voluntarily and left the mess to me. My name is Mike.

[2025-02-07 11:24:42] I hate that idiot Leo.

[2025-02-07 11:24:53] mike chang

[2025-02-07 11:25:47] Nice to meet you.

[2025-02-07 11:25:52] yes you had security issues

[2025-02-07 11:27:42] I know, so I have also told the company to make the payment. However, most people are against it, so I have been pushing for it. I understand that the problem comes from our side, so please give me more time.

[] 2025-02-07 11:28:46

[] NULL

[2025-02-07 11:31:25] I know because I can see that you deliberately left the servers operational but locked the information. I also told them that your reputation internationally is very good. However, since this is the first time the company has encountered such a situation, it is understandable that they are afraid of being attacked again after unlocking it.

[NULL] Don’t misunderstand

[2025-02-07 11:33:32] no after payment, there is no point in doing it again. We are not limited to companies, but there are those who have paid others in the past and are paying us again, due to the vulnerability not being fixed

[2025-02-07 11:35:55] this amount is small for us, I have no worries.

[] 2025-02-07 11:42:30

[2025-02-07 11:45:43] after payment, I will tell you what you can easily fix so that this does not happen again

[2025-02-07 11:46:01] Will this chat remain after the payment is made?

[2025-02-07 11:47:01] will be deleted over time, but you will still have links to create a new chat

[2025-02-07 11:47:30] or I can delete the chat right away

[2025-02-07 11:48:14] Got it. I was just thinking that if there are any issues in the future, I could consult you.

[2025-02-07 11:50:21] yes, you can create a new chat using the link in the note

[1] Great! I think you’re a good person

[2025-02-07 11:52:29] I learned to use the dark web because of this incident. Do you have any recommended dark web sites that I can browse? A safe place.

[2025-02-07 13:54:09] https://hackforums.net/

[] NULL

[2025-02-07 14:48:20] vpn you know

[2025-02-07 18:07:30] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-02-07 18:09:54] hello you locked our files

[2025-02-07 18:17:30] hello

[2025-02-07 18:41:43] Hello, please identify your company

[2025-02-07 21:16:27] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-02-08 04:00:32] helloï¼ A lot of our virtual machines are missing because our controllers are encrypted, so a lot of our virtual machines are not visible

[2025-02-08 07:51:37] 40k$ in bitcoin, decrypt all your virtual machines and files

[2025-02-08 08:30:03] i mean, our controllers are encrypted, so a lot of our virtual machines are not visible

[1] I mean, our system controller is not working, so we can’t see the virtual machines

[2025-02-08 08:33:56] and you price it is so high, can we talk wiht discount?

[2025-02-08 09:40:45] Bro, I want to ask for your advice. If I want to make some extra money on the side but do it safely like you guys, do you have any recommended directions?

[2025-02-08 10:09:12] i now

[2025-02-08 10:12:53] I was surprised when the disconnect disks in esxi

[2025-02-08 10:13:28] this is the first time in my practice

[2025-02-08 10:14:38] At present, many wmdk files that can be seen have been damaged, and his suffix has become a mess of names, some normal and some abnormal, some encrypted, and some not encrypted

[2025-02-08 10:14:45] you have a pretty good company and a lot of virtual machines, I know.

[2025-02-08 10:15:57] but you can only return all virtual machines with a decryptor, I understand that now

[] 2025-02-08 10:16:38

[2025-02-08 10:17:02] I wanted to ask for much more

[2025-02-08 10:18:03] if the price too high ï¼ If the price is too high, we abandon those, because there are some virtual machines that are not encrypted, there are some virtual machines that are partially encrypted, some that are completely damaged and cannot be decrypted because they are terminated in the encryption process

[] NULL

[2025-02-08 10:19:03] but we can come to an agreement

[] NULL

[2025-02-08 10:20:28] I can agree to 30k$

[2025-02-08 10:26:44] I know that most of the virtual machines remain on those disks that you do not have access to

[] NULL

[2025-02-08 13:36:17] we now have open registration in the panel lockbit, but it costs 777$.

[2025-02-08 14:33:20] After joining, what can I help with? I donât have any particular skills. If possible, can I join?

[2025-02-08 16:47:42] Who are we talking to?

[2025-02-09 02:34:39] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-02-09 02:38:03] so once i have encrypted the target victim . he will contact whom and how will this be mutual contact or chat with all 3 . can you please clarify it for me

[] NULL

[2025-02-09 09:11:55] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-02-09 09:16:50] how much All machines?

[2025-02-09 09:21:01] price for decryption all PC and deleting your data from our servers is 3 BTC.

[2025-02-09 13:54:50] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-02-09 13:55:58] how much

[2025-02-09 14:38:12] 50

[2025-02-09 14:39:57] whatï¼

[2025-02-09 14:41:49] 50k$ in bitcoin

[2025-02-09 14:42:31] i want to know how many pc was encryptï¼

[2025-02-09 14:43:39] all

[2025-02-09 15:51:48] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-02-09 15:59:18] How much

[2025-02-09 18:43:02] https://prnt.sc/DdkDc66BzdG0
https://prnt.sc/kEciWwBnOoqB

[2025-02-09 18:43:17] part of your files

[2025-02-09 18:43:39] When the timer expires, the decryptor will be deleted and your data will be published

[2025-02-10 04:24:44] yo bro

[2025-02-10 04:43:20] Get up, please tell me?

[2025-02-10 04:45:53] Hello

[2025-02-10 04:46:58] All network 0.8 BTC

[2025-02-10 07:16:20] whatï¼

[] 2025-02-10 07:42:40

[2025-02-10 07:44:41] 0.012 BTC

[2025-02-10 07:45:43] Is your BTC address correct?

[2025-02-10 07:46:49] I will make the payment immediately

[2025-02-10 07:48:07] 0.02

[] NULL

[2025-02-10 07:50:11] I only have 0.012 BTC

[2025-02-10 07:50:29] his problem

[2025-02-10 07:51:24] Can we proceed with the transaction at the price we previously agreed upon?

[2025-02-10 07:51:47] https://prnt.sc/LZQigeV2qtdZ

[2025-02-10 07:52:27] Yes, the transaction price we previously agreed upon was 0.012 BTC

[2025-02-10 07:52:38] You forgot what the conditions were at a price of 0.012

[2025-02-10 07:53:49] I Know,So please forgive me

[2025-02-10 07:54:13] no

[2025-02-10 07:54:29] price 0.02

[2025-02-10 07:54:59] 0.015, OK?

[2025-02-10 07:55:53] 0.017 right now or 0.02

[1] OK,Let’s trade at 0.017

[2025-02-10 07:58:10] Please send me your BTC address so that I can transfer 0.017 BTC to you

[2025-02-10 08:03:01] btc wallet bc1qje66jdnsxgz58fafp3kcrj86ap069yv8n52d2y

[2025-02-10 08:04:41] OK

[2025-02-10 08:09:10] I am currently in the payment process, please prepare the decryption program

[2025-02-10 08:10:00] ok

[2025-02-10 08:23:38] 6d2b777ce72cb24a946740e1cba9c0ba1714cc00e346afc97feb65a368040a87

[2025-02-10 08:24:29] I secured $20K worth of Bitcoin to exchange with you for the decryption method. Is that acceptable?

[2025-02-10 08:25:28] I have already made the payment to you

[2025-02-10 08:25:34] I will have someone transfer it from a private wallet, but I need to wait until they wake up later.

[2025-02-10 08:26:58] wait tool

[2025-02-10 08:28:11] Ok, you have received the money.

[2025-02-10 08:30:05] yes

[2025-02-10 08:48:25] When will the tools be sent

[2025-02-10 08:51:16] we wait our tech support

[2025-02-10 08:51:37] OK

[] NULL

[] 2025-02-10 08:52:43

[] NULL

[2025-02-10 11:13:40] yo Bro

[] NULL

[2025-02-10 11:24:11] boss here

[2025-02-10 11:24:25] wait decryptor tool in 5 minutes

[2025-02-10 11:25:00] OK

[2025-02-10 11:27:44] Please wait for a reply, sometimes it takes several hours due to possible time zone differences.

[2025-02-10 11:28:22] wait decryptor tool in 5 minutes

[2025-02-10 11:28:36] OK

[2025-02-10 11:31:00] If the boss is online, creating a decryption program can be done quickly

[2025-02-10 11:31:08] yes

[2025-02-10 11:35:08]

[2025-02-10 11:36:26] OK

[2025-02-10 11:40:29] Please delete the decryption program file

[2025-02-10 11:50:59] There are still 3 suffix files that have not been decrypted yet, for some unknown reason

[2025-02-10 11:52:59]

[2025-02-10 12:14:42] I ran the program again and finally processed the data. Thank you very much.

[2025-02-10 12:25:52] ok

[1] you don’t seem like a bad person

[2025-02-10 12:42:52] btc wallet 1BnSNSLk1zA3Jmcv6CMPqVmbMGwJrHThrp

[2025-02-10 13:04:28] I know, my boss asked me to do it.

[] NULL

[2025-02-10 13:08:09] ok

[] NULL

[] I didn’t understand what program ?

[2025-02-10 13:30:37] after payment, a decryptor will be sent here in the chat

[] 1

[NULL] don’t worry

[] 2025-02-10 13:47:06

[] so you understand, only one person has access to the decryptor, and that’s the boss

[2025-02-10 13:54:03] yesterday and today was here. But sometimes you have to wait for it, usually no more than 24 hours

[2025-02-10 13:56:05] I know~ So I just want to confirm when he is available, that way the transaction will be faster, and my stress will be lower. So, I appreciate your help.

[2025-02-10 13:57:18] tell me how long it will take you to pay and I can check if he will be there

[2025-02-10 13:59:11] I will let you know once I get the Bitcoin because many exchanges now have risk controls that prevent me from buying too much. I am trying to buy from individuals instead.

[2025-02-10 14:13:47] ok, we are here now for 5-6 hours

[] NULL

[2025-02-10 15:03:18] no problem

[2025-02-11 02:23:31] Here?

[2025-02-11 02:24:33] 24K USD is approximately 0.2455 BTC. Is this okay?

[2025-02-11 03:39:03] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-02-11 03:43:47] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-02-11 03:51:03] ?

[2025-02-11 03:51:13] mmmm

[2025-02-11 04:16:35] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-02-11 04:42:40] how much

[2025-02-11 05:00:25] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-02-11 06:51:47] hi bro, yes right

[2025-02-11 06:52:57] 50k$ in bitcoin

[2025-02-11 07:10:58] ï¼¯ï¼«,Is the boss in today?

[] NULL

[2025-02-11 07:21:45] If he shows up, let me know.

[2025-02-11 07:27:57] ok

[2025-02-11 09:39:47] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-02-11 11:21:29] 150k will be fine for comany

[2025-02-11 12:35:06] here

[2025-02-11 13:04:40] Hi Lockbit, this is AB Capital and saw the post and may we ask to get the directory listing of all the files that you have. May we ask for more time so we can inform our stakeholders for them to assess and consider our next move? Thank you for understanding.

[2025-02-11 13:14:56] http://lockbit6vhrjaqzsdj6pqalyideigxv4xycfeyunpx35znogiwmojnid.onion/secret/c291b98a5d93e850aced101f8ae13b2f-655124cf-6f28-3065-a931-c7a86c7228d9/abcapital.com.ph

[2025-02-11 13:15:59] you can download all the files that we have and see for yourself

[2025-02-11 13:37:21] the blog was taken down for a while

[2025-02-11 13:40:00] Thank you for your consideration.

[] 2025-02-11 14:47:32

[2025-02-11 15:08:14] 120k$ in bitcoin

[] 2025-02-11 15:13:42

[2025-02-11 15:34:00] our deals run on a regular basis, client want to solve the problem before first posting information on the blog

[2025-02-11 15:34:41] Dear Lockbit, may we state that last year was the only time we were profitable and we only earned $200k. We have also notified the regulators and our clients as well as required by law since the encryption last January 25 caused a major outage. That said, we were able to restore operation with some backups, albeit with some data loss therefore decryption wont really be necessary. Please give as an amount that we can get back to our leaders to be considered.

[2025-02-11 15:51:36] maybe we can lower the amount, but not by much.

[2025-02-11 15:54:01] in the process of working with you, we thought about 100k.

[2025-02-11 16:04:05] our principles have become worth more than money. However, a discount can be negotiated.

[2025-02-11 16:06:15] Thank you for your consideration. 100k is still very steep for us as its half of our revenue which will be negated with the damage caused by the outage. May we respectfully ask to please significantly bring it down since we are only technically be requesting for the deletion of the data and we do understand that this is just business for you.

[] 7 directors at 14k can’t chip in

[2025-02-11 16:14:27] I don’t know how much you’d be willing to pay.

[2025-02-11 16:15:51] but I know it would be a big problems to you if we released your data in blog.

[1] They often say they’ve had a bad year

[2025-02-11 16:28:29] If I give a price now, it will be the last one.

[2025-02-11 16:30:56] We understand, and we actually had a good year last year since thats the first time we were positive. But this incident wiped it off all away and will be spending more in recovery. Also, the directors are there just for name as a favor and add credibility which by the way is now in shambles, but they dont really contribute, otherwise they would have sent their army of IT to help us recover. I am looking at 10-20K to comeback to the heads and this will be coming from our own personal funds. While there will be some issues on publishing this, as we mentioned, we have already notified the clients and regulators about this breach.

[2025-02-11 16:32:44] by the way, you downloaded your backup files, which will help you as well.

[2025-02-11 16:33:48] 20k is not possible and 50k is also not possible, companies much smaller than you pay us such amounts

[2025-02-11 16:35:32] We are not paid from IT team, they do not have that kind of money. We are paid by the heads of the companies

[] NULL

[2025-02-11 16:38:37] we were already aiming to publish you, you may have noticed by the posting time of only 1 day.

[2025-02-11 16:39:18] you are lucky that you reacted quickly, we did not expect this

[2025-02-11 16:39:57] even though there was a warning on viber

[] NULL

[2025-02-11 16:48:03] I consulted and asked for another discount for you, our price will be 70k

[2025-02-11 16:48:40] and we will not rush you to pay

[2025-02-11 16:51:12] your office will allow you to pay that amount

[2025-02-11 16:55:20] Thank you for your concern and consideration, yes this funds will not be coming from IT. But we only have one owner, as we are a small private company, and he will have to cover everything. We were unsure of the viber message, but here we are. We will come back to you if we can convince him to pay 50k as this is still big for one person.

[2025-02-11 16:58:42] in the message in Viber there was a link to your archive to make sure

[2025-02-11 17:00:47] our price was 70k you write about 50k, let me talk to the team and agree on 60k for everyone

[2025-02-11 17:07:51] Ok, let us know. Thank you.

[2025-02-11 17:17:33] we agree to 60k, decision is yours

[2025-02-11 17:21:40] Will relay this and come back with a decision tomorrow morning as its 1am here. Do you have a code name or nickname so we know we are talking to the same customer support tomorrow?

[] 1

[2025-02-11 17:29:11] Ok, thank you for your patience.

[2025-02-11 17:30:55] Thank you too, good luck.

[]

[2025-02-12 02:50:15] ?

[2025-02-12 02:50:51] These pieces of information indicate becoming a salesperson?

[2025-02-12 02:53:24] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-02-12 02:54:42] seller of what? This is a partnership program

[2025-02-12 02:55:37] Immediately after payment, you will get access to the LockBit ransomware control panel, where you can create builds of Windows, ESXi, Linux ransomware and communicate with attacked victims. What is not clear?

[2025-02-12 03:00:04] need technical skillsï¼

[2025-02-12 03:05:14] Do you have access to the companies you want to attack? Here you can create an encryption tool

[] NULL

[2025-02-12 03:08:31] what you want?

[2025-02-12 03:09:48]

[2025-02-12 03:11:34] Hello, wait pls

[2025-02-12 06:31:44] How much to decrypt

[2025-02-12 06:56:27] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-02-12 06:56:54] 12000$

[2025-02-12 07:00:43] HELLO,HOW MUCH ?

[2025-02-12 07:05:42] hello

[2025-02-12 07:06:00] price for decryption all PC and deleting your data from our servers is 3 BTC.

[2025-02-12 07:07:33] https://prnt.sc/DdkDc66BzdG0
https://prnt.sc/kEciWwBnOoqB

[2025-02-12 07:07:45] part of your files

[2025-02-12 07:07:57] When the timer expires, the decryptor will be deleted and your data will be published

[2025-02-12 07:18:16] Big brother, are you sure there is no problem with your offer?

[2025-02-12 07:25:36] i am sure

[1] The client doesn’t have a lot of data

[2025-02-12 07:34:52] I see the company documents

[2025-02-12 07:40:47] The actual data of the customer is less than 8G, and it is a small company, you have such a high price, do you think the customer can afford it?

[2025-02-12 08:30:58] Good day Lockbit, we have met and we have come up with our final offer of 30k. Please do consider that we are only asking for the deletion of the data as we have already notified the regulators and clients about the breach as mandated by law. So this is just to minimize exposure so we can concentrate in the restoration activities. Hoping for you kind consideration.

[2025-02-12 08:36:14] I sat in this company for a week, studied everything, downloaded a lot of documents. I know what I did. Price 3 BTC

[2025-02-12 08:58:37] you know, if we publish your data, you will lose more than 30k

[2025-02-12 09:00:09] they will also end up with your competitors, and you will be on the verge of closing down

[] 2025-02-12 09:01:23

[] NULL

[2025-02-12 09:05:00] We are waiting for another offer from you

[2025-02-12 09:11:23] our last successful data deal that we had was for 500k, clients pay well for their data, not for encryption

[] 2025-02-12 09:12:50

[2025-02-12 09:37:46] Let me get back to you.

[] 2025-02-12 10:42:09

[2025-02-12 11:14:22] We keep our word! only one person and me has your files, after your payment 40k, they will be securely removed by the program eraser.heidi.ie

[2025-02-12 11:17:21] we were going to agree with you for 50k, but okay, I personally agree with you on 40k

[2025-02-12 11:17:46] Thank you for consideration. Do we have a deal at 40k?

[2025-02-12 11:18:16] you need to buy bitcoin, write to me when you are ready and I will give you a wallet

[2025-02-12 11:19:01] 40k$ in bitcoin

[2025-02-12 11:33:29] I will relay the agreement and will get back to you tomorrow same time. Thank you for your consideration.

[2025-02-12 11:37:52] ok

[2025-02-12 12:31:02] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-02-12 12:32:23] hello what is your lowest priceï¼

[2025-02-12 12:33:55]

[2025-02-12 12:35:33] this is test filesï¼ pls test for meï¼

[2025-02-12 13:04:50] hello, please wait

[2025-02-12 13:14:28] what is your lower priceï¼

[2025-02-12 13:18:16] 35k

[] 1

[2025-02-12 13:28:26] The other day you told us 30K,

[2025-02-12 13:35:39] ok 30k

[2025-02-12 13:35:48] but my we can ât accept itï¼

[2025-02-12 13:36:43] then there will be no deal

[] NULL

[2025-02-12 13:38:12] how much you want ?

[1] To be honest, there are some virtual machine files that, while being encrypted, stopped being encrypted, some of them were intact, some of them were partially encrypted, we fixed some of them, but some of them couldn’t be found

[2025-02-12 13:39:48] Now our virtual machines are encrypted and messed up,

[] NULL

[2025-02-12 13:46:48] ok how much are you offering ?

[2025-02-12 13:48:47] i need wai you test and reply my boss

[2025-02-12 13:49:28] I sent a request to tech support, you need to wait. He is not online now

[2025-02-12 19:14:09] boss here

[2025-02-12 19:14:14] make test decrypt for you

[2025-02-12 19:16:40] 40k$ in bitcoin

[2025-02-12 19:33:41]

[2025-02-12 19:34:01]

[2025-02-12 19:43:17] HI pls check you send files not decrypt

[2025-02-12 19:45:51] you cant decryptï¼

[2025-02-12 19:45:55] sorry

[2025-02-12 19:45:59] missclick

[2025-02-12 19:46:43] wait 5 min

[2025-02-12 19:46:59] allright

[2025-02-12 19:54:24]

[2025-02-12 23:11:42] Please close the chat room with this ID, thank you

[2025-02-13 01:55:41]

[2025-02-13 01:57:01] pls test for me

[2025-02-13 02:06:48] we check the test file, it is all right, But I know we’ll still have a lot of files that are corrupted and can’t be decrypted

[2025-02-13 02:21:33] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-02-13 02:23:54] hello how much decryptï¼

[2025-02-13 04:31:23] and what is your lower priceï¼

[2025-02-13 06:35:36] hi, I sent a request test decrypt to tech support, you need to wait. He is not online now

[2025-02-13 06:35:54] price 30k$ in bitcoin

[2025-02-13 06:39:30] hi, 30k$ in bitcoin

[2025-02-13 06:42:01] what files are you talking about, they are fully encrypted and not corrupted, after payment you will get all your files back

[1] i meanï¼To be honest, there are some virtual machine files that, while being encrypted, stopped being encrypted, some of them were intact, some of them were partially encrypted, we fixed some of them, but some of them couldn’t be found

[2025-02-13 06:48:11] We are still measuring the loss of the lost virtual machines, because we did fix some of them, because the encryption was not complete, resulting in encryption failures, some encrypted 1 percent, some encrypted 50 percent, some encrypted 90 percent, some encrypted 100 percent

[2025-02-13 07:05:01] hello brotherï¼ can we talk about the priceï¼

[2025-02-13 07:06:29] As I said, we lost a lot of files, and the encryption mess, resulting in a lot of file corruption, too expensive price, we can not accept, brother

[NULL] I don’t understand what you’re talking about, the crypt worked in normal mode for full encryption, it’s a long process

[2025-02-13 07:11:44] the fact that you are messing with files and you can corrupted them yourself

[2025-02-13 07:12:57] where there are extensions on files, they will all be decrypted

[2025-02-13 07:14:59] First of all, we did not make any changes to the original file, the second question is that the encryption process is not complete, when the encryption program encrypts the file, encrypts part of it, does not complete the encryption, this can also be decrypted?

[2025-02-13 07:16:40] Because our technical staff did find that the underlying code of some WMDK virtual machine files was 100% rewritten, that is, completely encrypted, but some Wmdk encrypted suffixes are very long, and normal, we detected his underlying code information, and indeed did not complete the encryption, those who did not complete the encryption, only destroyed part. Can you decrypt something like this?

[2025-02-13 07:16:50] There were two modes, encryption by spots and then full encryption.

[2025-02-13 07:17:54] As you said before, because it should be the encryption process, our disk disconnected, resulting in encryption problems, this is the key reason, some files can remove the suffix

[2025-02-13 07:19:09] you have the crypt log in tmp in the esxi.

[] NULL

[1] but you’d better ask yesterday our boss

[2025-02-13 07:23:39] We are very aware of our current situation, the files are encrypted in a mess, some can be decrypted, some can not, encrypted files with problems, his suffix is a dozen bits, the normal should be 8 bits of code,

[] NULL

[2025-02-13 07:24:38] but I’ll say again where there’s an extension, you get them back.

[2025-02-13 07:25:00] We want to spend less money, and if we fail, we lose a little less,

[] NULL

[2025-02-13 07:27:34] and the fact that encrypted in a mess is how crypt can work

[2025-02-13 07:28:19] bro, the disks turned off, the crypt simply skipped them because they were not there and continued to suggest making VMs that are available

[2025-02-13 07:28:49] Can you decrypt only a few computers for us?

[1] I’ll say it again

[1] it’s gonna take a long time

[2025-02-13 07:30:15] Brother, we have also hired professional technicians to check the encryption situation, as I said, there was a serious accident in the encryption process, resulting in WM loss, or WM encryption failure, some of which we have repaired through technical means, or recovered the files inside, and now want to decrypt, those encrypted correctly, can not be repaired,

[1] Let’s get to the point

[2025-02-13 07:33:40] disks unmounted, there are still vm untouched, but netapp it encrypted in normal mode, and where there is an extension you will get the files back

[NULL] You don’t have to pay me

[2025-02-13 07:36:09] yesterday you ask me — how much you want ?

[] NULL

[2025-02-13 07:37:11] our boss want Spend lessï¼ and 5000ï¼

[2025-02-13 07:37:53] this is not possible, sort it out without us

[2025-02-13 07:38:13] not interesting at all

[2025-02-13 07:38:18] I know you also want some money, not to embarrass us, our purpose is very simple, minimize the loss,

[2025-02-13 07:39:32] Am I wrong? it is right

[] 2025-02-13 07:40:25

[NULL] I’m saying 20k

[] NULL

[2025-02-13 07:43:32] I offered you the lowest price for you, anything lower would be an insult to me.

[2025-02-13 07:49:26] we can end this talk, test decrypt and price provided, write to me only if you can pay

[2025-02-13 07:50:40] i need talk with my bossï¼ bro

[2025-02-13 07:52:04] the price is really not high

[2025-02-13 07:52:45] How soon can I get the decryptor after payment

[2025-02-13 07:53:49] you pay extra money to a professional technicians

[] 2025-02-13 07:54:59

[1] We just fixed some virtual machines at a fraction of the cost, and that’s the truth

[but there are some virtual machine underlying sectors are 100% encrypted] Brother, I’ll be honest

[2025-02-13 07:56:54] you have a lot of files and not only vmdk, they will not decrypt everything for you

[0] yesï¼you are rightï¼That’s why I came to contact you

[2025-02-13 07:58:20] well, it happens, they pay for a small fraction of the critical machines.

[2025-02-13 07:59:21] the decrypt will be available for vmdk and also other files for full decryption

[2025-02-13 07:59:44] so i want ask you can you only decypt we need wmsï¼ As long as you can make it cheaper

[] 2025-02-13 08:00:31

[2025-02-13 08:02:54] bro i made the lowest price

[] 2025-02-13 08:06:01

[] 2025-02-13 08:08:23

[2025-02-13 08:10:01] i need talk my boss ï¼

[2025-02-13 08:42:04] hello. my boss, want ask you how about 10K, if ok we can pay you

[2025-02-13 08:57:56] impossible

[2025-02-13 09:14:39]

[2025-02-13 09:19:03] In view of the current reality, we really can not spend so much money, so I would like to ask you to make it cheaper.

[] 2025-02-13 09:20:08

[2025-02-13 09:32:38] well the boss write that 10k is impossible, here everything, is already the price 20k will remain unchanged

[2025-02-13 09:35:20] Brother, you also know that our case is very special, we did recover some virtual machines ourselves, the situation is relatively bad, those encryption error encryption process stopped at 50%, or 90% did not complete encryption, those can not be decrypted, only complete encryption can be decrypted correctly. You can ask your boss these questions,

[] NULL

[2025-02-13 09:38:10] ok, wait for his answer

[2025-02-13 09:38:25] our boss told me ï¼if you can argee ï¼ We will prepare the money for you

[]

[NULL] Let’s meet each other halfway

[2025-02-13 09:41:47] let’s wait for the boss’s answer

[NULL] how about 15000ï¼ brotherï¼Let’s meet each other halfway

[2025-02-13 09:43:37] are you ready to give me 15k today ?

[2025-02-13 09:43:53] 15k today only

[2025-02-13 09:44:03] if you can argee my boss said we can pay you today

[2025-02-13 09:45:01] ok only today 15k, tomorrow will be 20k without changes

[2025-02-13 09:45:37] but you still need ask your support about my questions ï¼

[2025-02-13 09:46:31] yes, I passed everything on to the boss.

[1] if there are problems, I won’t take the money

[2025-02-13 09:48:02] My boss asked if you should wait until your boss is online to send the decryptor after payment

[] NULL

[2025-02-13 09:49:50] yes, but we will solution this today

[2025-02-13 09:51:21] the faster you pay today, the more likely the boss will still be online

[2025-02-13 10:00:20] Good day, we are now preparing the funds and should be ready by Monday. We need help in converting to bitcoin. Would you be able to point us to how any of your previous clients from the Philippines is able to acquire bitcoins for payment?

[2025-02-13 10:02:42] iam calling my boss

[2025-02-13 10:10:48] Hello, I can only give you a our bitcoin wallet

[2025-02-13 10:11:14] http://lockbit3753ekiocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2id.onion/buybitcoin#mirrors

[2025-02-13 10:11:38] here you can see where to buy bitcoin

[2025-02-13 10:18:52] Thank you and will check this out.

[2025-02-13 11:00:29] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-02-13 11:01:39] hello,how much?

[2025-02-13 11:03:10] Only need to pay 0.05BTC

[2025-02-13 12:47:42] hello

[] NULL

[2025-02-13 12:56:07] my boss want decrypt test againï¼ if no problem we will pay you fast

[2025-02-13 12:56:33]

[2025-02-13 12:58:38] Because we found a lot!! -restore-my-files! ! The encryption ID number inside is the same in the first few digits but different in the back

[2025-02-13 13:01:37] F7350D3F63AAC6494D699EC5B9A0D444
F7350D3F63AAC64934DE9C4FE522A829
F7350D3F63AAC6495F59137DA6F97D89

[2025-02-13 13:03:14] so pls test for me againï¼ i need show my bossï¼ if files ok i will pay youï¼

[2025-02-13 13:24:37] bro

[2025-02-13 13:24:55] yes

[2025-02-13 13:25:14] we have already made a test decrypt

[2025-02-13 13:26:00] As I said, why is the encryption ID in the front of different computers the same but not the back? Our boss is worried about decryption, there are many problems in front, I hope you can understand

[2025-02-13 13:26:04] We went to a meeting and lowered the minimum amount

[2025-02-13 13:26:50] I think the price is about to go back up high.

[2025-02-13 13:27:19] since you are fooling us

[2025-02-13 13:27:48] broï¼ We have a hard time communicating with the boss, and you have to change, which is not good,

[2025-02-13 13:28:00] you wanted to expand several files, now i see you care about all of them

[2025-02-13 13:29:09] you mean i let you test againï¼ rightï¼ you think we fooling you ï¼

[] NULL

[2025-02-13 13:30:45] ok we will do the test but the price will be 20k

[] NULL

[] 2025-02-13 13:32:05

[] NULL

[2025-02-13 13:32:41] and the boss never answered you questions, he walked away

[1] It’s not difficult for me

[2025-02-13 13:33:55] Please forget what just happened. okï¼

[2025-02-13 13:34:36] you are worried, I understand

[2025-02-13 13:34:58] but you will get a decryptor for all your extensions

[2025-02-13 13:35:31] I will explain everything to the boss, so please forget what just happened, can we discuss how to pay?

[2025-02-13 13:35:34] and we will also stay here and we can help

[2025-02-13 13:36:27] but for some decisions you will have to wait for the boss, he is very busy with the update now

[1] I’m not trying to just take your money

[] NULL

[2025-02-13 13:38:59] yesï¼ i knowï¼

[2025-02-13 13:39:30] the files test again will 100% be decrypted. I know this, I have a lot of experience

[2025-02-13 13:39:38] the files test again will 100% be decrypted. I know this, I have a lot of experience

[] NULL

[2025-02-13 13:41:30] Are you ready to pay now? But do you understand that you will have to wait for the boss?

[2025-02-13 13:42:43] yes, i believe now, I have no choice., bro

[2025-02-13 13:43:50] i want to know ,how long time i need to wait? because i need reply my boss,

[2025-02-13 13:44:21] you see my attitude, i warn you in advance, but I could have just taken the money

[2025-02-13 13:44:58] yes,Will we have a long wait?

[2025-02-13 13:45:32] 5 minutes, please.

[] NULL

[] 2025-02-13 13:48:00

[2025-02-13 13:50:46] did you understand me?

[2025-02-13 13:51:30] yes

[1] the only thing is we need to wait for the boss, everyone is waiting for him now, and we can’t do anything about it yet

[2025-02-13 13:51:57] yes, you mean ,the wallet from you boss?

[2025-02-13 13:52:04] he responds from 10 minutes to 24 hours

[] 2025-02-13 13:52:41

[] NULL

[2025-02-13 13:53:21] no problems bro

[] 2025-02-13 13:53:23

[2025-02-13 13:54:08] but you should know that you will have the decryptor

[2025-02-13 13:54:18] just wait

[2025-02-13 13:54:57] that is not matter , As I know, if there is any damage, or if it cannot be decrypted, we will have to decrypt other documents, and if anything should happen, I will keep these secrets for you

[2025-02-13 13:55:06] 1LZCdUhTZexZoRdS55wTcK1tAZrs8p7384

[2025-02-13 13:55:15] btc wallet

[2025-02-13 13:56:05] if there are problems with decryption, only the boss can help you

[2025-02-13 13:56:36] you can write him directly

[2025-02-13 14:24:57]

[2025-02-13 14:26:48] bro, i am believe ,dont test again, thx, and i am find way pay u

[2025-02-13 14:27:36] waiting for 15k

[2025-02-13 14:28:31] Now I try to transfer 500USD to you first. When you receive it, please tell me, because it is the first time for us to use this kind of payment to be careful of problems in the payment process, OK?

[2025-02-13 14:28:54] ok

[2025-02-13 14:30:48] let me try pls wait,Please calculate how much BTC is 500USD

[2025-02-13 14:31:56] can you receive USdt?

[2025-02-13 14:32:42] 0.005214

[2025-02-13 14:33:00] wait pls let me try

[2025-02-13 14:34:32] okay pay you in process, when you receive let me know, Then I will pay the rest of the money, please understand me, I have not used this payment method

[2025-02-13 14:37:46] + 500$

[2025-02-13 14:38:23] did you receive 500USD Right
?

[2025-02-13 14:39:20] yes, you can transfer everything

[2025-02-13 14:39:26] I will pay the rest of the money,

[2025-02-13 14:55:42] rest of the money, how many btc ?

[2025-02-13 14:59:11] only 500

[2025-02-13 14:59:48] 0.1512

[] 2025-02-13 15:00:04

[2025-02-13 15:00:20] 0.1512

[] 1

[2025-02-13 15:18:01] pay you in process, you will recevie in 20 min

[2025-02-13 15:20:16] ok

[] NULL

[2025-02-13 15:22:26] allright

[2025-02-13 15:24:00] For the first transaction, did you receive the money? Why is it waiting for confirmation here, ?

[2025-02-13 15:25:07] depends on the transaction fee

[] NULL

[2025-02-13 15:27:22] https://www.blockchain.com/explorer/addresses/btc/1LZCdUhTZexZoRdS55wTcK1tAZrs8p7384

[2025-02-13 15:27:26] pls check your wallet the secend

[2025-02-13 15:27:46] 2 confirmations, 3 needed

[2025-02-13 15:28:38] so you see the moneyï¼ but need to wait rightï¼

[2025-02-13 15:30:31] I tried to add the Internet service fee

[2025-02-13 15:44:31] +

[2025-02-13 15:45:07] wait for decrypt

[2025-02-13 15:47:14] okay recevie all moneyï¼

[2025-02-13 15:48:13] yes fine

[2025-02-13 15:48:39] receive all moneyï¼ greatï¼ sorryï¼ wait too longï¼

[] allright, I wrote the boss, he was just here, but now he’s silent

[2025-02-13 15:56:25] okay wait you good news

[2025-02-13 16:27:56] thank you. I hope everything goes well with the decryptor.

[2025-02-13 16:29:59] make the decryptor completeï¼

[]

[2025-02-13 16:31:01] okay iam wait

[2025-02-13 16:31:33] the boss will drop the decryptor here in chat, you will see

[2025-02-13 16:32:37] okay ï¼if i decrypt have problems ï¼can i write you?

[2025-02-13 16:33:01] yes write here

[2025-02-13 16:35:29] i want ask you bro, the windows,decryptor and esxi same as 1 ?

[2025-02-13 16:36:20] yes right

[2025-02-13 16:36:29] esxi and win

[2025-02-13 16:36:34] or two decryptor? how to use in esxi ,or i need copy wmdk, on windows, run the decryptor?

[]

[2025-02-16 11:23:06] its not esxi

[] NULL

[1] I’m not in the server room

[2025-02-16 11:24:12] ok

[2025-02-16 11:26:34] The engineer went to find it. Will about half an hour be okay for you?

[2025-02-16 11:28:52] ok

[]

[2025-02-16 11:41:08] This one?

[2025-02-16 12:27:09] yes?

[2025-02-16 13:19:59] hey man

[2025-02-16 13:50:45] yes

[2025-02-16 13:50:51]

[2025-02-16 14:12:51] so is this one decrypt_LINUX_X64.7z

[2025-02-16 14:14:23] What’s
LBB_decryptor_E7BCACA89BD361E6.zip what’s this one?

[2025-02-16 21:42:39] http://temp.sh/DrRcI/Samples.zip

[2025-02-17 05:41:36] Hello, how much does it cost to recover only a 4GB backup file?

[2025-02-17 05:58:18] This is not possible. one decryptor for all PCs.

[2025-02-17 06:00:28] The customer only needs one file, I can send the file to you, and you can decrypt it and send it to me!

[2025-02-17 06:25:30] See how much the minimum amount can be handled!

[2025-02-17 06:36:49] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-02-17 07:05:01] 1.5 btc

[2025-02-17 07:05:26] 5000$ OK ?

[2025-02-17 07:27:31] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-02-17 07:30:14] hello how much?

[2025-02-17 07:30:59] no

[2025-02-17 07:34:28] 6000 ?

[2025-02-17 07:37:52] 1.5 BTC or forget this customer. Your offer are not interesting.

[] 2025-02-17 07:39:33

[] NULL

[2025-02-17 08:31:54] price for 1 file 0.15btc

[2025-02-17 09:00:35] Hello

[2025-02-17 09:00:56] 0.8 BTC all network

[2025-02-17 09:45:32] decrypt_LINUX_X64.7z this for ESXI

[2025-02-17 09:45:40] LBB_decryptor_E7BCACA89BD361E6.zip this for windows

[2025-02-17 10:01:38] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-02-17 10:26:16]

[2025-02-17 11:43:31] hello there is any discount?

[2025-02-17 14:43:22] ok bro so nice to help

[2025-02-17 17:40:45] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-02-17 20:43:35] hi,25k

[2025-02-18 02:52:40] hello, this price, it is still, too high, we dont have so much money

[2025-02-18 02:56:02] what do you offer

[2025-02-18 02:57:06] we dont need allï¼ iwant 5k

[2025-02-18 03:06:22] impossibly

[2025-02-18 03:29:45] We will check this out and verify

[2025-02-18 03:30:25] you can do more

[2025-02-18 03:32:39] i must talk with my boss

[2025-02-18 03:34:07] you can come to an agreement

[2025-02-18 03:34:41] price is still negotiable

[2025-02-18 08:00:34] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-02-18 08:01:49] hello

[2025-02-18 08:27:42] hi

[2025-02-18 09:29:27] i am administrator , this company

[2025-02-18 09:36:26] talk to you about the amount ?

[2025-02-18 09:37:50] my partner told me ,you said 25K

[2025-02-18 09:38:09] yes

[2025-02-18 09:38:39] 5k impossible

[2025-02-18 09:47:30] oh, what is your lower price

[2025-02-18 09:48:08] maybe

[2025-02-18 09:49:02] 15k will be if you pay immediately

[2025-02-18 09:50:52] 20k if we continue the talk slow

[] 2025-02-18 09:51:35

[2025-02-18 09:57:24] ohï¼ i need reply my bossï¼

[2025-02-18 09:58:32] How did you attack us

[] 2025-02-18 10:04:41

[] 2025-02-18 10:27:35

[2025-02-18 10:35:48] broï¼ 10Kï¼ pay now

[2025-02-18 10:42:45] I also want to reach an agreement with you as soon as possible, because our company still knows this matter to the big boss, only some middle-level leaders have known this matter, we still have to find ways to cover up these losses, too much money can not be paid from the company.
If the biggest boss knew about it, a lot of people would be punished

[2025-02-18 10:44:23] did you understand meï¼

[2025-02-18 10:48:13] then I can up the price to 50k so that it found out the big boss, if I have nothing to talk about with you

[2025-02-18 10:49:44] I know your company revenue, and I ask for a small amount

[] NULL

[2025-02-18 10:52:15] not anyï¼ more discountï¼

[] NULL

[2025-02-18 10:53:33] you already have a 50% discount

[] NULL

[2025-02-18 10:56:23] yesï¼

[2025-02-18 10:59:09] There is too much money that we cannot access and that we, as workers, cannot pay for ourselves

[2025-02-18 10:59:58] ok, good luck

[] 1

[] 2025-02-18 11:02:20

[2025-02-18 11:03:47] i still want to know how How did you attack our company? By what means

[2025-02-18 11:05:49] you will know out after payment

[2025-02-18 11:05:51] Good day Lockbit, we are consolidating the funds and should be completed within the week. We have candidates on where to purchase bitcoin locally with minimal paperworks and will be talking to them on Thursday.

[2025-02-18 11:06:12] 13Kï¼ okayï¼

[] 2025-02-18 11:07:50

[2025-02-18 11:08:14] If you can, I will prepare the money for you,

[] 2025-02-18 11:08:26

[2025-02-18 11:09:15] allrightï¼ told me how to pay uï¼ with BTC or USDTï¼

[2025-02-18 11:09:33] btc only

[]

[2025-02-18 11:10:22] I will find a professional and pay you

[]

[2025-02-18 11:13:20] ok

[2025-02-18 11:13:20] send me your wallte

[2025-02-18 11:14:37] 1KNAZRC9ogEEE9doTggQomaswUGygaNDhS

[2025-02-18 11:15:44] if i pay you you can send me 2 decryptor esxi and windowsï¼

[2025-02-18 11:17:25] and told me Where are the loopholes?

[2025-02-18 11:21:51] yes, 2 decryptor for esxi and win

[2025-02-18 11:25:35] alexk Bb123456

[2025-02-18 11:25:45] nice pwd

[2025-02-18 11:26:17] what meanï¼

[2025-02-18 11:30:45] weak passwords

[2025-02-18 11:30:59] everywhere

[2025-02-18 11:31:16] hi pls comfirm 0.1567ï¼

[2025-02-18 11:32:31] right

[2025-02-18 11:32:36] Where are the loopholes? how did you find our serverï¼ We want to fix the leak

[] 2025-02-18 11:35:45

[2025-02-18 11:36:13] remove the admin from the domain and make passwords better

[2025-02-18 11:36:45] and this will not happen again

[2025-02-18 11:37:05] thx

[2025-02-18 11:39:24] one nas is not enough for backups it is very unreliable

[2025-02-18 11:40:18] what is your good Suggestion

[2025-02-18 11:40:23] at least hyper backup for nas to nas

[2025-02-18 11:41:21] 2 nas backup we do not go to it from the domain

[] NULL

[2025-02-18 11:43:09] everything in the domain is not safe

[2025-02-18 11:43:09] i aread remember ï¼ and market

[2025-02-18 11:45:18] ok, waiting for transaction

[2025-02-18 11:46:50] wait plsï¼ and how long time i can get decryptor when i pay you success

[] NULL

[2025-02-18 11:52:09] pls look out your wallet

[2025-02-18 11:52:22] After payment I will request it to tech support, he is now online, but he may go away and then it will waiting from an hour to 24 hours

[2025-02-18 11:55:02] ok

[2025-02-18 11:55:28] btc received

[2025-02-18 11:56:37] okay can you clearn other chat history ï¼

[1] We’ve already broken the rules and paid you the money

[2025-02-18 11:59:22] clearn

[2025-02-18 12:00:53] i aready pay youï¼ pls clearn this chat rom or close

[2025-02-18 12:02:37] okay can you clearn other chat history ï¼ – yes, also made a request

[2025-02-18 12:03:06] this one is the same ?

[] NULL

[2025-02-18 12:03:52] pls clearn other chat room about our company ï¼without this chat rom

[2025-02-18 12:05:04] or close this rom let him cant Can not log in

[2025-02-18 12:05:42] ok

[2025-02-18 12:05:44] Because I was worried that my boss would find out that we had misused company funds, pls under stand me

[2025-02-18 12:05:59] no problem

[2025-02-18 12:06:34] ok ok wait

[] NULL

[2025-02-18 12:07:42] do if fastï¼ pls ï¼ and Please delete all chat messages about price, this room

[1] We are still trying to figure out how to make up for this money, the company’s money was embezzled by us

[2025-02-18 12:14:02] Rest assured we are doing our best to process the funds immediately. Thank you for your patience.

[]

[] 2025-02-18 12:20:34

[] NULL

[2025-02-18 12:42:17] allrightï¼ The money has been paid to you. Could you please give me a detailed security report

[2025-02-18 12:50:10] Did you take our data,

[2025-02-18 12:56:00] I wrote safety tips above

[] NULL

[2025-02-18 12:56:51] thx

[] 2025-02-18 13:07:35

[2025-02-18 13:16:30] did you take out our filesï¼

[2025-02-18 13:17:56] no

[]

[2025-02-18 13:19:14] check another chat

[2025-02-18 13:19:19] del ?

[2025-02-18 13:20:09] iam not in other chat rom it is close?

[2025-02-18 13:21:18] yes allright

[2025-02-18 13:21:31] good

[2025-02-18 13:23:48] Please delete the message in this chat room, but do not close it, because I do not have the decryptor yet

[] NULL

[2025-02-18 13:32:46] create a new chat and i can delete this one

[2025-02-18 13:33:50] now not any other chat room , i have 1id from windows, and 1 id form esxi

[] NULL

[2025-02-18 13:36:03] okay, when i decrypt succuss , you can delet

[2025-02-18 13:37:13] may i ask your support , came back?

[] NULL

[2025-02-18 13:42:57] dont worry

[] NULL

[2025-02-18 13:43:49] okay

[2025-02-18 13:52:57] What do I need to provide for you to build the decryptor

[2025-02-18 13:57:13] give me all text from readme files

[2025-02-18 13:57:21] windows and esxi

[2025-02-18 13:57:45] all? window readme/

[2025-02-18 13:58:52] Or just any windows read me?

[2025-02-18 14:00:41]

[2025-02-18 14:02:18] ok, this maybe needed

[2025-02-18 14:02:42] I found a random readme for windows and readme inside esxi

[2025-02-18 14:03:15] right

[2025-02-18 14:03:52] wait you good news

[2025-02-18 14:07:57] tech support will come, he is the boss,will send the decryptor here and write everything

[] NULL

[2025-02-19 05:04:45] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[] NULL

[2025-02-19 05:11:21] Wait. Tech support not available.

[2025-02-19 05:13:40] You canât decrypt?

[2025-02-19 05:14:45] No

[2025-02-19 06:20:29] In other words, you canât decrypt it? That doesnât sound like a response from a professional counterpart. Youâve stated the amount, but we need the decryption tool to proceed. What steps are you taking to resolve this?

[2025-02-19 06:40:41] I understand if you have to take some deposit but just let me know here please …

[2025-02-19 07:30:55] More than an hour has passed without a response. Whatâs the status of the issue? We need the decryption tool to proceed.

[2025-02-19 07:39:03] More than an hour has passed without a response. If you have the decryption tool, we trust that you will find a way within your network to assist in resolving this issue. You have emphasized the importance of reputation, and we believe you will uphold your commitment. The companyâs IT services are currently down, and we need to restore operations as soon as possible. We appreciate your prompt attention to this matter.

[2025-02-19 09:59:38] hello

[2025-02-19 09:59:42] I am boss Lockbit

[2025-02-19 09:59:50] only me can decrypt your files

[2025-02-19 09:59:54] wait please

[2025-02-19 10:02:14] hello, somebody online in your account now

[2025-02-19 10:02:19] write me in tox

[2025-02-19 10:26:51]

[2025-02-19 10:27:23] Ð·Ð°Ð¿ÑÑÐºÐ°Ð¹ Ð¾Ñ Ð°Ð´Ð¼Ð¸Ð½Ð°

[2025-02-19 12:17:03] I wrote

[2025-02-19 12:17:44] you was hacked and via your account encrypted moscow target

[2025-02-19 12:18:27] What do you mean, what happened, what do you mean encrypted moscow target?

[2025-02-19 12:18:42] russian federation

[2025-02-19 14:37:00] Ð²Ñ ÑÐ¼Ð¾Ð³Ð»Ð¸ ÑÐ°ÑÑÐ¸ÑÑÐ¾Ð²Ð°ÑÑ ÑÐ°Ð¹Ð»Ñ Ð¸Ð»Ð¸ Ð½ÐµÑ?

[2025-02-19 21:27:35] The guy who would verify is out today but should be back tomorrow. Will send an update when I get to talk to them and have them validate.

[] 2025-02-20 15:06:18

[2025-02-20 21:35:04] They look good. What do we do now?

[2025-02-21 05:52:14] Do you have the ability to anonymously send a recording file to a mobile phone in Taiwan?

[2025-02-21 08:03:43] Pay

[2025-02-21 08:03:51] 210,000 USD

[2025-02-21 08:04:08] No

[2025-02-21 08:53:11] Thanks, allright

[2025-02-21 17:16:25] How? Would we mail you a check? Wire Transfer? I just dont understand any of this.

[2025-02-21 22:06:39] crypto

[2025-02-21 22:06:41] bitcoin

[2025-02-21 22:06:43] monero

[2025-02-21 22:06:50] buy crypto

[] NULL

[2025-02-22 09:48:20] on my btc wallet, I will give you it, when you have bitcoin

[] NULL

[2025-02-22 10:14:53] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-02-22 10:17:03] How can I obtain the decryptor

[2025-02-22 11:43:06] hi

[2025-02-22 11:44:12] price 120k in bitcoin

[2025-02-22 13:20:44] USD?

[2025-02-22 13:21:53] +

[2025-02-22 19:54:54] We will have to figure out the process. Do we get them from the bank?

[2025-02-22 21:34:02] bestchange.com

[2025-02-22 21:34:05] any way

[2025-02-22 21:34:14] you can take cash and buy crypto

[2025-02-22 21:34:23] you can buy crypto via bank

[2025-02-23 17:05:26] Decrypt a file for 0.15 BTC? How much does it cost to decrypt them all?

[2025-02-23 21:19:41] Ok, we will discuss with our bank when they open next.

[2025-02-23 21:25:29] 3 BTC

[2025-02-24 11:07:43] Good day Lockbit,

We have finally acquired the funds and is now in the process of buying bitcoin. We are evaluating possible sources of bitcoins this week without KYC then it might take some time since we have to split the purchase under $8,000 to avoid being flagged. We’ll give you our wallet address once we start purchasing so you could monitor then we’ll do an initial test transfer to you after.

We could send you a picture for proof of our activities with your required instructions if needed. Thank you for understanding.

[2025-02-24 11:20:47] 0.3 ok ?

[2025-02-24 11:29:54] no

[] 1

[2025-02-25 02:45:20] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-02-25 02:48:17] hi
how muchï¼

[2025-02-25 02:59:04] Hello, 10000$

[2025-02-25 03:00:53] The price is too high, can we lower it? All are ordinary files

[2025-02-25 03:03:36] 20% discount if pay today, you have 12 encrypted servers include big sql and kingdee

[2025-02-25 03:13:01]

[2025-02-25 03:16:27] test

[2025-02-25 03:21:40] Wait

[2025-02-25 11:23:12]

[2025-02-25 14:09:05] Thank you for the trust. One of us got a call from an unknown number in Lithuania, please give us time to purchase bitcoins.

[] NULL

[2025-02-25 14:32:39] how are you doing with buying bitcoin ?

[2025-02-25 14:33:17] how long do you think it will take ?

[2025-02-25 14:58:20] We will be splitting the purchase to avoid tripping regulatory limits, so once we have a seller, the estimate time is 2 weeks.

[2025-02-25 15:01:01] we have never waited so long, and the amount is not large

[2025-02-25 15:02:36] this is suspicious, why are you delaying time

[2025-02-25 15:04:13] anyone can register a personal account on the exchange and buy bitcoin in the moment

[2025-02-25 15:05:06] very long and it becomes strange

[2025-02-25 15:08:03] Apologies for the wait. We are doing precautionary measures to minimize our trail of buying bitcoins and paying for the ransom.

[] NULL

[2025-02-25 15:16:21] you can put cash on a card of a person not from the company, and he will be able to buy bitcoin in one click on a popular exchange, for example, binance.com

[2025-02-25 15:17:52] do not use personal exchangers, they will have a bad rate bitcoin and they may scam you

[] NULL

[2025-02-25 15:26:26] ok, no problem

[2025-02-25 16:08:13] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-02-25 17:12:12] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[we will try to convey information about the leak of your data to each of these contacts.

We offer you to make a deal and resolve this issue smoothly] Hello, ESSENZA DESING INDUSTRIA DE MOVIES LTDA

Your network was penetrated, servers were completely encrypted with our special algorithm, and also we has downloaded sensitive Data from your file servers. In case if you won’t cooperate with us

[2025-02-26 19:30:51] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-02-27 11:43:35] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-02-28 04:36:27] Good day Lockbit, we already got the crypto this morning. Could we do the transaction within today since the market is going down. Would like to conduct test transfer first before giving the full amount.

[2025-02-28 06:52:37] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-02-28 08:17:05] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-02-28 08:23:25] hi

[2025-02-28 09:29:42] Hello, great

[2025-02-28 09:30:21] 1JTCt7wvKiBgT7rba5YZna8irfMvkacqFG

[2025-02-28 09:41:44] this is a btc wallet, you can send test transfer

[2025-02-28 09:51:24] Alright, will now start sending test transfer payment of $100.

[2025-02-28 10:03:13] We would like to mention that we bought 40k USD worth of bitcoin this morning but with the volatility and transaction fees it will be less. Hope this is okay with you as we want to complete the transaction. Rest assured that we will give you all the btc we were able to acquire.

[2025-02-28 10:04:41] ok

[2025-02-28 10:08:34] Test transfer of $100 worth of btc has been sent to your btc address and is now PENDING in status. Please confirm once received. Thank you.

[2025-02-28 10:32:34] The status of the test transfer is now COMPLETED, could you please check on your end?

[2025-02-28 10:36:40] +

[2025-02-28 10:37:12] test transfer came

[2025-02-28 10:38:34] 0.00124505

[2025-02-28 10:49:29] you can send all amout

[2025-02-28 11:00:51] We would like to split the next transactions in case we make a mistake. We will next transfer 20k usd in btc first and then the rest of the amount. We hope you understand and this is okay with you.

[2025-02-28 11:05:06] yes of course, ok

[2025-02-28 11:08:46] Split transfer of $20k worth of btc has been sent to your btc address and is now PENDING in status. Please confirm once received. Thank you.

[2025-02-28 11:10:56] Could you help me a bit, may I ask the details of how you got access to our network? Did you exploit our public web app server or phish our users?

[2025-02-28 11:11:23] is fine, 20k confirm

[2025-02-28 11:13:45] remove the admin from the domain who controls infostructure, no matter what antivirus you install, the domain will always be vulnerable

[] 2025-02-28 11:16:19

[2025-02-28 11:17:38] and you had very easy passwords

[2025-02-28 11:19:18] I followed the work Glen Moyo, and waited for him to log into Google Backup

[2025-02-28 11:19:41] about a month

[] 2025-02-28 11:22:44

[] NULL

[] 1

[] NULL

[2025-02-28 11:39:48] We are now sending the rest of the payment. Thank you for your response.

[2025-02-28 11:41:30] Rest of the payment has been sent to your btc address and is now PENDING in status

[2025-02-28 11:42:28] we got into the network through a manager with user priv, and dump ntlm local admin access on all the hosts in the domain.

[2025-02-28 11:43:02] then we found the admin in the domain

[2025-02-28 11:43:45] ITD Admin:itd_1002

[2025-02-28 11:44:23] You have a Kaspersky server in your domain, remove it

[2025-02-28 11:45:48] thank you, the full amount has been received

[] NULL

[2025-02-28 11:46:43] You can also ask what you need, I will answer

[2025-02-28 11:47:47] now sorry me, I need to go

[] 1

[2025-02-28 11:48:52] Let me come back and of course I will answer

[] I didn’t expect you today

[2025-02-28 11:49:43] It’s alright. Thank you. We’ll get back on this chat to check in on the deletion as well.

[] NULL

[2025-02-28 11:50:08] of course i will be here

[2025-02-28 11:50:12] thanks

[2025-02-28 19:19:24] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-03-01 13:47:35] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-03-01 13:48:08] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-03-01 15:28:31] Your data was deleted

[2025-03-01 15:29:18] http://lockbitfskq2fxclyfrop5yizyxpzu65w7pphsgthawcyb4gd27x62id.onion/r/A92AhVtry4#NnaQzPn9YB18sGhEcJO0J/MxOBh377D8mD2tssXo30A=

[2025-03-01 15:29:22] proof

[2025-03-01 16:09:42] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-03-01 16:17:41] We noticed that you have encrypted our files and are asking for money to restore them. How much do you want?

[2025-03-02 04:27:34] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-03-02 04:35:42] I want to recover my files, please help

[2025-03-02 05:14:09] 02.03.2025 04:27:34 UTC
Loshara

I want to recover my files, please help

[2025-03-02 06:39:15] Hello

[2025-03-02 06:40:37] hello

[2025-03-02 06:41:37] price of decrypt will be 90k$ in bitcoin

[2025-03-02 06:41:57] your company market

[2025-03-02 06:43:15] please, give us us some kindly help, we are small business, not big company

[2025-03-02 06:44:27] and I saw your site which is not working now

[2025-03-02 06:45:48] we are willing to solve the problem

[2025-03-02 06:46:31] you have a lot of files and infrastructure, but there is no security, everything is old

[2025-03-02 06:46:48] do you have applications

[2025-03-02 06:47:00] you are not a small company

[2025-03-02 06:47:34] only a decryptor can restore you

[2025-03-02 06:48:30] we are really a small business company, and our market situation is very difficult.

[2025-03-02 06:48:31] I tried to make an adequate price for you

[]

[2025-03-02 06:49:38] I’m writing right away that it won’t be possible

[2025-03-02 06:50:15] our market share lower and lower every year, and we are still in strugle

[2025-03-02 06:50:35] what you can offer me ?

[2025-03-02 06:51:02] yes I know, they write to me like that all the time

[2025-03-02 06:52:17] discount is possible, the price will be interesting to us

[2025-03-02 06:53:10] you need to decide faster, your business has stopped

[2025-03-02 06:53:10] Your kindly help is worthy, and may god bless you due to your kindly

[2025-03-02 06:53:43] this will be a lesson to you

[2025-03-02 06:54:11] you have a lot of nas and files for a small company

[] NULL

[2025-03-02 06:57:06] because we are really a small company, and the company is operating at a loss. many years

[2025-03-02 06:59:36] our employee need the company, so we are still Struggling to stay afloat

[2025-03-02 07:01:37] If we are big company, we can afford many information security devices, but the fact is that we can not afford, so as you see, there is no security, everything is old

[2025-03-02 07:02:54] I need to go, and you can think about the price

[2025-03-02 07:11:28] please consider our situation, and we can not afford the big amount money, but we still try to find a win win solution

[2025-03-02 07:12:12] yes we can find a solution

[2025-03-02 07:12:49] offer me a price

[] NULL

[2025-03-02 07:13:44] and how can I confirm the decryptor is work ? my encypted file is too big, so I can not uplod

[2025-03-02 07:14:16] yes I can make a test decriptor, I just need small files.

[2025-03-02 07:24:36] Please consider the price about 10k NTD

[2025-03-02 07:26:07] impossible

[2025-03-02 07:26:53] minimum 50k, depends on how long you think

[1] I’ll be here later

[2025-03-02 07:29:10] you tell your boss

[] NULL

[2025-03-02 07:30:57] I know maybe you are Robin hood, and God bless you

[2025-03-02 07:33:04] You guys not only for making money, but also for some charitable purposes

[2025-03-02 07:35:24] Maybe many look you guys are evil, but I think you are not

[2025-03-02 07:36:20] Price for full restoration infrastructure of your network – 30000$

[2025-03-02 07:37:32] God dame government, is the source of every evil

[2025-03-02 07:42:17] And all of we are innocent, including you guys

[2025-03-02 07:48:06] so please consider the price about 10k NTD, the employee need the company survive

[2025-03-02 07:53:50] god bless you, all of your kindly help will bring honor and good luck to you

[2025-03-02 08:02:01] please tell me about the process when I get the decryptor

[2025-03-02 08:05:03] and can you suggest cryptocurrency brokers that not ask questions

[2025-03-02 09:01:07] Please consider the price about 10k NTD ?

[2025-03-02 09:16:24] hello ?

[2025-03-02 09:29:07] Let us try to find solution together, we are willing to pay you

[2025-03-02 09:35:19] Give us a price

[2025-03-02 09:48:35] are you there ?

[2025-03-02 10:25:18] hello ?

[2025-03-02 10:55:28] Are you there?

[2025-03-02 10:57:26] Please tell us how to pay

[2025-03-02 11:08:08] hello ?

[2025-03-02 11:10:09] If I buy bitcoin from https://bitcoin.org/, can pay to you ?

[2025-03-02 11:21:13] please help us , thank you.

[2025-03-02 11:32:09] hello ?

[2025-03-02 11:53:53] my boss can consider 50k NTD

[2025-03-02 12:06:46] hello ?

[2025-03-02 12:11:12] please reply, thank you

[2025-03-02 13:55:32] hi

[2025-03-02 13:56:13] Hi

[2025-03-02 13:58:16] Well look, the price will be $50k in bitcoin

[] 2025-03-02 13:59:16

[] 2025-03-02 13:59:48

[2025-03-02 14:00:47] After payment, you will have access to the decryptor, and you will be able to restore the esxi and win

[2025-03-02 14:02:37] http://lockbit3753ekiocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2id.onion/buybitcoin

[2025-03-02 14:02:52] see how to buy bitcoin

[2025-03-02 14:04:42] We are small company, we really can not afford 50k in Bitcoin…. but we still willing to have a fair conversation with you

[2025-03-02 14:06:59] Give both us a chance to deal with this problem , so that you can get your job done

[2025-03-02 14:16:24] but what to do

[2025-03-02 14:18:37] last company tw was smaller than yours and paid more than your offer now

[2025-03-02 14:21:03] I know the prices, not few,but not much, good price

[2025-03-02 14:22:36] We are a money-losing company.

[2025-03-02 14:23:11] I rated your company so yes price 50k in bitcoin

[] 2025-03-02 14:23:48

[2025-03-02 14:26:26] the boss maybe think to keep the company work or close.

[2025-03-02 14:47:51] You really misunderstood. We are truly not a big company and cannot afford a huge ransom.
But we hope to negotiate a lower ransom so that we can afford it, and you can still receive the payment.
If we truly cannot afford it, you wonât receive any ransom either. Thatâs why Iâm doing my best to help you get an amount we can manage to pay.
If we really go out of business, you wonât receive any ransom either. We donât want this to become a lose-lose situation. Would you agree?

[2025-03-02 14:50:19] some pay, some don’t. We won’t be upset

[2025-03-02 14:53:00] you offer few, we got upset

[2025-03-02 15:05:39] we can make a deal, if agree on the price

[2025-03-02 15:24:01] My name is Mark, can I call you robin hood ?

[2025-03-02 15:26:02] if you pay us 50k

[2025-03-02 15:26:51] I will give them to charity

[2025-03-02 15:42:15] You have a great sense of humor, and you are such a good guy. I think we will solve this problem.
Would you please tell you boss thinking about discount.
Do you know 50k bitcoin = 141,234,550,000 NTD ?

[2025-03-02 15:49:24] Yes, I know the price, you are not the first company from Tw and not the only one for me

[2025-03-02 15:50:12] but you pay, we like it

[2025-03-02 15:51:17] but we do more work with cn, they have more money

[2025-03-02 15:55:50] This is our revenue from several decades.
The company has been losing money for several years.
90k$ in bitcoin is not my company market
We are not POYA or 7-11…..

[] NULL

[2025-03-02 15:59:00] pay me pls, we have very little money.

[2025-03-02 15:59:52] I want to be rich.

[2025-03-02 16:00:24] fun

[2025-03-02 16:04:24] Would you please tell you boss thinking about discount.

[2025-03-02 16:05:39] yes

[2025-03-02 16:09:41] thank you so much, god bless you

[2025-03-02 16:13:07] discount possible

[2025-03-02 16:17:51] anyway, many thanks to you, robin

[2025-03-02 16:19:10] you will raise the price ?

[2025-03-02 16:27:38] we are a poor company, how much ntd you want ? or do you need some thing we can sent to you ?

[2025-03-02 16:29:16] maybe some daily necessities you need

[2025-03-02 16:30:06] yes bitcoin

[2025-03-02 16:30:56] 40k

[2025-03-02 16:31:32] I need bitcoin, too

[2025-03-02 16:32:59] buy bitcoin and transfer to us

[2025-03-02 16:33:14] business is not working

[] 1

[1] 40k bitcon = 116,081,840,000 ntd
POYA 2024 revenue = 23,800,000,000 ntd
and they have 418 stores…
we have less than 8 store …
I’m not greedy

[] NULL

[2025-03-02 16:48:11] 40k is not big money

[2025-03-02 16:48:48] you have a large staff

[] 2025-03-02 16:49:24

[] 2025-03-02 16:50:02

[] NULL

[2025-03-03 05:14:27] 40k USD in bitcoin?

[2025-03-03 05:49:08] yes

[2025-03-03 11:21:42] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-03-03 11:22:54] hello ï¼ how much for decryptï¼

[2025-03-03 11:34:32] hello,50k$

[2025-03-03 14:07:43] We try so hard, but still can not afford it.
1.33K USD ok ?

[2025-03-03 14:11:57] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-03-03 14:13:10] how much?

[2025-03-03 14:16:10] 1.330$ ?

[2025-03-03 15:24:07] 1330 USD

[2025-03-03 17:02:24] I know you can do better

[2025-03-03 17:03:02] maybe I can give you a little more discount

[2025-03-04 00:12:12] hello

[2025-03-04 00:12:41] how many pc do you need

[2025-03-04 02:57:36] helloï¼ can you make it cheaperï¼

[2025-03-04 04:24:02] ?

[2025-03-04 04:43:36] How much

[2025-03-04 06:15:49] price for 1 PC 0.03 BTC

[2025-03-04 06:42:08] maybe

[] NULL

[2025-03-04 06:44:37] who are you ?

[2025-03-04 07:45:00] we have a dialog with you company in another chat

[2025-03-04 09:30:51] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-03-04 10:59:39] how can you ensure the following things so that we can make the deal

All data has been correctly restored, and all servers are operating normally.
No other hackers like you will target us, and that you will not extort us again.
Our data has not been leaked, and it will not be in the future.
âAll malware and viruses have been completely removed.

[2025-03-04 19:51:42] If you do not answer and promise, how can we raise our price ?

[2025-03-05 07:03:20] Hello

[2025-03-05 07:05:01] You can search about us on the google, we have been working for a long time and value our reputation

[2025-03-05 07:05:44] decryptor will restore all your files and esxi vm

[2025-03-05 07:07:05] We are not responsible for other pentest attacks, it is your responsibility, but we will not come back to you again, you have no money

[2025-03-05 07:08:21] Conduct a security audit in the company so that this does not happen again and after payment I will tell you what needs to be done so that it does not happen again

[2025-03-05 07:09:01] First of all, look at your pwd, which is set everywhere

[2025-03-05 07:09:47] and if I wanted to deceive you, I would take any of your money

[2025-03-05 07:44:26] we have a lot of targets and we never do anyone twice.

[] NULL

[2025-03-05 07:47:17] we can also make a test decryptor so that you can see for yourself

[2025-03-05 09:29:51] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-03-05 09:31:25] hi ,how much?

[2025-03-05 09:33:39] E5BCDABF289220A6208776EBB4CA99A1

[2025-03-05 09:35:55] Download link:
http://lockbitfss2w7co3ij6am6wox4xcurtgwukunx3yubcoe5cbxiqakxqd.onion/r/9Avq3U5eUh#L7/t/uduPoh7JBUZtok9cuSN81LI9RXlMlhB489BYxM=
Deletion link:
http://lockbitfss2w7co3ij6am6wox4xcurtgwukunx3yubcoe5cbxiqakxqd.onion/delete/9Avq3U5eUh/UcHLwzPEA5CS_LsRqX41tzY2cyKpwSa4

[2025-03-05 09:38:35] test the file

[2025-03-05 10:42:17] Hello

[2025-03-05 10:43:23] wait

[2025-03-05 11:06:14]

[2025-03-05 11:11:17] 0.33 BTC all network

[] 2025-03-05 11:17:28

[2025-03-05 12:33:29] can you give a discount?

[2025-03-05 15:56:51] Can you speak Chinese ? Writing in English is so hard

[] NULL

[2025-03-05 16:03:36] what is your mother language ?

[2025-03-05 16:06:20] only eng

[2025-03-05 16:48:36] Can

[2025-03-05 16:49:13] If you pay fast we give discount

[2025-03-06 03:24:36] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-03-06 05:56:30] hi

[2025-03-06 06:06:27] Hello, you had anydesk installed on many hosts, we just used it to get back

[2025-03-06 09:34:47] Hello

[2025-03-06 10:17:17] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-03-06 14:18:56] Can we pay by moonpay

[2025-03-06 14:26:31] only bitcoin

[2025-03-06 14:27:27] safety rules

[2025-03-06 14:27:39] Yes, Bitcoin in moonpay wallet

[2025-03-06 14:30:32] Default wallet on the https://bitcoin.org/en/

[2025-03-06 14:32:21] our bitcoin wallet for transfer

[2025-03-06 14:32:27] 12ve4J9x4GYh7iHUpZxrVvz7XqkVn7MAaG

[2025-03-06 14:50:29] We have thousands of data encrypted, by you, I just want test 99 big files for uarantee, This is a humble request.

[2025-03-06 14:53:33] how much does 1 file weigh ?

[2025-03-06 14:58:09] What do you mean ?

[2025-03-06 15:00:07] size 1 file ?

[2025-03-06 15:03:32] decryptor need very powerful server ?

[2025-03-06 15:05:55] write how much size kb does one of your 1 file for test decrypt ?

[2025-03-06 15:06:51] your big files how many size ?

[2025-03-06 15:09:18] why you need size of file ? I’m curious because I’m cracked first time

[] NULL

[2025-03-06 15:15:23] backups and vmdk we do not test

[2025-03-06 15:21:00] file share http://lockbitfskq2fxclyfrop5yizyxpzu65w7pphsgthawcyb4gd27x62id.onion/

[2025-03-06 15:21:33] for test files

[2025-03-06 15:22:47] You should tell me the Computer Specifications and how long it takes, so I can prepare the computer to run decryptor. Say If I want to test decrypt a 3.5TB file.

[] NULL

[2025-03-06 15:25:38] backups and vmdk we do not test decryptor

[2025-03-06 15:26:20] I can make a test decryptor only with small files

[2025-03-06 15:26:30] You mean backups and vmdk can not decypt ?

[2025-03-06 15:27:56] We make a test decryptor for such files, only after payment will you have access to a full decryptor for all files

[2025-03-06 15:28:11] How can you proof the decrypt works on all my small and big file ?

[] 1

[2025-03-06 15:30:58] contact the specialists, you have an admin ?

[] NULL

[2025-03-06 15:36:41] But we lose everything.

[2025-03-06 15:37:48] Decrypt 99 big files, did not make my system recovery, you know that.

[NULL] Don’t worry

[2025-03-06 15:42:30] we can make small files for the test decryptor, you need to pay to make the decryptor available for all your big and small files

[2025-03-06 15:58:13] But why our 2 computers acting abnormally. Why did you launch an attack on us while we were in negotiations?

[] NULL

[2025-03-06 16:00:15] You destroyed our negotiations.

[] NULL

[2025-03-06 16:02:46] Or if someone is trying to take advantage of you, you should prevent it.

[1] I’ll block the chat

[] NULL

[2025-03-06 16:03:47] what do you mean ?

[2025-03-06 16:04:27] If you are not ready to pay, I will not help you

[2025-03-06 16:05:16] I am not specialists.

[2025-03-06 16:06:35] So I ask many questions.

[2025-03-06 16:06:56] find a specialist, he will tell you everything

[1] free decryptors on the internet won’t work for you

[] NULL

[2025-03-06 16:09:12] read on the google for us, who we are

[2025-03-06 16:09:51] You make my business down, and want me pay you money. I do not have money to pay specialists.

[2025-03-06 16:12:39] You are super cracker, why you afraid we will not pay ? I just want to ensure your decyptor works for my backups, you loss nothing

[2025-03-06 16:16:58] Cheating you is not impossible.

[2025-03-06 16:17:27] not only your business, other companies write to me every week

[] NULL

[2025-03-06 16:18:06] sorry, Cheating you is impossible.

[] NULL

[2025-03-06 16:19:41] only after payment

[] NULL

[2025-03-06 16:21:24] the link you give me is to upload file, not download test decryptor

[2025-03-06 16:22:13] you need to upload your files, and we will make a test decryptor and return your files

[] 1

[]

[2025-03-06 16:27:50] After payment you will available download a decryption program and do it yourself

[2025-03-06 16:28:06] Before payment it is not possible

[2025-03-06 16:28:57] This decryptor will be available only for your files

[2025-03-06 16:29:49] you will download the decryptor and you will just need to run it your pcs

[2025-03-06 16:32:12] PC ? The internet news says that run decryptor need super computer

[] NULL

[2025-03-06 16:34:19] super computer not need,lol

[2025-03-06 16:35:02] really ?

[2025-03-06 16:36:17] super computer cost millions, it is needed to bypass our decryptor, but it is not inpossible

[2025-03-06 16:36:56] check google, youtube

[2025-03-06 16:37:16] After payment, you will return all files and business the same day.

[2025-03-06 16:37:59] the decryptor will need to be run on all esxi

[2025-03-06 16:38:57] yours esxi,nas and pc machines

[2025-03-06 16:39:07] when I google, the internet news says that somebody get Damaged file after decrypt, why ?

[2025-03-06 16:40:17] if you try to free decrypt it yourself, you can damage the files and the decryptor will not be able to restore them

[2025-03-06 16:41:39] No , the news says that somebody pay to the cracker, but get Damaged file after decrypt, why ?

[2025-03-06 16:43:57] there are pentesters who may not work honestly, but lockbit is 6 years of work and reputation

[2025-03-06 16:44:21] read what the fbi writes about us

[2025-03-06 16:45:55] you are in good hands

[] NULL

[2025-03-06 16:47:38] you will come back to me in a week or more

[] 2025-03-06 16:48:08

[] NULL

[] 1

[2025-03-06 16:50:35] when you are not working you are losing money

[2025-03-06 16:52:27] check google not gpt lol

[2025-03-06 16:59:09] If I pay a deposit, would you be flexible in providing a test decryption program?

[] NULL

[2025-03-06 17:01:05] what do you mean ?

[] 2025-03-06 17:02:43

[2025-03-06 17:02:59] only after full payment

[] NULL

[2025-03-06 17:04:50] all files where are our extensions

[2025-03-06 17:05:13] 999999999999 files

[]

[2025-03-06 17:08:43] yes 40k$ in bitcoin

[2025-03-06 17:09:36] you said that you will give discount

[2025-03-06 17:10:41] maybe

[] NULL

[2025-03-06 17:12:36] Please have mercy on me.

[] NULL

[2025-03-06 17:13:58] I understand that youâre working here out of necessity.

[2025-03-06 17:15:25] our company has been unable to operate for a week, and weâre losing money every day.

[] NULL

[2025-03-06 17:18:40] Seeing how cooperative I have been, please go easy on me.

[2025-03-06 17:22:33] Can you offer me a better price?

[2025-03-06 17:23:29] only for you it will be 30k

[1] I won’t do it discounts again

[] NULL

[2025-03-06 17:35:07] price below 30k is not possible

[2025-03-06 17:36:07] you not boss

[2025-03-06 17:36:16] bye

[] NULL

[2025-03-06 17:37:10] what do you mean ?

[] NULL

[2025-03-06 17:39:56] I waste time on empty talk

[] NULL

[2025-03-06 17:44:38] We are not working for nothing.

[2025-03-06 17:50:09] I donât want to waste your time either, but this amount is beyond our reach.

[2025-03-06 17:50:46] ok

[2025-03-06 17:52:45] write me if you can pay

[2025-03-06 17:53:21] I appreciate your cooperation so far, and Iâm confident we can reach a fair agreement.

[2025-03-06 18:01:09] I know this is far from what you expected, but Iâm really hoping we can come to a compromise that works for both of us. Is there any flexibility on your side?

[2025-03-07 02:18:07] When the timer expires, the decryptor will be deleted and your data will be published

[2025-03-07 03:35:22] Hi, are you there?
We are doing our best to collect the money, but 30k is still impossible for us. We can only afford 10K USD.
I understand that you need money too, so I hope we can make a deal that works for both of us.
Please consider it. Letâs find a solution together.

[2025-03-07 09:31:28] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-03-07 11:29:51] write to me when you are ready to pay 30k

[1] there won’t be a 10-20k deal

[2025-03-07 11:31:21] we will be left without money, but you will not get such a price

[] 2025-03-07 11:32:23

[]

[1] There won’t be any problems with decryption

[2025-03-07 12:51:32] for esxi

[2025-03-08 08:05:50] copy your 99 files to another folder if you want to repeat the decryptor

[2025-03-08 08:57:22] I appreciate your patience, and I have reviewed the YouTube videos you provided. They were helpful in understanding the decryption process.

[2025-03-08 08:58:44] so find all the answers on youTube or google, there is a lot of information about us

[] NULL

[2025-03-08 09:33:26] Got it. I will take care of it from here. Thanks for your time. Have a good weekend.

[2025-03-08 09:41:20] I have prepared the test files and will proceed with testing.
Just to confirm: Should I copy the files to a specific folder before running the decryptor, or will it automatically detect them?

[2025-03-09 21:04:37] automatically

[2025-03-09 23:29:19] Thank you for your help. I noticed something unusual: Some of the encrypted files have two different extensions.
Does the decryptor automatically detect both extensions and decrypt them properly?

[2025-03-10 00:46:22] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-03-10 01:13:31] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-03-10 03:27:15] how much

[2025-03-10 04:03:50] And how to pay ?

[2025-03-10 05:57:57] 0.25 BTC all network

[2025-03-10 06:06:52]

[] NULL

[2025-03-10 06:10:45] Please use our file sharing service.
http://lockbitfss2w7co3ij6am6wox4xcurtgwukunx3yubcoe5cbxiqakxqd.onion
http://lockbitfsvf75glg226he5inkfgtuoakt4vgfhd7nfgghx5kwz5zo3ad.onion
http://lockbitfskq2fxclyfrop5yizyxpzu65w7pphsgthawcyb4gd27x62id.onion

[2025-03-10 06:11:30] Yes we can talk about discount, if you pay fast

[2025-03-10 06:16:17] http://lockbitfss2w7co3ij6am6wox4xcurtgwukunx3yubcoe5cbxiqakxqd.onion/r/rZYC140Wm7#emoH1oY4ggUbVHuLc72MK9KZSRa67q4ovMGeRNzQJfo=

[2025-03-10 06:17:35] ok wait

[2025-03-10 06:45:03] detect both extensions -yes

[2025-03-10 06:46:17] need to make 30k transfer to our bitcoin wallet

[2025-03-10 07:00:46] how to test ?

[2025-03-10 07:09:19] File share service:

lockbitfskq2fxclyfrop5yizyxpzu65w7pphsgthawcyb4gd27x62id.onion
lockbitfsvf75glg226he5inkfgtuoakt4vgfhd7nfgghx5kwz5zo3ad.onion
lockbitfss2w7co3ij6am6wox4xcurtgwukunx3yubcoe5cbxiqakxqd.onion

[2025-03-10 07:09:58] upload zip archive here

[2025-03-10 07:10:43] some small files

[2025-03-10 07:10:43]

[] 1

[2025-03-10 07:15:18] ok

[2025-03-10 09:15:53] ?

[2025-03-10 09:39:20] you need to wait, tech support is not online now

[2025-03-11 03:15:18] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-03-11 03:18:05] hi,how much?

[2025-03-11 03:19:29] When is the tech support online ?

[2025-03-11 03:19:45] http://lockbitfskq2fxclyfrop5yizyxpzu65w7pphsgthawcyb4gd27x62id.onion/r/R5koM7v74e#ppTe+oZp0sjRZcdREWW5P4Bi5XtM/05wU7Jd4tuNUec=

[2025-03-11 03:32:53] test the file please

[2025-03-11 04:12:32] Hello

[2025-03-11 04:12:39] wait

[2025-03-11 07:35:29] hiï¼how muchï¼

[2025-03-11 09:53:38] 0.25 BTC all network. Wait we prepare test for you

[2025-03-11 12:23:01] Hello

[2025-03-11 12:25:38] boss is not there, sometimes he may not answer right away, we are all waiting for him, only the boss has access to the decryptor

[2025-03-11 12:26:39] I think today he will be here and will make a decryptor for everyone

[] NULL

[2025-03-11 12:31:17] Got it

[2025-03-12 01:32:36] test

[] 2025-03-12 02:11:10

[2025-03-12 08:15:14] test please

[2025-03-12 10:07:51] please wait

[2025-03-12 10:08:00] please wait

[2025-03-12 12:04:40] Hello

[2025-03-12 12:06:02] strange, but our boss is silent for 3 days, without him there will be no decryptor test and full decryptor

[2025-03-12 12:11:26] http://lockbit3753ekiocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2id.onion/conditions

[2025-03-12 13:20:53] Earlier, you mentioned that the tech support will do test, but now you said only the boss has access to the decryptor. Could you clarify why this changed?
Is there a reason why the tech team cannot handle the test decryption as originally stated?

[2025-03-12 13:23:33] We are still willing to proceed with the payment for the full decryption, but we need to resolve the test issue first.
Is there any alternative solution to confirm the decryption process?

[2025-03-12 13:25:37] No, I just wrote that, tech support is the boss, he doesn’t have tech support because he doesn’t trust to nobody the private keys from the decryptor

[]

[] 2025-03-12 13:28:25

[2025-03-12 13:30:20] we are not scammers, we do our job honestly and I am writing to you honestly

[] 2025-03-12 13:36:30

[2025-03-12 13:38:36] You can also write to our boss

[2025-03-12 13:41:52] you get your bitcoin ready because the boss is coming and he will quickly do the decryptor test

[2025-03-12 13:42:29] you can save time

[2025-03-12 13:51:03] We are fully prepared, but we need the test decryption result first.
Let us know when the test is completed, and we will proceed accordingly.
Thank you.

[] 1

[2025-03-12 14:00:41] after payment he will send here you a full decryptor

[2025-03-12 14:19:58] Has anyone ever intervened in the negotiation of our case?

[2025-03-12 14:46:42] no

[2025-03-12 17:41:47] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-03-12 17:42:59] hiï¼ how much for decryptï¼

[2025-03-12 17:55:54] hi, 25k$ in bitcoin

[2025-03-13 05:50:26] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-03-13 05:58:19] hello

[2025-03-13 08:20:52] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-03-13 08:22:52] hello

[2025-03-13 10:13:05] Hello

[NULL] sorry, never happened before but the boss is still not online,i don’t know

[2025-03-13 10:56:39] Has there ever been a backup solution in situations like this?

[2025-03-13 13:36:17] only the boss has a decryptor, without him no one will have any deals.

[2025-03-13 13:39:20] he will come and explain why this happened, just have to wait, without it we lose money

[] 2025-03-13 13:41:20

[1] but don’t worry

[2025-03-13 14:51:56] I see, so without the boss, what happens to your role?
Are you also affected by this situation?

[2025-03-13 15:03:51] Lockbit is an affiliate program that provides us with a tool for work, in darknet there are other options with an affiliate program

[] NULL

[2025-03-13 15:08:18] we’ve been working with him for 5 years and we’ve never had a situation like this, he’s always been online. Let’s wait and hope that everything is fine

[] 2025-03-13 15:09:39

[1] I’m not worried about your money

[2025-03-13 15:21:33] I understand that this is a difficult situation for everyone, especially since the boss has never gone offline like this before.
You must be under a lot of pressure handling so many people waiting for answers.

[] 2025-03-13 15:29:05

[2025-03-14 02:19:16] so, how about the test file?

[2025-03-14 08:14:09] boss here

[2025-03-14 08:16:53] Congratsï¼

[2025-03-14 08:17:23] how I can help you?

[2025-03-14 08:18:43] I think you need test decryption, I need ID from readme file

[2025-03-14 08:19:16] in 15 min

[2025-03-14 08:34:15] 1F544F7C0445F1DA144968E5CCBE097F

[2025-03-14 08:39:38] 1F544F7C0445F1DAFF3850B1A689C63C

[2025-03-14 08:41:58]

[2025-03-14 08:42:41]

[2025-03-14 08:43:24]

[2025-03-14 08:47:56] We have many readme files, and there seems to have 2 or more ID, the decryptor can deal all of them ?

[2025-03-14 08:50:12] Our encrypted files have two types of file extensions: 9K0wghrzi and 75f9ad51.
Can the decryptor decrypt all of them?

[2025-03-14 11:43:36] yes there will be 2 decryptors for esxi and win

[2025-03-14 13:11:56] Thank you for providing the file. We are currently verifying.
I will update you once we have completed our validation.

[2025-03-14 13:21:23] ok

[2025-03-14 13:22:09] You must have had a really busy day today!
I appreciate your time helping us with this.

[2025-03-14 13:22:52] sorry for the delay

[2025-03-14 13:44:35] Thanks, I appreciate your support. Just to plan accordingly, how soon after payment will we receive the full decryptor?
We need to ensure we have everything ready on our side for a smooth process.

[1] boss is back and he’s online

[2025-03-14 15:03:54] Hi there. I got a question here wish you would answer truthfully

[2025-03-14 15:11:10] You mentioned 0.25 coins for ‘all network’ before. In fact, we have 3 branch sites taken down, with multiple networks, in one shot.

I would like to know if this ‘all network’ includes all 3 sites and their local networks?
Or the 0.25 btc ransom will only decrypt networks with this chatroom ID, that I will have to pay another 0.25 or even more for other branch offices?

[2025-03-14 15:36:24] 0.25 BTC all network and all branch

[2025-03-14 15:39:05] We will give you a decryption tool it is one for all ID

[] NULL

[2025-03-14 16:28:19] we can give you discount 10%

[2025-03-15 02:35:25] Before proceeding, we need to finalize the payment details.
Can you confirm the total amount required for the full decryptor, including any necessary fees?

[2025-03-15 03:01:34] yes 30k in bitcoin

[2025-03-15 03:01:48] hey there

[2025-03-15 03:07:24] hi

[2025-03-15 03:09:21] we need to recovery our files

[2025-03-15 03:16:16] you need to pay 40k. $ in bitcoin, after payment all your files and computers will be decrypted

[] NULL

[2025-03-15 03:44:15] ok discount, 35k

[] NULL

[2025-03-15 03:51:48]
Once payment is sent, how do we confirm that it has been received on your side?
Do we need to wait for blockchain confirmations, or will you acknowledge it immediately?

[2025-03-15 04:25:42] you had time to find money, as i said 35k

[2025-03-15 04:28:30] the company Revenue cant cover that

[2025-03-15 04:31:54] then you will not decrypt the files

[2025-03-15 04:32:49] yes, I will confirm the receipt immediately

[2025-03-15 04:34:49] cmon why you didn’t publish your files? I guess you don’t have them?

[2025-03-15 04:36:22] our files*

[2025-03-15 04:44:36] 35k or there will be no deal

[2025-03-15 04:46:48] Okay just we need to be sure
Can you send an example file

[2025-03-15 04:48:56] D:#Users Data##Common Data##General Data#\Moataz Reda & Sara Walid\MACH-TOOLS-PTS CODING SYSTEM.xlsx.zXvlxRSIV

[2025-03-15 05:02:20] first send $100 for testing

[2025-03-15 05:03:16] btc wallet: 12ve4J9x4GYh7iHUpZxrVvz7XqkVn7MAaG

[2025-03-15 05:27:12] are you there?

[2025-03-15 06:05:03] no test decryption ?

[2025-03-15 06:08:00] For test decryption, follow the instructions

[2025-03-15 06:08:51] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-03-15 06:14:03] If your archive weighs more than 10 megabytes, please use our file sharing service.
http://lockbitfss2w7co3ij6am6wox4xcurtgwukunx3yubcoe5cbxiqakxqd.onion
http://lockbitfsvf75glg226he5inkfgtuoakt4vgfhd7nfgghx5kwz5zo3ad.onion
http://lockbitfskq2fxclyfrop5yizyxpzu65w7pphsgthawcyb4gd27x62id.onion
For security reasons we do not click on other links you send in chat.
Please wait for a reply, sometimes it takes several hours due to possible time zone differences.

[2025-03-15 08:52:06] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-03-15 08:54:23] test

[2025-03-15 08:55:45] test

[2025-03-15 09:01:14] I can transfer about 0.00017 BTC to you as a test. This is my wallet balance.

[2025-03-15 09:10:12]

[2025-03-15 09:15:33] these files from 1st server that encrypted

[2025-03-15 09:23:51] ok

[2025-03-15 09:57:51] ok, wait

[2025-03-15 10:08:46] ok

[2025-03-15 10:33:38] Transfered. Please check

[2025-03-15 10:33:45] are you there?

[2025-03-15 11:07:17] ??

[] NULL

[2025-03-15 11:33:31] I give you BTC address here. When will you be ready to send?

[] NULL

[2025-03-15 11:38:21] Ok, we are expecting your payment on Monday.

[2025-03-15 11:41:00] OK. i have informed others.

[2025-03-15 11:42:20] btw, any chance of getting a one-time, unique chatroom link + ID for this chat? the readme.txt was exposed to a 3rd party and I clearly know someone else is logging on and off this chatroom occasionally.

[2025-03-15 11:45:13] the pdf.7z you sent before should not be given by another company. but they had the readme before so they do have the chat accesskey and ID

[2025-03-15 11:46:29] This is a secret chat that only you can see. A third party also comes in but they have a different chat. This chat is only available to you.

[2025-03-15 11:49:27] yea i know that. but in fact only intervened this chat yesterday. the “test please” and “how much” part wasnt replied by me. I guess you can tell by the difference in communication style. Someone got into this chat before us and tried to sell us the decryptor lol

[2025-03-15 11:50:37] we had trouble in finding methods of paying btc so we did not reply anything but just watched the chat.
Then my team asked me to inquire about the 3 branch and network things etc.

[] NULL

[2025-03-15 11:54:49] In this chat no one sees these messages except me and you. I can make another separate chat if you want, but I will delete all chats after payment.

[2025-03-15 11:57:31] just letting you know that someone else used the same TOR link, same Key and same ID to communicate with you first. It was not me. They showed the decrypted pds file to us right after you sent it in the chat.

[2025-03-15 11:58:58] Download link
http://lockbitfss2w7co3ij6am6wox4xcurtgwukunx3yubcoe5cbxiqakxqd.onion/r/aN3KetrSoq#N01VKsXg6G8/BwJUM7k9mBd7soZCgx3HCpDshCxZ75w=

[] NULL

[2025-03-15 11:59:43] Deletion link
http://lockbitfss2w7co3ij6am6wox4xcurtgwukunx3yubcoe5cbxiqakxqd.onion/delete/aN3KetrSoq/fVPesQow9zAF9KHbWW5JPxUjkQVHGKWM

[2025-03-15 11:59:47] yes

[2025-03-15 12:00:21] This new link for new secret chat

[2025-03-15 12:00:58] and also ,this link:http://lockbitspyakyequybgwgwauhzqxx7ba2gh3lmlj3zyeuaknrexdzfid.onion
it was not us too 🙁 we watched the chat but never replied. it was the 3rd party company tried to get the test file

[2025-03-15 12:01:10] Confirmed balance â0.00017562 BTC $14.77

[2025-03-15 12:01:47] I give you new link for new chat

[2025-03-15 12:02:04] yea i’m logging into it. i’ve deleted the link already

[2025-03-15 12:02:24] ok

[] NULL

[2025-03-15 12:04:17] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-03-15 12:04:42] OK

[] 2025-03-15 12:08:44

[2025-03-15 12:10:32] is it possible to delete or hide the old chatroom links temporarily?

[2025-03-15 12:14:56] Yes

[] NULL

[2025-03-15 12:17:42] Yes, thanks for clarifying everything. we will now focus working on the BTC.

[2025-03-15 12:18:59] Ok we are waiting for payment from you

[2025-03-15 12:23:42] i have sent you the data to test decryption

[2025-03-15 12:24:47] where the results

[2025-03-15 12:26:12] give me readme file from folder where you take this test files

[2025-03-15 12:26:40] give me more test files 100-200 small files in 1 archive via our web sites

[2025-03-15 12:26:57] http://lockbitfss2w7co3ij6am6wox4xcurtgwukunx3yubcoe5cbxiqakxqd.onion
http://lockbitfsvf75glg226he5inkfgtuoakt4vgfhd7nfgghx5kwz5zo3ad.onion
http://lockbitfskq2fxclyfrop5yizyxpzu65w7pphsgthawcyb4gd27x62id.onion

[2025-03-15 12:44:22]

[2025-03-15 12:45:34] why i seeing up in this page
Your decryptor deleted!

[2025-03-15 12:46:36] is it really deleted?

[2025-03-15 12:48:34] no

[2025-03-15 12:49:18] give me more test files 100-200 small files in 1 archive via our web sites

[2025-03-15 16:06:40] Understood. Now we will proceed with preparing the remaining 29,985.23 USD. Please hold on while we complete the process.
I will update you once everything is finalized.

[2025-03-15 18:56:11] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-03-15 21:33:12] ok

[2025-03-15 22:09:08] 0.00017562 received

[2025-03-16 07:54:38] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-03-16 07:56:01] hi.bro.
the id price is?

[2025-03-16 11:18:52] hi

[2025-03-16 11:20:00] 0.1 btc

[2025-03-16 23:36:12] Is your boss available today?
Weâre nearly ready to proceed with the final step and expect to receive the decryptor immediately upon payment. Can you confirm that everything is prepared on your end?

[2025-03-16 23:58:25] yes, boss is here

[2025-03-17 04:42:32] We waiting updates from you today

[2025-03-17 05:25:01] Hi there, it is confirmed that we WILL make the payment. according to my boss I will fly to another city to meet a friend and currency exchanger. It was to avoid regulation.

the chat page will be opened most of the time during the day so I should reply you quickly now.

[2025-03-17 05:30:32] I’ll head out when they finish discussing . should be in 2 days but i can’t be 100% sure. things are progressing slow and steady .

[2025-03-17 06:01:08] We gave you a discount and want to close this issue quickly.

[2025-03-17 06:50:50] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-03-17 06:52:21] how much?

[2025-03-17 06:52:58] 15,000 USDT

[2025-03-17 06:54:34] We got all the data, totaling 100GB. If the ransom is not paid, we will disclose the data.
After 30 days, the decryption will be deleted. Data will be lost forever.

[] NULL

[2025-03-17 07:04:36] Just a little bit more time.

[2025-03-17 07:52:45] We are ready to proceed with the payment.
Can you confirm that the transfer should be made to the following BTC wallet?
BTC Wallet: 12ve4J9x4GYh7iHUpZxrVvz7XqkVn7MAaG

[2025-03-17 07:53:52] We are ready to proceed with the payment.
Can you confirm that the transfer should be made to the following BTC wallet for the amount of 29,985.23 USD?
BTC Wallet: 12ve4J9x4GYh7iHUpZxrVvz7XqkVn7MAaG

[]

[2025-03-17 07:56:02] Check it out for me

[2025-03-17 07:56:58] When the timer expires, the decryptor will be deleted and your data will be published

[] 2025-03-17 08:02:41

[2025-03-17 08:02:50] 29,985.23 USD

[2025-03-17 08:03:05] 12ve4J9x4GYh7iHUpZxrVvz7XqkVn7MAaG

[2025-03-17 08:03:07] OK, Got it.

[2025-03-17 08:10:38] u can use Trial decrypt

[2025-03-17 08:20:03] I need to use decryption, where should I click?

[2025-03-17 08:39:43] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-03-17 08:44:39] I need to step away for an hour.

[] NULL

[]

[2025-03-17 08:48:22] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-03-17 08:49:18]

[2025-03-17 08:50:25] test decryption

[2025-03-17 08:58:08] test decryption

[2025-03-17 08:58:32] test

[2025-03-17 09:00:35] OK

[2025-03-17 09:12:29] decryption test

[2025-03-17 09:14:31]

[2025-03-17 09:15:49] warranty

[2025-03-17 09:17:59] decrypt a single file for warranty

[2025-03-17 09:29:03]

[2025-03-17 09:30:36] decrypt a single file

[2025-03-17 09:36:36]

[2025-03-17 10:55:07] Wait a min.

[2025-03-17 11:03:59] can you transfer

[2025-03-17 11:18:12] We are currently processing the payment on our side. I will update you once it is completed.

[2025-03-17 11:19:33] ok

[2025-03-17 12:10:31] 0.35563000 received

[2025-03-17 12:11:31] thanks

[2025-03-17 12:37:01] Thanks for confirming. Now that the payment has been received, when can we expect to receive the full decryptor for both Windows and ESXi?

[2025-03-17 12:38:08] i send request the boss, for him to send the decryptors here

[2025-03-17 12:38:18] wait pls

[] NULL

[2025-03-17 12:49:01] Thanks, I appreciate the update. Do you have an idea of when we might receive the decryptors?
It would help us prepare on our side.

[] 1

[2025-03-17 13:26:11] within 24 hours

[2025-03-17 13:26:52] but maybe much earlier, he should be here

[2025-03-17 13:38:17] Thank you. Please keep me updated on any further developments.

[] NULL

[]

[2025-03-17 16:27:51] Hello, boss here

[2025-03-17 16:27:59] prepare decryptor for you

[2025-03-17 16:29:23] boss here

[2025-03-17 16:29:30] wait test decrypt please

[2025-03-17 18:06:19]

[2025-03-17 18:06:35]

[2025-03-17 18:06:50]

[2025-03-17 22:40:39] how to use it ?

[2025-03-17 22:42:43] os lock this program

[2025-03-17 22:44:07] I disable the firewall, but did not work

[2025-03-18 00:53:09] I solved it, disable the Anti-virus.

[2025-03-18 00:54:10] Can we copy vm file to PC, and run the windows version decryptor on windows PC ?

[2025-03-18 01:28:02] Could it be cheaper? I need some data.

[2025-03-18 01:29:30] Do you need some data ?

[2025-03-18 01:30:04] Could you tell me approximately how much data has been encrypted?

[2025-03-18 01:30:12] the price is not high for this

[2025-03-18 01:31:33] u are agent ?

[] 2025-03-18 01:33:50

[2025-03-18 01:34:34] about 500GB

[] NULL

[2025-03-18 01:37:40] this price is not too high for here

[2025-03-18 01:39:02] OK, I need to communicate with my boss about this.

[2025-03-18 01:39:13] If you cannot pay the ransom within 3 days, we will sell the data publicly.

[2025-03-18 01:42:09] ok. i got it.
Could you tell me the payment methods?

[2025-03-18 01:42:17] We will never cheat our customers. Promise will definitely do it.

[2025-03-18 01:42:42] BTC address bc1ql206uurcq4vfpcrz2exr057w4773q2yd2nlsn8

[] NULL

[2025-03-18 02:19:41] we know this revenue

[2025-03-18 03:18:10] After execute ./decrypt -i /tmp/files1/, the decryptor still decrypt all encrypt file in the machine, how can I decrypt to directory exactly I want ?

[2025-03-18 03:48:46] /decrypt -i /root/home/

[2025-03-18 03:48:50] Hello

[] 1

[2025-03-18 03:51:56] OK

[2025-03-18 05:46:09] Can we copy vm file to PC, and run the windows version decryptor on windows PC ?

[2025-03-18 05:53:26] the lowest price is 10,000 USDT

[] 2025-03-18 06:53:41

[2025-03-18 06:54:23] and we run decryptor on a esxi, but the process stop suddenly, we restart the decryptor, but seems not work

[2025-03-18 07:11:04] how to restart decryptor ?

[2025-03-18 20:51:51] hello

[2025-03-18 20:52:05] give me decrypt log please

[1] let’s solve another problem.
After decryption

[2025-03-19 04:13:48] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-03-19 04:15:03] how much this?

[2025-03-19 04:15:59] 3 win server for this id

[2025-03-19 04:16:43] the price is 12,000 USDT

[2025-03-19 04:17:16] ESXI is other price ,u need use other decrypt id for access

[2025-03-19 04:19:18] test the file: http://lockbitfss2w7co3ij6am6wox4xcurtgwukunx3yubcoe5cbxiqakxqd.onion/r/UawLQY12eP#OpT8bluF0oOUyY6CuI4HvtOH/NoVJxcKwkxFNJQoAFY=

[2025-03-19 04:20:36] ESXI price is 120,000 USDT

[2025-03-19 04:21:30] total price is 132,000 USDT

[2025-03-19 04:22:02] wait a mint for decrypt test

[2025-03-19 05:09:57] We waiting updates from you today!

[2025-03-19 08:26:53] give me decrypt log please

[2025-03-19 08:36:33] I need readme file from esxi server

[2025-03-19 08:36:41] esxi have another decryption ID

[2025-03-19 11:22:47]

[2025-03-19 11:26:33] plz check

[] NULL

[2025-03-19 12:59:45] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-03-19 13:07:39] We got your note. What do we do next?

[2025-03-19 13:31:37]

[2025-03-19 13:32:43] We need another decryption ID

[2025-03-19 13:33:15] the file from esxi server Readme file

[2025-03-19 13:34:05] esxi have another decryption ID

[2025-03-19 13:35:21] “Restore-My-Files.txt”

[2025-03-19 13:49:14] u have different personal ID in different readme file

[2025-03-19 13:53:53] !!!Restore-My-Files.txt!!! use ssh login ESXI

[2025-03-19 16:09:14] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-03-19 21:32:25] You need pay

[we will try to convey information about the leak of your data to each of these contacts.

We offer you to make a deal and resolve this issue smoothly] Hello, Momit Srl

Your network was penetrated, servers were completely encrypted with our special algorithm, and also we has downloaded sensitive Data from your file servers. In case if you won’t cooperate with us

[2025-03-20 01:53:21] Upload your test file

[2025-03-20 03:32:17] how can I decrypt the files on NAS ?

[2025-03-20 03:34:28] Hi there. The 3 branch offices are negotiating how much ransom each node is going to pay. We are waiting for their result.

[2025-03-20 04:27:05] I recommend you pay as soon as possible, it is in your best interest.We met you halfway and gave you a discount. We can reconsider the amount.

[2025-03-20 10:03:23] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-03-20 14:46:53] What do we get if we pay?

[2025-03-20 15:10:29] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-03-20 15:15:41] Hello

[2025-03-20 15:15:52] Hey!

[2025-03-20 15:17:07] LockBit & HellCat Encrypted your network, You 39 Day to negotiate

[2025-03-20 20:25:47] full decryption of all your files

[] NULL

[2025-03-21 02:36:24] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-03-21 03:39:07] How many ids are there?

[2025-03-21 03:41:09] 3 ESXI and 3 win server ,about 30tb data

[2025-03-21 03:42:00] after 30days ,u lose files foever. decrypt will delete

[2025-03-21 03:58:22] How long do we have to wait?

[2025-03-21 03:59:06] HELLO

[2025-03-21 05:47:56] u just agent?

[2025-03-21 07:27:52] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-03-21 07:29:29] hi
how much?

[2025-03-21 07:31:23] 100,000 USDT for all data

[2025-03-21 07:32:52] okay the last

[2025-03-21 07:36:03] http://lockbitfskq2fxclyfrop5yizyxpzu65w7pphsgthawcyb4gd27x62id.onion/r/yRBmAXnRPV#R9ikcZFTModbNG0qJHS6rS0zBu7GtTVCZtDeHnnIjRs=

[2025-03-21 07:39:11] please test the file

[2025-03-21 07:39:46] wait a min

[2025-03-21 08:26:32] We need the data inside and are willing to pay, but the payment needs to go through the process, which may take a long time, please wait patiently

[2025-03-21 08:32:55] Okay,

[2025-03-21 08:34:31] You need to remember the time to decrypt it clearly, and you must complete the payment before 2025-04-20.

[2025-03-21 08:37:57] okay

[2025-03-21 11:57:04] hello, give me please 100 small files in archive

[2025-03-21 12:01:48]

[2025-03-21 20:00:04] One day left

[2025-03-21 20:44:57] We saw the link at the top of the screen to your blog page. What does âPublishedâ mean?

[2025-03-21 21:30:17] I sold your data, wait for a lawsuit

[2025-03-22 13:07:03] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-03-22 13:25:54] Hello?

[2025-03-22 21:25:24] Hello, you need pay

[2025-03-22 21:32:19] Did you take any of our data?

[2025-03-23 06:34:15] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-03-23 06:35:21] whats your demand?

[2025-03-23 06:39:01] let us know your demand, as we already aware about your credibility!

[2025-03-23 11:21:37] hello

[2025-03-23 11:33:00] Price 2 BTC for everything

[2025-03-23 13:27:41]

[2025-03-23 13:28:57] Please prove you can decrypt these

[] NULL

[]

[2025-03-24 02:11:35] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-03-24 02:23:02] the funny thing is, we have already told them you need to pay 0.25 btc to recover 1 file or 1 TB file, no difference. but the 3 branches are still hesitating and argueing.

[2025-03-24 02:35:12] If you can complete the payment within 120 hours, we can give a discount.
Only 60,000 USDT.
within 72 hours, we can give a discount.
Only 50,000 USDT.

[2025-03-24 02:36:36] BTC address bc1ql206uurcq4vfpcrz2exr057w4773q2yd2nlsn8

[2025-03-24 02:37:10] We will never cheat our customers. Promise will definitely do it.

[] 2025-03-24 04:02:17

[2025-03-24 04:26:26] 10,000 USDT

[2025-03-24 04:34:08] We have taken stock of the data, and the value of the encrypted data is not very high, and the price leader cannot approve it.

[2025-03-24 04:47:48] We have given you a lot of time. We think you are playing with us, but I do not advise you to do this. We give you the last 2 days to pay or we will delete everything.

[2025-03-24 05:27:48] This BTC address to pay – bc1q2wn37aax40gm0qc34j7qff5acq8k8wgwscv85c

[] 2025-03-24 05:42:28

[2025-03-24 05:47:45] Hello,After reporting and communication, is $6,000 OK?If you can, we will entrust someone else to pay you instead!

[2025-03-24 05:48:38] 7,000 USDT

[2025-03-24 05:48:51] enough

[2025-03-24 05:55:14] Big brother, if you can pay $6,000, we will arrange for someone to pay you, otherwise it will only delay the time of both of us, what do you think?

[2025-03-24 05:56:11] up to u

[] NULL

[2025-03-24 05:59:29] are u threatening to force?

[] NULL

[2025-03-24 06:01:28] It takes a lot of time for us to approve, and we hope you understand.

[2025-03-24 06:07:52] 7,000 USDT

[2025-03-24 06:09:53] The amount we can currently pay is $6,000, and we also have to pay a fee from the payment company, and if you agree, we will contact you to pay you

[2025-03-24 06:12:06] Okay

[2025-03-24 06:12:17] Sure

[2025-03-24 06:12:18] BTC address bc1ql206uurcq4vfpcrz2exr057w4773q2yd2nlsn8

[] NULL

[2025-03-24 06:14:00] Is this a Bitcoin address?How much BTC do I need to pay?

[2025-03-24 06:14:46] If you do not agree to pay the ransom, we will disclose your data and the attack.
The next phase of attack may be launched later.

[2025-03-24 06:15:24] Forgot to tell you, remember to check the countdown of the panel. You will lose data forever.

[2025-03-24 06:18:50] 0.069 BTC

[2025-03-24 06:19:14] BTC address bc1ql206uurcq4vfpcrz2exr057w4773q2yd2nlsn8

[2025-03-24 06:19:40] Okay

[2025-03-24 06:31:27] Paid, please check

[2025-03-24 06:32:15] Okay

[2025-03-24 06:33:18] When will our data be recovered?

[] NULL

[2025-03-24 06:34:38] Okay

[2025-03-24 06:48:05] data that will be decrypted to u within 24 hours.

[2025-03-24 06:48:21] i told boss

[2025-03-24 06:49:10] Okay

[2025-03-24 10:49:36] What are the results of negotiations?

[2025-03-24 13:12:57]

[2025-03-24 13:12:57] Hello

[2025-03-24 13:20:06] Did you take any data? Please generate a list of what was taken

[2025-03-24 15:30:18] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-03-25 02:19:59]

[2025-03-25 02:20:15] Here is a part of file tree

[2025-03-25 02:21:18]

[2025-03-25 02:22:25]

[2025-03-25 02:23:35] and few samples of taken files

[2025-03-25 02:24:36] Please do not worry. We are not playing with you and this is serious. At least, I personally want to finish this as soon as possible. But I am not in charge of these branches. I will give you update today soon.

[2025-03-25 02:27:07] bc1q2wn37aax40gm0qc34j7qff5acq8k8wgwscv85c, copy

[] NULL

[] 2025-03-25 04:32:27

[2025-03-25 04:51:49] Hello, when will the data be recovered?

[2025-03-25 06:31:48] boss will coming,just a wait.

[2025-03-25 06:32:50] Okay

[2025-03-25 08:01:17] I hope you understand the seriousness of the problem. We have been waiting for you for too long. We will delete your decryptor and you will never recover your files again.

[2025-03-25 08:01:44] We expect payment from you today.

[2025-03-25 08:27:07] We expect payment from you today.

[2025-03-25 08:42:56] Hello, when is the boss coming?

[2025-03-25 08:43:29] within 24 hours

[] NULL

[2025-03-25 08:44:46] Okay

[2025-03-25 14:43:59]

[2025-03-25 14:54:06]

[] 1

[2025-03-25 15:43:40] We assume you want some payment? Can we please have a full file tree so we can fully and fairly value your offering?

[2025-03-25 17:35:01] ???

[2025-03-25 20:27:23] Full file tree is not a disclosed information until payment.

[2025-03-25 22:54:05] maby files modify

[2025-03-26 01:04:55] What do you mean?

[2025-03-26 01:07:49] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-03-26 01:10:24] Hi our server got attached by LockBit 4.0

[2025-03-26 01:12:25] 735C3C1C815E3EFBA5E4B628C5E8200F
This is the personal identifier provided

[2025-03-26 04:16:00] client modify files

[2025-03-26 04:16:23] Okay

[2025-03-26 04:19:09] this price is 8,000 USDT

[2025-03-26 04:26:11] if u pay it completed whithin 72 hours,u can get discount

[2025-03-26 04:26:27] only 6,000 USDT

[2025-03-26 04:26:48] We will never cheat our customers. Promise will definitely do it.

[2025-03-26 04:32:33] Are you able to help locate the system vulnerability, so they can protect themselves from further attacks

[2025-03-26 04:33:50] If you want to buy intrusion paths and protection suggestions. A USDT of 10,000 must be paid.

[2025-03-26 04:34:51] We will provide textual intrusion paths and defense advice for you.

[] NULL

[2025-03-26 05:02:41] How much discount is the price? I talk to the user to see if the data needs to be decrypted

[2025-03-26 05:03:44] Not just 14 days of data, we have clear records.

[2025-03-26 05:04:24] You have to complete the payment quickly to get a discount.

[2025-03-26 05:08:00] i will report to boss

[] NULL

[2025-03-26 05:43:54] the lowest price is 80,000 USDT

[] NULL

[2025-03-26 05:46:33]

[2025-03-26 05:48:19] just a moment. boss will decrypt test within 24 hours

[2025-03-26 05:57:46] Prices will rise every 3 days. The longer the time, the higher the price.

[] NULL

[2025-03-26 06:01:54] This data copied directly from the virtual machine does not modify the data!

[2025-03-26 06:02:19] So I have to wait for 24 hours?

[2025-03-26 06:02:50] run it on vm

[2025-03-26 06:03:16] Sure,within 24h

[] 2025-03-26 06:04:20

[2025-03-26 06:10:58] ID: 735C3C1C815E3EFB489A941DA802E967
Here is the ID for this file, also help me ask if they can provide the secret key for this ID only, so we can test it on our side as well

[2025-03-26 06:13:57] ??

[2025-03-26 06:14:19] u need use personal id access

[] NULL

[2025-03-26 06:17:51] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[] NULL

[2025-03-26 06:22:02] these two id from same company

[2025-03-26 06:23:02] ok, sounds good

[2025-03-26 06:44:45]

[2025-03-26 06:59:46] I do but these guys do not. They have just finished discussion there and I have very bad news for you and maybe for both of us. They decided not to pay anything and rebuild their data.

[2025-03-26 07:01:10] Anyway , i thought this could be a successful experience but it turned out to be not.

[] NULL

[2025-03-26 07:33:30] If you want to buy intrusion paths and protection suggestions. A USDT of 10,000 must be paid.

[2025-03-26 07:34:15] all data and intrusion paths

[2025-03-26 07:40:12] if u pay it completed whithin 72 hours,u can get discount. only 6,000 USDT,just decrypt program

[2025-03-26 07:41:10] Okay. We also downloaded some documents from your computers, now we will publish them in the public domain. And we will start writing to your clients that your data was stolen and they will be published.

[2025-03-26 07:41:27] Okay. We also downloaded some documents from your computers, now we will publish them in the public domain. And we will start writing to your clients that your data was stolen and they will be published.

[2025-03-26 07:41:31] Okay. We also downloaded some documents from your computers, now we will publish them in the public domain. And we will start writing to your clients that your data was stolen and they will be published.

[] NULL

[2025-03-26 07:58:36] Yes, we will delete and publish your data.

[2025-03-26 08:01:02] and maybe hack them again.

[2025-03-26 10:30:04] ?

[2025-03-26 11:48:53] Then the amount we will be willing to pay you is significantly less

[2025-03-26 12:10:45] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-03-26 12:14:28] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-03-26 12:29:12] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-03-26 12:49:04] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-03-26 12:55:02] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[] NULL

[2025-03-26 20:32:10] Can you give a better price just for the decrypt program

[2025-03-26 22:00:44] No

[2025-03-26 22:10:24] what are you waiting for or why are you revisiting the site if you do not want to communicate with us?

[2025-03-26 22:10:25] what are you waiting for or why are you revisiting the site if you do not want to communicate with us?

[2025-03-26 22:10:28] what are you waiting for or why are you revisiting the site if you do not want to communicate with us?

[2025-03-26 22:10:32] what are you waiting for or why are you revisiting the site if you do not want to communicate with us?

[]

[2025-03-27 01:17:23] Hello, we decrypted the files on the virtual machine, but there are still a lot of files that have not been decrypted, please take a look at what the problem is, thank you

[2025-03-27 02:42:20] hello how much

[2025-03-27 04:24:12] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-03-27 06:03:44] Hi, 20k$ in bitcoin

[2025-03-27 06:21:55] can you test for meï¼

[2025-03-27 07:42:17]

[2025-03-27 08:24:43] How many files?

[2025-03-27 08:25:01] maybe client modify files

[2025-03-27 08:25:51] We mentioned it many times in the letter, and if the system files cannot be repaired, we will not make promises.

[2025-03-27 08:26:40] If the system or file changes.

[2025-03-27 08:27:39] There are still more than 50,000 files that have not been decrypted, and there is no problem of customers modifying the files, because the files are stored in different folders, you look at the files I sent you, and see how to solve this problem

[2025-03-27 08:29:09]

[2025-03-27 08:30:48] And it is decrypted on the original virtual machine, and there are files that can be decrypted and those that cannot be decrypted in the same folder

[2025-03-27 08:31:44] You need to close all file access processes to ensure that no process accesses these file resources.

[2025-03-27 08:32:04] At the same time, the highest permissions must be used to run. Guaranteed access permissions.

[] NULL

[2025-03-27 08:37:28] In the same folder, some data can be decrypted, and some data cannot be decrypted, which should have nothing to do with permission restrictions.

[2025-03-27 08:37:53]

[2025-03-27 08:38:16] and other oneï¼

[2025-03-27 08:38:34] You communicate with the boss to see if the documents I sent you can be decrypted, thank you

[]

[2025-03-27 08:40:20] vmware-39.log.rar
This file is encrypted with a different ID

[2025-03-27 08:40:57] i know ï¼ you cant decryptï¼

[2025-03-27 08:42:08] i want to knowï¼ can you decrypt my networkï¼

[2025-03-27 08:44:21] its a different id but you should be able to test it for me?

[] 1

[2025-03-27 08:49:59] What is the file suffix

[2025-03-27 08:51:42] and , is your offer to decrypt our entire network?

[2025-03-27 08:53:35] The file suffix is the name of the file that is automatically modified after you encrypt it

[2025-03-27 08:56:03] To decrypt a file encrypted with a different identifier, you must enter the chat with this identifier

[2025-03-27 08:56:49] and , is your offer to decrypt our entire network?

[2025-03-27 08:57:36] Yes

[2025-03-27 08:57:50] Do these different ids belong to you?

[2025-03-27 09:00:31] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-03-27 09:00:44]

[2025-03-27 09:01:51] hello test

[2025-03-27 10:17:53]

[2025-03-27 10:37:30] Yes

[2025-03-27 14:39:05] Seems we better message your customers whom data we took. I think they will able to pay.

[2025-03-27 14:45:27] it really would be easier to discuss payment if we knew everything you had

[2025-03-27 16:10:58] Hello, can the file I sent you be decrypted?

[2025-03-27 17:18:30] We have rules. Full file tree is disclosed information before payment. If you don’t want to pay you’ll see all the files in our blog.

[2025-03-28 01:18:57] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[]

[2025-03-28 01:59:20] ÑÐ¾ÑÐ¾ÑÐ¾,Ð¾Ð¶Ð¸Ð´Ð°Ñ

[2025-03-28 02:19:12] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-03-28 02:20:11] test

[2025-03-28 02:20:22] ok

[2025-03-28 06:16:04] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-03-28 06:27:50] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-03-28 06:39:21] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-03-28 06:42:08] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-03-28 06:42:48] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-03-28 06:43:09] Hello sir, I am krrc, How mouch btc?

[2025-03-28 06:45:27] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-03-28 07:20:26] Our team celebrates the achievement of new milestones. Offering customers, your lowest decryption price is 50,000 USDT.

[2025-03-28 07:20:49] Our team celebrates the achievement of new milestones. Offering customers, your lowest decryption price is 4,000 USDT.

[2025-03-28 07:21:45] Our team celebrates the achievement of new milestones. Offering customers, your lowest decryption price is 30,000 USDT.

[2025-03-28 07:36:46] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-03-28 07:38:29] How much does ransomware decryption cost?

[2025-03-28 08:06:51] 4000$
we accept bitcoin only
you can send the 1 test file via above link

[2025-03-28 08:07:01] 4000$
we accept bitcoin only
you can send the 1 test file via above link

[2025-03-28 09:33:33] wait

[2025-03-28 09:34:14] ok

[2025-03-28 10:30:35] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-03-28 10:32:19] Your personal identifier to communicate with us ID: 7358A124F6C1E7D762622BEF85E22885

How much does it cost to recover?

[2025-03-28 11:06:42] 4000$
we accept bitcoin only
you can send the 1 test file via above link

[2025-03-28 14:14:14] We do not even know what you want yet

[2025-03-29 01:49:24] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-03-29 01:50:49] price for this id: F5AADD1BAEF16166C43B9D4A8F7BCED6

[2025-03-29 02:02:53] hello

[2025-03-29 02:03:17] 0.3 btc for all pc

[2025-03-29 02:07:54] what is the price for just this id: F5AADD1BAEF16166C43B9D4A8F7BCED6

[2025-03-29 02:10:00] 0.1 btc

[2025-03-29 02:44:36] that is too much. If you can set 0.1 btc for whole networks decryption. I can consider to pay you

[2025-03-29 02:48:40] 0.12 for all

[2025-03-29 02:55:01] no. 0.1 btc for all is a reasonable offer. you can think it carefully.

[2025-03-29 02:56:45] how much time do you need?

[2025-03-29 03:04:32] Approximately 12-24 hours.

[2025-03-29 03:05:37] ok

[2025-03-29 03:06:27] wallet BTC bc1qh2wr62gscja6q5v0dr90h3aj5n4ffwg0lw03mf

[2025-03-29 03:40:48] Thank you for your update. Unfortunately, the offered price is still way beyond our budget. We are currently facing severe financial difficulties, potentially approaching bankruptcy.

Though I got so much pressure from my boss to get the files back, but we simply do not have the funds to meet the current decryption price. While our team is working on transcribing printed backups into digital format, the encrypted files remain extremely valuable to us.

I would truly appreciate any further flexibility you can offer on the pricing.

[2025-03-29 04:55:59] Hello, can the file I sent you be decrypted?

[2025-03-29 10:17:47] Have you given up?

[2025-03-29 10:23:15] Have you given up?

[2025-03-29 10:24:29] when will you send decryption key after payment? what should I prepare to get decryption key?

[2025-03-29 10:29:02] after payment we will wait for confirmation, the boss will upload the tool to the chat, you will download it, run it and the files will be decrypted, before running, turn off the av

[2025-03-29 11:40:21] I wait your payment wallet BTC bc1qh2wr62gscja6q5v0dr90h3aj5n4ffwg0lw03mf

[2025-03-29 13:01:19] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-03-29 13:03:46] hi
how muchï¼

[2025-03-29 15:04:15] 21,000 USDT for all data.

[2025-03-29 15:05:54] If you can complete the payment within 72 hours, we can give a discount.

[2025-03-29 15:06:35] just 17,850 USDT

[2025-03-29 15:07:54] We will never cheat our customers. Promise will definitely do it.

[2025-03-29 15:08:13] accpet btc

[2025-03-29 21:41:33] we want you pay 1,2m$

[2025-03-30 01:43:10] When will you and the boss be online? I am ready to pay. before payment, I need several files test.

[2025-03-30 01:46:53] What are you waiting for? Upload the test file

[2025-03-30 01:48:12] wait a moment. I am preparing test data.

[2025-03-30 02:05:56]

[2025-03-30 02:07:19] test files.

[2025-03-30 02:09:34] Ok, we are waiting the boss

[]

[] NULL

[2025-03-30 02:37:41] OK, wait for test file. I am ready to pay now.

[2025-03-30 06:59:43] What do you mean?

[2025-03-30 07:02:58] If you choose to give up paying the ransom, we will follow up.

[2025-03-30 07:03:08] If you choose to give up paying the ransom, we will follow up.

[2025-03-30 07:03:39] We will conduct subsequent attacks, incidents and data disclosure.

[2025-03-30 07:03:43] We will conduct subsequent attacks, incidents and data disclosure.

[2025-03-30 07:10:04] When will the boss be online?

[] 2025-03-30 07:13:04

[2025-03-30 08:35:01] should I wait for your boss coming today or should I go home?

[2025-03-30 09:36:57] i think 3-5 hours

[2025-03-30 10:59:07] ???

[2025-03-30 11:08:34] maybe files errors.we never saw this. boss will busy

[] 2025-03-30 11:10:50

[1] If it’s a few files

[2025-03-30 12:00:40] I am still waiting. any reply?

[2025-03-30 12:25:24] I am waiting like you. Test files should be uploaded as you opened the chat, boss sees, and everything happens quickly. Sunday also.

[2025-03-30 12:40:29] ??/

[2025-03-30 12:53:32] boss not reply
wait

[2025-03-30 12:54:57]

[2025-03-30 13:00:41] after 24 hours ,if decrypt not work
i will give u 100GB files

[2025-03-30 13:06:56] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-03-30 13:26:36] when will will you send decryption key after payment? is the boss online now?

[2025-03-30 13:29:15] send 20-30 small files that remained encrypted

[2025-03-30 13:29:59] Hi, Can i help u?

[2025-03-30 13:31:24] yes

[2025-03-30 13:31:51] 5 min when boss online

[]

[2025-03-30 13:44:28] A moment. I will finish payment in 30 minutes.

[2025-03-30 13:45:02] ok

[2025-03-30 14:01:13] sorry. my boss is not at work now. I will contact you tomorrow. thank you.

[2025-03-30 14:07:54] An encrypted sample has been sent to you, waiting for your reply, thank you

[2025-03-30 14:08:04] What time to wait for you?

[2025-03-30 14:11:21] I will contact you tomorrow, the boss wait for answer for about a whole day. Now he has left the office.

[2025-03-30 14:12:27] Maybe 11:00-14:00 Beijing Time.

[2025-03-30 14:13:30] ok

[2025-03-30 16:15:24] wait

[] 1

[2025-03-30 23:26:50] I really need to get the files back, but your request is far beyond what the company are able to pay. As I told you, the company is on the edge of bankruptcy, and I have not been paid in over two months. I only make $300 a month, and if I could, I would spend my own money to help get a resolution. I am therefore asking for your understanding. Can you speak to your boss and possibly offer something more reasonable given our situation?

[2025-03-31 00:48:54] test

[2025-03-31 00:50:54]

[2025-03-31 01:36:02] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-03-31 01:38:26] hello can you make a discout ï¼

[2025-03-31 03:06:15] wait a moment. boss will coming

[] NULL

[2025-03-31 05:01:07] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-03-31 05:02:50] How much does it cost to decrypt it?

[]

[2025-03-31 05:06:48] 329630583@qq.com

[2025-03-31 06:27:54] is there any intermediate can help solve this issue? we has issue to buy btc and finish payment.

[2025-03-31 06:33:59] what problem?

[2025-03-31 06:41:37] Contact the data recovery company

[2025-03-31 06:45:14]

[2025-03-31 07:39:29] hi

[] NULL

[2025-03-31 07:51:30] You have a lot of such companies in your country, look on the Internet. They take an additional commission. There have never been problems with customers from China

[2025-03-31 07:52:29] will they add fee on your offer?

[2025-03-31 07:53:33] http://lockbit3753ekiocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2id.onion/buybitcoin

[2025-03-31 07:54:00] thank you. I will try find some way to buy crypto.

[2025-03-31 08:12:57] Hello, 18k$ in bitcoin

[2025-03-31 09:15:02] Hello

[2025-03-31 09:15:50] 0.2 BTC

[2025-03-31 13:53:33] Hello, any news?

[2025-03-31 19:05:38] That is alot of money for us. We are meeting with the finance team to see what we can get

[2025-03-31 23:13:15] price recovery. t
he lowest price is 80,000 USDT.

[2025-03-31 23:13:35] price recovery. the lowest price is 50,000 USDT.

[2025-03-31 23:14:25] if u cant pay ransom. after 24 hours,price is recovery. the lowest price is 6,000 USDT

[2025-04-01 03:11:19] Will you list/publihs Yukita company on your blog soon?

[2025-04-01 04:26:55] ???

[2025-04-01 04:53:04] Can make discount 0.15 BTC

[2025-04-01 05:41:32] wait

[2025-04-01 05:50:18] Hello,How long will it take?

[2025-04-01 06:40:26] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-04-01 06:43:25] how muchï¼

[2025-04-01 07:32:38] all data price is 21,000 USDT. if u payment quckly,get discount,just only 17,850 USDT. withins 96 hours. after 120 Hours, price will be higher.

[2025-04-01 07:36:43] accpet btc

[2025-04-01 08:25:06] 5000$

[2025-04-01 08:25:28] This last price

[2025-04-01 09:21:39] 3500 not for me not for you

[2025-04-01 09:22:07] This big discount , you need pay today

[2025-04-01 09:22:23] bc1q2wn37aax40gm0qc34j7qff5acq8k8wgwscv85c

[2025-04-01 09:23:58] BTC

[] 2025-04-01 09:25:19

[2025-04-01 09:25:41] wait

[2025-04-01 09:25:47] we are very busy

[2025-04-01 09:26:35] OK

[2025-04-01 09:27:24] We wait your payment today! BTC – bc1q2wn37aax40gm0qc34j7qff5acq8k8wgwscv85c

[] 1

[2025-04-01 09:32:01] We wait your payment. I send your decryption tool and instruction here

[2025-04-01 09:40:30] ä¸å±æ¯BTC0.0357 ä½ ç¡®è®¤ä¸ä¸ æ²¡é®é¢æå»æ±æ¥

[2025-04-01 09:51:51] å¨å

[2025-04-01 11:17:13] 0.0036 BTC

[2025-04-01 11:58:01] ä¸è¨ä¸ºå® ä½ ä»¬ä¼éµå®æ¿è¯ºå¯¹å§

[2025-04-01 12:34:31] Yes, after payment i send decryption tool and instruction

[2025-04-01 13:08:46] hey there

[2025-04-01 13:40:52] hi

[2025-04-01 13:41:27] i have surprise for you

[2025-04-01 13:42:31] i just received all my files

[2025-04-01 14:21:14] how is your meeting?

[2025-04-01 14:55:18] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-04-01 14:58:50] What are the next steps to unencrypt our data?

[2025-04-01 17:09:28] Hello. Please wait, we will answer you soon

[just send them to us

As a proof of data possession we can provide a partial file-tree of downloaded data (usually about 5-7% of total volume] we will try to convey information about the leak of your data to each of these contacts.

We offer you to make a deal and resolve this issue smoothly

[2025-04-01 17:40:36] $400,00 is unaffordable, as we are a small independently owned business. Due to post covid business challenges, the most that is affordable is $5000, for a full recovery. Otherwise, I may be looking at bankruptcy. Please accept this offer.

[2025-04-01 19:21:00] This is absolutely unacceptable. Sometimes we give some discounts in case of loyal cooperation and fast negotiations. But this is definitely not a 90%+ discount. In your case, we have nothing more to offer you.

[2025-04-01 20:47:13] I have reached out to family members for money help, but we are not a cash rich people. The most I can raise is $20,000. total. Can you please accept this offer?!

[2025-04-01 21:43:34] What family members? What are you talking about? We know all the necessary information about your company. And the money we asked you for is not very large for your company. If you, the one who contacted you, are an ordinary employee, then we should not continue the conversation, you need to urgently contact the management.
To answer your question: your offer is not even close to the real values. The price we asked for is not a joke. This is an absolutely real offer.

Please contact us when you are ready for real negotiations, and not this kindergarten.

[2025-04-01 23:32:49] We cannot afford that much. Can you please work with us on price?

[2025-04-02 00:55:32] å¦ä½ä¿è¯ï¼

[2025-04-02 03:18:56] Hello, can the data sent to you be decrypted?

[2025-04-02 03:39:08] We are the number 1 team in the world! We are waiting for your payment today

[2025-04-02 04:19:52] Have you given up?

[2025-04-02 04:22:33] 2025-04-20 will follow up.

[2025-04-02 04:49:07] ???

[2025-04-02 05:26:29] boss not reply,i wlii give u 100GB files

[] NULL

[2025-04-02 06:46:30] https://gofile.io/d/YrKBXg

[2025-04-02 06:46:41] Password: qazwsx

[2025-04-02 06:50:23] The boss is very busy and often responds to messages for 3-5 days. You can use the original file.
I consulted the team and we deployed multiple encryption programs in this client that caused the inability to recover by 1 decryption. The boss is being resolved.
Always believe that what our team promises will definitely do, after receiving the ransom.

[2025-04-02 06:52:18] Ok thank you

[2025-04-02 06:53:39] We are honest.

[2025-04-02 06:59:19] Okay, waiting for your new decryptor!

[2025-04-02 07:41:41] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-04-02 07:47:08]

[2025-04-02 07:49:59] how much cost can I decrypt my all file ?

[2025-04-02 09:46:29] hi , you need pay 10k usd

[2025-04-02 09:55:10] å¥½çï¼åæ¬¡ç¡®è®¤æ¯ä»ä½ è¯´çéé¢0.0036 BTCå°±ä¼ç»æä»¬è§£å¯å¯é¥å¯¹åï¼

[2025-04-02 10:03:03] Yes, we confirm. After payment you will receive a decryption tool and instructions

[2025-04-02 10:05:26] éº»ç¦åæ¬¡ç¡®è®¤æ¯ä»å°åï¼BTC – bc1q2wn37aax40gm0qc34j7qff5acq8k8wgwscv85c

[2025-04-02 10:06:31] 410943228@qq.com g0147009@gmail.com è¯·æè§£å¯å·¥å·åéå°è¿ä¸¤ä¸ªé®ç®±

[2025-04-02 10:07:16] Yes BTC – bc1q2wn37aax40gm0qc34j7qff5acq8k8wgwscv85c

[2025-04-02 10:08:48] I send decryption tool here and to your email

[2025-04-02 10:14:55] We have received payment. Please wait.

[2025-04-02 10:15:45] å¥½ç

[2025-04-02 10:22:14] You send 0.0036

[2025-04-02 10:22:32] This 300$

[2025-04-02 10:22:58] You need send 0.036 !

[2025-04-02 10:23:12] You play with us ?

[2025-04-02 10:24:47] You need send more 0.032 !

[2025-04-02 10:26:30] We agreed on $3000! Dont play with us

[2025-04-02 10:30:01] ok æéè¦å¨æ¯ä»0.0324 å¯¹åï¼

[2025-04-02 10:30:54] Yes

[2025-04-02 10:38:19] éè¦å¤§æ¦åå°æ¶æè½å®æ

[2025-04-02 12:15:56] å¤§æ¦ååéå·¦å³å®æ

[2025-04-02 12:17:09] ä½ è¿å¨å

[2025-04-02 12:17:37] OK

[2025-04-02 12:23:45] ç°å¨å¼å§æä½è½¬è´¦åä»å·®é¢0.0324

[2025-04-02 12:29:54] Ok , we wait payment tomorrow

[2025-04-02 12:30:30] ok

[] NULL

[2025-04-02 17:03:12] noob

[2025-04-02 23:20:35] I assume this is just a side hustle for you. I’m curious what do you do other than this job and how did you get into this business.

[2025-04-02 23:43:47] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-04-02 23:45:47] Hi, can you explain what is happening?

[2025-04-02 23:48:47]

[]

[2025-04-03 01:11:38] Big brother, I downloaded the 100G data you gave, and there is no information we need, and the file we need is an ibd file in the mysql/Data/ecology directory

[2025-04-03 01:12:40] So you still need to communicate with the boss and remake the decryption program, thank you

[2025-04-03 04:19:36] Hi

[2025-04-03 12:29:53] okç°å¨ä»æ¬¾ ä½ å¨å ä»æ¬¾åä½ ååæè§£å¯å·¥å·å¯¹å

[2025-04-03 12:35:41] è¿å¨åï¼

[2025-04-03 12:39:48] æç¦»å¼ä¸ä¸ªåå°æ¶ç¶ååæ¥

[2025-04-03 13:10:42] Iam here

[2025-04-03 13:12:31] After payment you will receive a decryption tool and instructions. Do not waste time

[2025-04-03 14:17:52] OKç°å¨å¼å§æ¯ä»

[2025-04-03 14:27:39] ä½ æ£æ¥ä¸ä¸åºè¯¥æ¶å°äº

[2025-04-03 14:34:02] å®ææ¯ä»äº è¯·æå å¯å·¥å·åéå°g0147009@gmail.com å329630583@qq.com

[2025-04-03 14:44:52] We have received it. We will send you the decryption tool and instructions soon.

[2025-04-03 14:45:28] è°¢è°¢ å¤§æ¦å¤ä¹ä¼æ¶å°å·¥å·

[] NULL

[2025-04-03 14:51:57] ok

[2025-04-03 15:24:08] Leadership is in meetings regarding this. I will keep you updated.

[2025-04-03 16:00:32] hello , can you gave me a lower priceï¼ my boss cant accept

[2025-04-03 16:09:27] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-04-03 16:10:31] We found your note, what happens now?

[] NULL

[2025-04-03 16:39:54]

[2025-04-03 17:13:00] So are you not RansomHub anymore?

[2025-04-03 18:32:32] We are the only owners of your data, we – previous affiliates of RansomHub, now LockBit. In any case, this does not concern you. All you need to know that we are the only owners of your data. And our negotiation interrupted payment stage. Final price is 900k as we said.

[2025-04-04 00:54:10] ä½¿ç¨è¯´ææåï¼

[2025-04-04 02:46:55] è¿ä¸ªè¡ä¸æºå¥½ æä¹å å¥ä½ ä»¬ï¼

[] NULL

[2025-04-04 03:21:31] We follow the rules strictly, you can read our affiliate program.
After reaching an agreement, we will give you everything.

[2025-04-04 03:22:30] We are very busy. If no transaction agreement is reached in the next few days, I will check and reply to your message once every 24 hours.

[2025-04-04 03:31:19] Through our conversation, you should be a professional agent, perhaps a person in a cybersecurity profession. A professional businessman.
First, we are honest.
Second, our five tests need to be well paid.
Third, our alliance has a strict plan, and credibility is important to us.
Third, as a professional negotiator, you should know that lying cannot reduce the ransom price for you. This strategy is very poor.
Fourth, we have the data of this target, and we know that these ransoms are not expensive for Chinese companies.

[2025-04-04 04:53:11] What are you asking about?

[2025-04-04 05:59:27] ææææ¯æ³åä½ ä»¬è¿ä¸ªè¡ä¸æ¯å¦æºä¼ï¼

[2025-04-04 11:12:11] You can download decryption tool here

[2025-04-04 13:36:37] Okay Standing by.

[] NULL

[2025-04-04 13:46:39]

[2025-04-04 13:47:48] It was 10% if you pay till the end of that month?

[2025-04-04 13:50:21] The only discount we can give you is 10% till the 10th of this month, after price will be again 900k.

[2025-04-04 16:29:33] it is very high ï¼ my boss cant accept ï¼ we only need 2 ids
ï¼ so can you make a loweet price ï¼ can you argee 10000

[2025-04-04 20:13:21] How do we know you are the only ones with our data?

[2025-04-04 21:02:07] We are affiliates who pentested your network, so only we have your data. In worst case, in final, you will see that only WE published your data in blog if you refuse to pay.

[2025-04-04 21:03:23] Your discount works till 10th. Remember that.

[2025-04-04 22:22:45] Your time is up.

[2025-04-05 02:21:08] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[NULL] I’m sorry

[2025-04-05 02:38:24] it is very high ï¼ my boss cant accept ï¼ we only need 2 ids
ï¼ so can you make a loweet price ï¼ can you argee 10000

[2025-04-05 02:40:04] Too many ID chat Windows, I will establish communication with you here,

[2025-04-05 08:55:37] Hello, 15k

[2025-04-05 11:33:18] Hello, I reported to the boss, we really only have two ids important, too expensive price we can not afford.

[2025-04-05 11:34:27] We have tried to restore some, but the data is a little old, so we still want to decrypt some virtual machinesï¼And not all virtual machines need it

[2025-04-05 12:32:52] I understand, but the price is the same.

[2025-04-05 12:34:06] whether you pay or not is up to you.

[] NULL

[2025-04-05 12:37:25] We’re sincere. We don’t want to waste your time

[] 2025-04-05 12:39:51

[2025-04-05 13:02:35] we can offer 13k this will be the last price

[2025-04-05 13:06:59] Thank you. We need to review this, but it is the weekend and no one is here.

[2025-04-05 13:09:20] I will report to my boss again. In addition, I just consult you about the amount and specific technology, and my partner will consult you through another window, is that OK

[2025-04-05 13:10:55] helloï¼ Hello, I am a technician, I would like to ask you if you need to log in to the corresponding ID chat room?

[] 2025-04-05 13:12:32

[2025-04-05 13:13:04] Okay.

[2025-04-05 13:16:22] hello my leaderï¼bossï¼ still want make 10000 for youï¼ We do not have enough budget, and the money may be overdrawn in advance through illegal operations. Please believe us, if possible, we can raise funds to pay you today.

[2025-04-05 13:20:05] ok then the price will be 15k

[2025-04-05 13:20:38] whyï¼

[2025-04-05 13:21:36] your tech specialist wrote to me, but there will be no conversation until you are ready to pay

[2025-04-05 13:22:28] That’s our technician. That’s my colleague

[2025-04-05 13:22:40] you can pay only 13k, the price will not be lower

[2025-04-05 13:23:34] But, brother, whatever the cost, you should provide technical support, right?

[2025-04-05 13:23:47] you made a test decrypt, after payment you can return all esxi and files.

[2025-04-05 13:24:33] you made a test decrypt

[2025-04-05 13:24:59] i want to know how to use toolsï¼ and Does the decryption program have to be used on esxi systems? Or just any linux system?

[] NULL

[2025-04-05 13:26:26] yes esxi and win

[2025-04-05 13:32:04] I mean, is your decryption process complicated? Because of this I need to report to my administrator, we need to make a technical report for him to see ï¼esxi decryptor must run under esxi system, or can it be decrypted under any linux system, if I upload the encrypted VMDK file to a linux system for decryption, can the decryption program decrypt normally? Not an esxi system

[2025-04-05 15:47:03] How long can I get the decryptor after payment? Do you need me to provide anything

[2025-04-05 15:58:56] hello i am reay to pay

[2025-04-05 16:00:48] see it reply me

[1] only provide extensions,after payment within 24 hours, usually faster. we’ll wait for the boss

[2025-04-05 16:08:39] yes

[2025-04-05 16:09:00] ok ï¼

[2025-04-05 16:11:01] We have 2 platforms, windows and esxi, do I just need to provide the encrypted sample file?

[2025-04-05 16:12:54]

[2025-04-05 16:13:19] extensions esxi and win

[2025-04-05 16:13:45]

[2025-04-05 16:15:54] 0.14557000 received

[2025-04-05 16:16:31] win and esxi file and readme files okï¼

[2025-04-05 16:20:23] yes

[2025-04-05 16:20:31] +

[2025-04-05 16:20:43] I made a request to the boss, please wait, he will send the decryptor

[2025-04-05 16:20:56] i wait you good news

[2025-04-05 16:21:32] up to 24 hours, usually earlier

[2025-04-05 16:22:31] and i will be here.

[2025-04-05 16:23:17] If you have any questions, please feel free to contact our technicians, and of course, you can also write to me

[2025-04-05 16:50:58]

[2025-04-05 16:53:18] Unable to download

[2025-04-05 16:54:36] pls change other way

[2025-04-05 16:59:04] pls send agai other way

[2025-04-05 16:59:52] need antivirus off

[2025-04-05 17:01:10] same

[1] File can be downloaded only once a minute ï¼He’ll give me this hint

[2025-04-05 17:26:13] hello pls upload 2.decryptors to alink

[2025-04-05 17:27:17] i cant download

[2025-04-05 17:30:51] Please send it to me by other means thanks

[2025-04-05 17:46:15] http://lockbitfskq2fxclyfrop5yizyxpzu65w7pphsgthawcyb4gd27x62id.onion/r/D5xB5Q5bRo#RjEySGj2pg/00tiaSM99rOi3wgn5U27ny7X8gQE3coo=

[2025-04-06 02:56:26] We are inclined to believe you but I hope you understand that we want to be sure where our data lies. Could you provide three other files as proof?

[2025-04-06 05:17:46] ????

[2025-04-06 07:47:56] Okay. you have partial_list. Ask for 3.

[] NULL

[2025-04-07 02:16:16] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-04-07 06:25:00] Big brother, why has there been no news for so many days?

[2025-04-07 06:29:50] hi ï¼ i have a question ï¼ may i ask you did you delet our nas filesï¼

[2025-04-07 08:17:59] you ready to pay ?

[2025-04-07 11:01:21] Seems better we ask your clients for that money.

[2025-04-07 11:33:30] hiï¼ did you delet my NAS files
?>

[2025-04-07 15:50:49] no

[2025-04-08 00:48:33] Please do not. We are trying. Can you come close to that?

[2025-04-08 08:56:48] i can give you 100k discount. Give me better offer

[2025-04-08 09:11:54] Any news?

[2025-04-08 11:19:10] ????

[2025-04-08 14:01:09] 2023_08_10_Distributed Energy Resource_outlook_webinar_FINAL.pdf
US Open 2021.xlsx
1251 AOTA – 41st Floor / Floor Plan.pdf

[2025-04-08 14:06:29] hello

[2025-04-08 14:07:43] Any news?

[2025-04-08 14:10:54]

[]

[2025-04-08 15:21:42]

[2025-04-08 21:04:49] Thanks. We will review these and get back to you.

[2025-04-08 22:01:46] Okay.

[2025-04-08 22:02:03] Tomorrow is the last day of discount.

[2025-04-09 04:09:13] boss not reply

[2025-04-09 04:11:26] Is the boss not online for so many days? How can we solve our problem?

[2025-04-09 04:20:51] Do you have any other data that you have taken from us?

[2025-04-09 04:28:01] The 100GB of data we were given last time was of little use to us! In addition to the 100GB file last time, are there any other files in your hands, if so, please send me again, thank you

[2025-04-09 05:16:24] Big brother, we have worked together many times, and I know you are trustworthy! But this customer, you have been delaying for so long and have not solved the problem, how can we explain to the customer?

[2025-04-09 08:02:44] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[] 000

[2025-04-09 08:35:49] hi, your files no del

[2025-04-09 10:18:45] ????

[] NULL

[2025-04-09 11:27:24] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-04-09 11:31:25] Congrats, your business is very professional.
Unfortunately We got into your radar.
What is your demand?
Regards, Eva

[2025-04-09 11:55:04] Good day, could you let me know, how to proceed?

[2025-04-09 13:14:15] hi

[2025-04-09 13:33:48] my File :
http://lockbitfss2w7co3ij6am6wox4xcurtgwukunx3yubcoe5cbxiqakxqd.onion/r/bApxjRwMEd#pJgUnM7EObljT090cBgWZwDrvzBhhCrabscuW1445m0=

[] I’m willing to negotiate

[]

[2025-04-09 13:43:26] Ok let me work on it

[2025-04-09 13:56:40] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-04-09 13:58:18] hello, you have encrypted our mits.tirol domain , can you let us know the btc ammount please

[2025-04-09 15:10:11] this information will be downloaded and assessed.

[2025-04-09 15:13:30] Okay

[2025-04-09 15:14:11] how much data did you take from us?

[2025-04-09 15:15:21] Around 50 GB. Enough to destroy your reputation.

[2025-04-09 15:16:36] will advise the leadership.

[2025-04-09 15:18:39] Price: $4,500,000 in BTC.

[2025-04-09 15:20:34] will advise the leadership

[2025-04-09 15:21:27]

[2025-04-09 15:23:11] downloading.

[2025-04-09 21:44:39] Any news?

[2025-04-09 22:55:18] Our bank is saying that LockBit is sanctioned. How do you suggest we proceed?

[2025-04-09 23:00:56] You just buy bitcoin for your own needs and send it to us. There is no need to mention “Lockbit” or any other related stuff.

[2025-04-09 23:06:15] 20k usd

[2025-04-09 23:07:30] You must pay the ransom and then we will restore your systems and remove the data stolen from you from our servers.

[2025-04-09 23:13:18] If these are the people advising others on money, Iâd be worried â and right now it just seems like youâre stalling for time. Be quick.

[2025-04-10 00:25:41] 1. 5 BTC

Wait
15.10.2025

[2025-04-10 03:57:44] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-04-10 04:02:08] hello

[2025-04-10 04:02:51] hello decrypt price
files decrypt test

[2025-04-10 04:04:01] upload your test file

[2025-04-10 04:06:53] price 6k$

[2025-04-10 04:09:56] What about people? Big brother, when will this problem be solved?

[2025-04-10 04:15:46] How much is the ransom? I am a small lawyer office, it is only me as a lawyer an 3 employees and I don`t know if I can rase the amount…..

[2025-04-10 04:30:03] thank you for this , i hope this is negoiable , please can you also give me a screenshot or filetree of the tranfert data from our servers so i can convince my manager to pay the BTC

[2025-04-10 04:32:45] attach some unimportant files for test decryption, packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz

[2025-04-10 06:13:18] ?

[2025-04-10 09:12:46] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-04-10 09:14:03] Hi

[2025-04-10 09:15:44] Anyone there?

[] 1

[2025-04-10 10:39:59] after 48 hours the price will grow

[2025-04-10 12:30:37] no one?

[2025-04-10 14:22:36]

[2025-04-10 15:51:19] I guess no one gonna answer here

[2025-04-10 15:53:00] Hi

[2025-04-10 15:53:31] hey

[] NULL

[2025-04-10 16:08:20] it is gumustasmaden.com

[2025-04-10 19:01:47] Isn’t your boss always online? It’s not online for more than ten days now, something is wrong!

[2025-04-10 20:23:18] Any news?

[2025-04-10 20:32:02] Any news?

[2025-04-10 21:10:45] information has been given to our team. our it team is selecting encrypted files to test.

[2025-04-10 21:12:26] Okay. not important files, up to 3.

[2025-04-10 21:13:38] Okay.

[] NULL

[2025-04-10 21:24:40] Solve this issue, if not soon we are going to start timer on blog under your company title.

[2025-04-10 21:32:40] You can buy bitcoin as an own investment etc. There are a lot of ways how to solve this.

[2025-04-10 21:38:43] Your time for respond i not unlimited. We are ready for publication

[2025-04-10 21:45:45] cost of the decryption ?

[2025-04-10 22:54:33] I will ask another way, can we start uploading your data?

[2025-04-11 03:22:54] hey is there any one for communication ?

[2025-04-11 04:23:02] Why you don`t let me know your expectations?

[2025-04-11 04:38:10] HELLO

[2025-04-11 04:39:08] hello

[] NULL

[2025-04-11 04:47:33] But it’s your team’s work! Can you contact the boss to help deal with it? ID:545C63F302F752F491D11E13640F362E

[2025-04-11 04:48:45] No, this is not my client

[2025-04-11 04:50:30] But it’s your team’s work! It will also affect your credibility! Can you help contact the boss to deal with it?

[2025-04-11 04:52:39] The customer service always replied to me: the boss is not online, but it has been almost 20 days, is your boss really not online?

[2025-04-11 05:01:06] Can you help contact the boss to go to the ID:545C63F302F752F491D11E13640F362E page to see, can you solve this problem? Thank you

[2025-04-11 05:02:22] ????? Big brother, the customer asked for a refund!!! How can this problem be solved?

[2025-04-11 05:05:49] can you please give an update on my request

[2025-04-11 09:00:04] http://temp.sh/hYAwJ/tree_KEMATEN.txt

[2025-04-11 09:01:08] 50k usd

[2025-04-11 09:03:03] The content of the downloaded information: financial documentation: a full archive of financial reports, including detailed accounting statements, tax charges and payment registers for various periods of activity. Bank statements, reports on the movement of funds, documents on credit obligations and financial guarantees are included. Also containing analytical reports on the profitability of projects, estimates for current operations and strategic plans for the distribution of budgets. Data on settlements with counterparties, including advance reports and acts of reconciliation of mutual obligations are presented.
Legal documents: information on legal documents covering contractual relations with counterparties, including delivery, rental and provision of services. Corporate documents governing the organizationâs activities, as well as materials on judicial and pre -trial settlements of disputes are included. Information is also contained in labor contracts, personnel orders and internal regulatory acts.
Judicial and procedural materials: complete dossier on trials with claims, appeals and court decisions. Expert conclusions, meetings and materials of enforcement proceedings are included. Documents on arbitration disputes, claims and mediative agreements were separately allocated.
Personal cases and confidential documentation: an archive of personal files of employees with labor contracts, personnel movements and certification sheets. Medical certificates, social security documents and personal agreements are included.The confidential section contains notarized documents, hereditary cases and materials on the protection of personal data. Personal information of employees and customers includes full data, such as information about medical insurance, the size of monthly and annual wages, as well as current contact details – the address of residence, phone numbers and email. Additionally, the documentation contains copies of personality certificates, information on driverâs license, and numbers of medical insurance for employees and customers.
Technical and auxiliary materials: accompanying documentation on current activities, including archival copies of important documents, backups of databases and official correspondence on organizational issues. A separate block is devoted to materials on information security and the protection of commercial secrets.
The full archive of correspondence for 2024â2025, including business correspondence with customers and partners. Electronic letters, attached files and materials, internal reports, discussions of contracts, court cases, financial transactions related to the activities of the RECHTSANWALTSKANZLei Mag are included. Eva Holzer-Waisocher.

[2025-04-11 09:03:10] http://temp.sh/ftZCY/tree_HOLZER.txt

[] NULL

[2025-04-11 09:43:51] http://temp.sh/hqjVo/tree_GUMUSTASMADEN.txt

[2025-04-11 09:45:44] 4 btc

[2025-04-11 09:54:16] are u able to discount for us? as u know that we are not able to afford this amount.

[2025-04-11 09:56:06] If you are telling us the truth you already have our files, and if you can take a look at our files that you will know that price is BIG than our size

[2025-04-11 09:58:00] would u tell us reasonable price to pay

[2025-04-11 11:03:00] thank you for the list , i will go back to management and come to you

[2025-04-11 11:32:02] KEMATEN\IT\IT\HOWto__Arbeitsberichte\Markus\2023\Arbeitsbereicht-Dr.Trieb-Grafikkarte.rtf

KEMATEN\IT\Wartungskunden\Tirol\20079_Hotel_Sportlers\IT\Netzwerktest.png

KEMATEN\IT\IT\Bilder\2021\2021.05.22 – BÂromâbel Herstellung\20210522_193652 – Kopie.jpg

[2025-04-11 11:33:42] can you please send me these 3 files as proof you have our data so i can take this forward

[2025-04-11 12:03:33] ??????????

[2025-04-11 16:04:18] Since you are not giving us ETA, soon we will start timer on blog under your company title.

[] NULL

[2025-04-11 16:15:35] Sorry guys that must be a misunderstandig because 90% of the topics you are pretending which is containing the gathered data isn`t part of the data actually.
The ransome ist more than 20 times the amount which we had to pay for the work needed to reestablish our hardware functional an reload data.
So we can only offer a ransom of max USD 3k because in this case we would be operational quicker.
BR, Eva

[] NULL

[2025-04-11 16:45:57] bc1qyxz9fv5q96sdurvxvpmkckgx9mhxr9wd4etxzd

[2025-04-11 17:22:34] Then expect lawsuits from the victims.

[2025-04-11 17:22:40] bye bye

[2025-04-11 17:22:58] wait

[2025-04-11 17:24:10] I want to hear your suggestions

[2025-04-11 19:59:20] So then, if we are not paying LockBit to delete our data and to not publish our data … then to where would you post our company title or upload our data?

[2025-04-11 20:01:31] Hello,
I am writing to you from Iran. Please believe me when I say I am not a wealthy person or part of any rich organization. I donât have access to international banking systems, and because of global sanctions, I canât even buy Bitcoin legally in my country.
The amount youâre asking is far beyond anything I could ever afford. Our currency has lost almost all its value â people here are struggling just to survive. Paying 5 BTC per server is not just difficult, itâs completely impossible for me. Even saving 0.1 BTC would take years here.
This situation has destroyed everything Iâve worked for. I am desperate and broken. Please understand that Iâm not your enemy â Iâm just a small person in a very hard place, trying to find a way forward.
If there is any way you could help, or reduce the amount, or show any mercy, I would be deeply grateful. I am willing to cooperate or discuss any possible solution that is humanly possible for me.
Thank you for reading. I truly hope you will show some mercy.

[2025-04-11 21:06:11] I understand but we cannot get that much together for this. Can you come down further?

[2025-04-11 21:08:27] We have selected files for testing:

[2025-04-11 21:09:31]

[] NULL

[2025-04-11 21:43:17] we can pay maximum 0.5 BTC. is that possible for you?

[2025-04-12 02:40:38] You are wasting our time. One who wants to pay, solve this issue and not ask these kind of questions.

[2025-04-12 04:07:13] ????????

[2025-04-12 04:23:25] Why don’t you delay reading the news? Don’t reply to messages?

[2025-04-12 06:36:31] Euer Versuch, mich durch erbÃ¤rmliche VerschlÃ¼sselungstricks und leere Drohungen zum Zahlen zu zwingen, ist gescheitert. Eure Ransomware mag Dateien blockieren, doch Angst verbreitet ihr nicht. WÃ¤hrend ihr euch hinter Affiliate-Programmen und anonymen Serverfarmen versteckt, haben internationale BehÃ¶rden eure Infrastruktur bereits zerschlagen â die Kontrolle Ã¼ber eure Erpresser-Webseiten ist lÃ¤ngst verloren.

Ihr behauptet, unbesiegbar zu sein, doch selbst euer angeblicher Â«SprecherÂ» Dmitrij Choroschew steht nun mit einem 10-Millionen-Dollar-Kopfgeld auf der Liste des FBI. Sanktionen machen jede Zahlung an euch zur Straftat, und Ã¼ber 2500 EntschlÃ¼sselungsschlÃ¼ssel liegen bereits in den HÃ¤nden der Ermittler. Eure Â«Doppel-ErpressungÂ»? Ein lahmes ManÃ¶ver, das lÃ¤ngst durchschaut ist.

Statt LÃ¶segeld zu kassieren, werdet ihr bald selbst zahlen â mit eurer Freiheit. Jeder Angriff hinterlÃ¤sst Spuren, und jedes Opfer, das sich weigert, schwÃ¤cht eure Macht. Ihr seid keine digitalen DÃ¤monen, nur eine Bande von Dieben, die auf die Verzweiflung anderer angewiesen ist. Meine Daten mÃ¶gen verschlÃ¼sselt sein, doch meine Entschlossenheit ist es nicht.

Mit verachtungsvoller Gelassenheit,
Die unbeugsame Eva

[2025-04-12 07:57:12] Brother, is this your integrity?

[2025-04-12 09:33:59]

[2025-04-12 10:00:12] ???????????

[2025-04-12 11:59:08] Sent me more smalls large file 10-50kb
we a work in you problem

[2025-04-12 12:09:47]

[2025-04-12 12:11:02] See link to the attached file

[2025-04-12 12:16:42] Hurry up and deal with it! The customer has already requested a refund!!

[NULL] 0

[1] It’s been more than half a month now

[2025-04-12 14:50:33] Do you have any other documents that you took from your clients? For example, an ibd file in MySQL.

[1] Whatever the reason is, only you can decrypt the files! Now that it’s been so long

[] 2025-04-12 14:55:48

[2025-04-12 14:58:50] There is no backup of key customer data, and the problem can only be solved by decryption, and the encrypted data is also your suffix, and there is no problem of damage to the data we check through WinHEX!

[2025-04-12 15:11:56] The 100GB data I gave me last time is not useful to the customer at all, do you have any other data from the customer?

[2025-04-12 15:48:00] Offer or publication?

[2025-04-12 18:13:05] We will download the File Samples. Its late into the weekend and the team will not be together again until next week to review what you have provided.

[2025-04-12 19:22:03] 4btc

[2025-04-12 19:29:29] haha

[2025-04-12 19:30:44] We can give you a discount, but you will have to find the money, otherwise we will not reach an agreement.

[2025-04-12 19:35:33] http://temp.sh/XgfVc/files_KEMATEN.zip

[2025-04-12 21:01:05] Okay.

[2025-04-12 22:54:27] Price 7k$

[2025-04-13 06:09:51] Hello,

We have reviewed your request of 4 BTC, but unfortunately this is completely unrealistic for us.

We are a small company based in Turkey, and due to the current economic situation, including extreme inflation and currency devaluation, we are struggling to even cover basic operational costs. 4 BTC is equivalent to more than what our company earns in months, and it is simply not possible for us to gather such an amount.

After speaking with management and evaluating all our options, the absolute maximum we could possibly arrange is 1 BTC. Even this would require extraordinary effort and personal sacrifices from our team.

Please consider our situation. We are not a large or wealthy organization, and we are trying to recover and continue supporting our employees and customers. We hope you will be reasonable and work with us towards a solution.

Looking forward to your response.

[2025-04-13 07:36:23] thank you please keep this channel open

[2025-04-13 09:00:22] the files are correct , let me know what i need to do to pay the 20k usd, what will happen if i pay the ammount please explain

[2025-04-13 11:46:57] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-04-13 11:48:30] how much ?

[2025-04-13 12:07:08] ??????????

[] 2025-04-13 13:13:11

[2025-04-13 13:14:07] 175k usd

[2025-04-13 13:15:14] decryptor + data deletion

[2025-04-13 13:24:29] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-04-13 13:26:11]

[2025-04-13 13:27:15] hello, I need help with my files

[2025-04-13 13:30:55] ???

[2025-04-13 14:30:47] Here is list of data that we stole from your company
It includes data from your departments, as well as databases and source code of internal tools
http://lockbitfskq2fxclyfrop5yizyxpzu65w7pphsgthawcyb4gd27x62id.onion/r/7EBaD2K62E#wPqQl0m5Y4BgWFuK2AO0zvHD35qszd++t0znuf6vQcE=

We gonna publish it, in case you will refuse to pay

[2025-04-13 15:46:32] anybody help me ?

[2025-04-13 16:25:19] wait

[2025-04-13 16:39:32]

[2025-04-13 16:42:11] how does it work? how can I decrypt all infected files ?

[NULL] 0

[] 2025-04-13 16:46:03

[2025-04-13 17:03:52] data deletion please

[2025-04-13 17:09:53] can you also let us know how did you entered the network , very important for us thank you

[2025-04-13 17:12:53] It’s your encryption problem! Don’t put the blame on the customer! You have to give me a time to solve the problem, or how will I explain it to the customer?

[2025-04-13 17:25:39] I will explain you this one last time. The files that were not subjected to modification during the encryption process by your security software were decrypted by you without any problems. The files that were damaged by your flawed security software during the encryption process are the ones that are now corrupted. Contact the company that provides you with security software to solve this problem. As soon as they make the files the way they should be after encryption, you will be able to decrypt them using the decryptor that you already have.

[1] If you can solve it, you can solve it, and if you can’t solve it

[2025-04-13 17:43:47] Can’t you solve it? If it doesn’t work, let us know!

[2025-04-13 17:45:21] The encrypted files have not been corrupted or modified! How can we use existing decryptors to decrypt them?

[2025-04-13 19:12:39] I want to order chickennuggets please

[2025-04-13 23:27:57] you need pay

[2025-04-14 01:14:45] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-04-14 01:26:59] In addition to the 100GB file you gave me last time, do you have any other customer data?

[2025-04-14 01:49:29] price for decryption?

[2025-04-14 03:19:00]

[2025-04-14 03:54:08]

[2025-04-14 05:00:38] Hello, we are the sole intermediary designated by the client. Could you kindly decrypt it? May I ask the client

[2025-04-14 05:09:41] how much?

[2025-04-14 05:29:13] I want to be completely honest with you: I donât have access to any international banking systems. I donât have a foreign account, and I canât legally buy cryptocurrency like Bitcoin in my country. I live in Iran, and we are under heavy sanctions. Our currency â the Toman â has lost almost all its value. Even earning just a small amount of BTC is a nearly impossible task here.

Iâm not a business owner with income in dollars or euros. Iâm just an individual who has lost everything â 20 servers gone. What youâre asking for is simply beyond my means, even with a discount. If there was a way to pay in Toman, I could try to gather something, but I know it may not be useful to you.

Please, I am desperate. Iâm not trying to avoid responsibility â I just need a chance to recover even part of what Iâve lost. If you can reduce the amount to something that someone like me could possibly afford, I will do everything I can to make it happen.

This is my last hope. Iâm asking not as a company or target â just as a human being.

[2025-04-14 05:41:32] Hello

[2025-04-14 05:42:06] Yes . wait

[2025-04-14 05:44:59] 4.000$

[2025-04-14 07:00:09] å¤å°

[2025-04-14 07:02:00] Please help provide a quotation after decryption

[2025-04-14 07:02:30] Please wait

[2025-04-14 07:04:36] OK

[2025-04-14 07:09:34] When can we expect the results to be available

[2025-04-14 09:45:15] Today or deadline tomorrow

[2025-04-14 10:26:25] I have backups of data from a few days ago.
We only need to recover some recent files. We are a very small company that does not even earn $2000 per month.
So I can pay $1000.
How will I get access to the files – will they be sent or will I receive a program to decode them?

[2025-04-14 11:03:17] please give me an update

[2025-04-14 11:40:24]

[2025-04-14 11:57:18] tell price?

[2025-04-14 12:05:36] 0.75 BTC all network

[2025-04-14 13:18:18]

[2025-04-14 13:41:23] yes we can

[2025-04-14 13:52:20] ok what is the next step ?

[2025-04-14 14:31:50] understand

[2025-04-14 14:32:55] We are the only decryption partner designated by the client. As the client has a relatively small scale, what is the lowest price you can accept for this? We hope to achieve cooperation between both parties as much as possible

[2025-04-14 14:39:11] We can accept 2000$ if you pay in 24 hours

[2025-04-14 14:40:23] You must to pay by BTC
BTC wallet: bc1qqpqpy2u2wn3u6uhja522zejpsmm0kmw5amg7n5

[2025-04-14 14:41:44] You will have decryption tool after payment

[2025-04-14 14:44:05] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[] NULL

[2025-04-14 14:45:49] hi.bro.
the id price is?

[2025-04-14 14:59:16]

[2025-04-14 15:01:02] i need just 5 files
how i cna get them

[2025-04-14 15:19:18] 2000$ ok

[2025-04-14 15:27:16] Waiting for your reply

[2025-04-14 15:28:34] 0.75 BTC all network !

[2025-04-14 15:31:15] We set this price because we know the client is able to pay. This is a low price for this company.

[2025-04-14 15:36:28] Why do you say that? We are intermediaries for our clients. Could you please let us know so that we can have effective communication.

[2025-04-14 15:38:08] Are you all the bank deposit information of the company

[NULL] 0

[2025-04-14 15:49:27] Yes, we have information about the finances of this company. We know for sure that this is not a large sum for them. In addition, many servers were encrypted. We will not discuss the economy of China here now. We are here only so that your client pays us and gets his data back.

[] NULL

[2025-04-14 18:17:46] pay

[2025-04-14 18:24:30] ??
What do u want?
Buy data?

[] NULL

[2025-04-14 19:49:56] what is the btc adres

[2025-04-14 19:56:15] bc1qp3cl68v8nstaxpqgjaq50rxmvrzen7lwva0wsl 0.25 BTC

[2025-04-14 21:59:36] Any news?

[] 2025-04-14 23:04:58

[2025-04-14 23:06:34] Also, can we discuss the price and determine the minimum cost that can be offered

[2025-04-14 23:29:54] I’m not trying to deceive you but just passing on what they wanted me to say. I can tell you they still want the files back. I want this deal to happen just as you are. Since I’m earning commission fees from them, and you probably get some reward from closing a deal too.

[2025-04-15 02:28:07] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-04-15 02:29:31] Privet eto btcdrugdealer new tox DAC09891C2D0140585D9D99B7FB74FA05F862F5D06E5B3440DA4EF3CA2708705E8BFC7C8D531

[2025-04-15 04:34:33] What is the name of this customer encryption program?

[2025-04-15 05:03:54] The only thing we can do is give you a discount on condition that payment is made within three days.

[2025-04-15 05:54:07] we have forseen 0.23 is that ok please ? once we pay you will share the enterin point and delete the data

[2025-04-15 08:00:15] All this is normal, a normal transaction.
We are honest and we can ensure decryption after receiving the ransom.
If the ransom is too low, we will not decrypt it.

[2025-04-15 08:04:58] We cannot break the price rules. Otherwise no one will give a reasonable ransom price. Our five tests require excellent rewards.

[2025-04-15 08:05:37] after finished,self-deleted.

[2025-04-15 08:06:07] ?

[2025-04-15 08:06:52] Do you still have an encryption program over there?

[] NULL

[2025-04-15 08:11:54] the program was deleted

[2025-04-15 08:12:14] every program is same. just diff keys

[2025-04-15 08:13:30] The disk will be completely overwritten.

[2025-04-15 08:13:32] Can you send me the program then?

[2025-04-15 08:13:45] the program was deleted

[2025-04-15 08:13:53] for this coustomer

[2025-04-15 08:14:32] Decryptor will delete at – 2025-05-03 14:41:10

[2025-04-15 08:14:45] Decryptor will delete at – 2025-05-09 14:07:57

[2025-04-15 08:14:50] Decryptor will delete at – 2025-05-07 12:14:51

[] NULL

[2025-04-15 08:15:19] Decryptor will delete at – 2025-04-27 16:12:50

[2025-04-15 08:15:31] Decryptor will delete at – 2025-04-29 16:07:05

[2025-04-15 08:27:16] What did the boss say?

[] NULL

[2025-04-15 09:00:59] ok we will pay

[2025-04-15 09:02:57] it is first time I will use BTC wallet so I will let you now when payment is done

[2025-04-15 09:05:19] Do they want to get their servers with information back?

[2025-04-15 09:18:04] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-04-15 09:19:47] Hello, thank you very much for your security exercise, which revealed some security imperfections……

[2025-04-15 09:22:48] What is the cost for the end of this exercise?

[] NULL

[2025-04-15 10:13:52] …

[2025-04-15 11:03:05] ?

[2025-04-15 11:21:41] What is the name of the encrypted file? Can you tell me?

[2025-04-15 11:37:37] We will wait for a better offer from you.

[]

[2025-04-15 12:06:48] hello

[2025-04-15 12:08:58] Hello

[2025-04-15 12:10:08] how are you today…

[2025-04-15 12:28:37] …

[2025-04-15 12:50:14] fine

[2025-04-15 12:50:32] yes

[2025-04-15 13:06:52] What is the cost for the end of this exercise?

[2025-04-15 13:19:25] money is being transfert will send you proof once i have it

[2025-04-15 13:30:30] +

[2025-04-15 13:30:37] +++

[2025-04-15 13:30:42] dobavil

[2025-04-15 13:54:29] You need to sent BTC to wallet bc1qqpqpy2u2wn3u6uhja522zejpsmm0kmw5amg7n5 and send me message in this chat

[2025-04-15 13:55:19] ok

[2025-04-15 14:17:15] ok, we wait

[2025-04-15 14:30:33] 100k usd

[2025-04-15 14:34:13] http://lockbitfskq2fxclyfrop5yizyxpzu65w7pphsgthawcyb4gd27x62id.onion/r/VGychGFn_h#CoKJU2jk+mxRHmoWUvG24QmwBAupR4XPxzgZHO8aKUM=

[2025-04-18 09:47:43]

[2025-04-18 10:06:18] Tomorrow

[2025-04-18 10:12:53] what mean?

[2025-04-18 10:19:40] 10000$ you need pay tomorrow , if late we come back to 12000$

[2025-04-18 10:23:04] $10000 pay in 36 hours. that is the shortest time to solve this issue.

[2025-04-18 11:51:55]

[2025-04-18 13:48:02] STOLEN DATA – 363 GB

[2025-04-18 13:48:27] http://lockbitfskq2fxclyfrop5yizyxpzu65w7pphsgthawcyb4gd27x62id.onion/r/8zEeoXZj5u#ZU39cOqt2OAYzx1jUj9tb/xnnXIoAZggb48rIAg3rJk=

[2025-04-18 13:48:37] tree of stolen data

[2025-04-18 14:16:13]

[] NULL

[2025-04-18 17:08:43] 7 days.*

[] 1

[2025-04-19 04:23:10] hello can you make cheaperï¼

[2025-04-19 06:37:36] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-04-19 07:08:57] Hello

[2025-04-19 07:10:42] This is normal. Everything is correct. After payment you will receive instructions and decryption tools

[2025-04-19 07:56:08] How long will you send me decryption key after payment?

[2025-04-19 08:01:34] Send me your btc wallet and exactly amount. I will finish payment in 2 hours.

[2025-04-19 08:24:28] yes

[2025-04-19 08:36:59] Hi, I am waiting for your reply.

[2025-04-19 09:03:29]

[2025-04-19 09:09:21] how much?

[2025-04-19 09:11:11] Hello, we sent you encrypted files. Please decrypt and tell us what we have to do to get all our data back

[2025-04-19 09:16:34] $70k in bitcoin

[2025-04-19 09:33:43] BTC – bc1qe7zlhpdjc75te4lgzfwyy3ygsnp6shdg9lrt97

[2025-04-19 09:35:13] 0.12 BTC

[2025-04-19 09:36:13] according current BTC price, $10000=0.1172 btc

[2025-04-19 09:38:43] yes ok

[2025-04-19 09:47:46] If there are no questions, I will afk until tomorrow

[2025-04-19 09:49:48] paid. hash: 5f07c26f15e5205de9ceff67315b0d119bdc2febaccd3cff45bc21bdc6fa6214

[2025-04-19 09:51:46]

[2025-04-19 09:53:33] here is a sample, if you need it to generate decryption tool. thank you.

[2025-04-19 10:23:04] Price 400k.

[2025-04-19 10:51:53] hello, wait

[2025-04-19 11:00:52] wait pls

[2025-04-19 11:14:32]

[2025-04-19 11:15:24] chmod +x decrypt_ESXI_X64
./decrypt_ESXI_X64

[2025-04-19 11:52:24] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-04-19 11:53:55] Hi

[2025-04-19 13:10:45] is there a program run in windows x86?

[] 2025-04-19 13:36:12

[2025-04-19 13:40:38]

[2025-04-19 13:41:42] here is the decrpt.llg which I run in Ubuntu. please tell me how to solve it. Is the decrypt program right?

[2025-04-19 13:43:17] how much ?

[2025-04-19 13:55:23] ./decrypt_ESXI_X64 -i /home/user/folder

[2025-04-19 13:56:43] Put the files for decryption into the folder, you do not need to specify any parameters in ESXI, it will find all the files and decrypt them

[2025-04-19 14:02:24] ./decrypt_ESXI_X64 -i /home/user/folder can’t work in Ubuntu. no any response. All 3 test files can’t be decrypted.
should I have to run in ESXI ?

[2025-04-19 14:05:38] descriptor for ESXI, start it

[2025-04-19 14:07:47] I will reinstall a new ESXI and run this program on it. I hope you can send a program run in WINDOWS

[] 2025-04-19 14:13:00

[] NULL

[2025-04-19 14:21:29] do you have any information for us?

[2025-04-19 14:54:27] yes

[2025-04-19 16:58:17] hello
you need decrypt ?

[2025-04-19 20:28:21] We attacked the following list of companies through your network:
www.extragent.ch
www.bachmann-rimensberger.ch
www.kmpag.ch
www.gms-technik.com
www.storosol.ch
www.gammacard.ch
www.bp-ing.ch
www.kopitsis.com
www.kopp-metallveredlung.ch
www.innofact-suisse.ch
www.baku.ch
www.najid.ch
www.zahnarztpraxismutschellen.ch
www.summit-treuhand.ch
www.zhsh.metaltecsuisse.ch
www.profrose.ch
www.bau-recht.ch
www.kfc-suisse.ch
www.promrisk.ch
www.lanz-partner.ch
www.ledtex.ch
www.maadan.ch
www.marketagent-schweiz.ch
www.n-protec.com
In addition to crypto systems, we downloaded 2 TB of data.
If you want to solve the problem, then pay the ransom.

[2025-04-20 00:41:33]

[]

[2025-04-20 04:15:30] ?????????

[2025-04-20 06:06:09] How much the price?

[2025-04-20 06:40:28] how much is the ransom ?

[2025-04-20 07:14:00] and can you provide a list of file names that were stolen? we would also have to inform our customers

[2025-04-20 07:53:22]

[2025-04-20 07:53:22] Everything is ok, the second file is decrypted

[2025-04-20 08:45:14] need pay 50k usd

[2025-04-20 08:51:44] Are you the person authorized to make decisions on behalf of the company?

[2025-04-20 10:03:05] the second file is corrupt at the end or is it not ?

[2025-04-20 10:24:07] Please send more files for testing, the corrupted ones are excluded

[2025-04-20 10:25:46] We will do, its not so easy to find small files
how much is the ransom, we would please like to know

[] NULL

[2025-04-20 11:21:53] At the moment, our team of lawyers is studying your financial documentation, today we are not ready to name the price for you.

[] NULL

[2025-04-20 15:52:33] time for publication and delete decryptor?

[2025-04-20 17:32:42] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-04-20 17:33:56] hello we found your note

[2025-04-20 18:48:44] hello, you need pay

[2025-04-21 00:13:21] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-04-21 01:46:11] hello

[2025-04-21 02:03:40]

[2025-04-21 03:44:17] Hi, test decrypt was already made for your company in a another chat

[2025-04-21 03:45:17] we have 2 esxi,this is other esxi, but this ID only 2VMDK need

[2025-04-21 03:49:18] Their different ids

[2025-04-21 04:04:02] ok wait pls

[2025-04-21 04:07:03] Our company is still discussing the decision on whether to make the payment, because this is not a small sum of money. We have some independent backups. In veeam, it is rather troublesome to restore them

[2025-04-21 04:20:04] in ?

[2025-04-21 04:20:26] ?????????

[1] it’s up to you to pay or not

[] NULL

[2025-04-21 06:18:49] How much are you willing to pay given the initial amount?

[2025-04-21 06:31:39] All files that were not damaged during the encryption process by your security system were decrypted using the decryption software that we previously provided to you. The rest of the files were 100% corrupted, and they cannot be decrypted without the help of the providers of the security software that you use.

[2025-04-21 06:42:10] You can encrypt why can’t you decrypt it? If we can’t decrypt the customer asking us for a refund, what should we do?

[2025-04-21 06:43:34] I think you can handle it, it’s just that you don’t want to deal with it!

[2025-04-21 06:45:08] If it is an ordinary file that cannot be decrypted, it is still acceptable to the customer. But the database files cannot be decrypted, and for the customer, these are worthless!

[2025-04-21 09:53:21]

[2025-04-21 10:25:25] Yes.

[2025-04-21 10:30:53] Decryptor will delete at – 2025-05-05 19:59:23

[2025-04-21 10:31:10] Since you have no contact for a long time, the ransom price will increase. You need to pay 42,000 USDT. All data can be decrypted.

[2025-04-21 10:32:25] You must contact us before 2025-05-01 00:00:00 UTC. Because applying to the boss also takes time.

[2025-04-21 10:40:32] If there are very few documents that can still be said in the past, the key is that there are more than 50,000 documents, so how to deal with it?

[] NULL

[2025-04-21 11:29:42] Hello, due to limited technology, I am only connecting with you online, and the price is too high!

[2025-04-21 11:34:02]

[2025-04-21 11:45:28] wait

[2025-04-21 12:30:44]

[2025-04-21 12:32:57] What was the price before?

[2025-04-21 12:40:41] price please, urgently

[2025-04-21 12:55:47] we need the decryption cost urgently

[2025-04-21 12:57:59] 30% discount, will that suit you?

[2025-04-21 13:11:54] ?

[2025-04-21 13:19:09] I have many questions to consult you. We have many file encryption suffixes that are different. It seems that the encryption process was terminated, resulting in file damage.

[2025-04-21 13:20:48]

[2025-04-21 13:40:38] i need decryptor

[2025-04-21 13:44:14] we already made 2 test decrypt in other chats

[2025-04-21 13:45:45] but i find many files suffix

[2025-04-21 13:47:07] wait pls

[2025-04-21 13:47:33] Many file extensions are incorrect. They should have stopped during the encryption process. No complete encryption has been formed

[2025-04-21 13:48:37] Please show these pictures to your technician

[2025-04-21 13:54:09] ok

[2025-04-21 14:07:14] Soon we are going to start timer since no progress from you.

[2025-04-21 14:15:58] At the moment, our team of lawyers is studying your financial documentation, wait please.

[2025-04-21 14:18:44] Give me encrypted files, I will try decrypt

[2025-04-21 14:29:37] Please consult your technicians. When the encryption process of a file stops and the encryption is not fully completed, can your decryptor decrypt it ï¼thx

[2025-04-21 14:42:24] yes, a technician will answer you now

[2025-04-21 14:50:28] We discovered the vmdk of more virtual machines
All the documents have such problems. During the encryption period, stop the process of encrypting the file
So it will cause his file suffixes to be chaotic, with a lot of garbled characters |

[2025-04-21 15:07:19] The current issue is not how much we pay, but that too many files were damaged during the encryption process, and the encryption process was stopped, resulting in the files not being encrypted completely?

[2025-04-21 15:07:37] Please send us the locklog file. And also a list of all files on ESXI

[2025-04-21 15:17:32] Please send us the locklog file. And also a list of all files on ESXI

[2025-04-21 15:18:44] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-04-21 15:20:01] How much money you want?

[2025-04-21 18:15:13] Can we see a full list of the data you stole from our network?

[2025-04-21 18:28:23] The first price was 18,000 USDT

[2025-04-21 18:28:36] You must contact us before 2025-05-01 00:00:00 UTC. Because applying to the boss also takes time.

[2025-04-21 18:31:16] For customers who have not been in contact for a long time, we will reduce the frequency of conversations. We will be online all the time after you are interested in paying the ransom.

[2025-04-21 19:42:46] What are you referring to with the term “five tests”?

[2025-04-21 19:43:53] I talked to them again, they offered 1000 USDT.

[2025-04-21 19:54:42] ?

[2025-04-21 19:58:41] your lowest decryption price is 4,000 USDT.

[2025-04-21 19:58:42] If it is below this price, please do not contact me.

[2025-04-21 20:20:57] what mean

[2025-04-21 20:23:52] http://lockbitfskq2fxclyfrop5yizyxpzu65w7pphsgthawcyb4gd27x62id.onion/r/X_ehzQEUcg#nYXJqRoWPbyX4NluBNtfiWKxnjWOgcNLSazLfmnMdu0=

[2025-04-21 20:34:21] send you some filesï¼ Incorrect suffixï¼

[2025-04-21 21:00:00] we are still waiting

[2025-04-21 21:10:06] https://gofile.io/d/Usy7A9

[2025-04-21 21:46:21] 500k usd

[2025-04-21 23:44:17] Our team will be assembled to address this matter. We ask that you discontinue sending email to our employees. This is where we converse.

[]

[2025-04-22 02:39:08] https://gofile.io/d/Usy7A9 this fileï¼ I have just tested this link. It can be downloaded normally and the speed is very fast. Any browser will work

[2025-04-22 03:59:23] Or you could give me a website where I can upload files

[2025-04-22 04:54:42] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-04-22 04:59:09] how much

[2025-04-22 05:01:18] Hello! 075 BTC All netwrok

[2025-04-22 05:01:24] Hello! 075 BTC All netwrok

[2025-04-22 05:06:37] Hello

[2025-04-22 06:12:56] good morning
do you have an update for us?

[2025-04-22 08:30:53] Okay.

[2025-04-22 09:30:07] wait

[2025-04-22 10:42:37] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-04-22 10:49:13]

[2025-04-22 10:53:56] 1

[2025-04-22 10:55:24] 1

[2025-04-22 11:04:00]

[2025-04-22 11:17:24] 2kk usd

[2025-04-22 11:46:58] ï¼

[2025-04-22 11:47:42] is that 2 million USD or 200.000 USD?

[2025-04-22 11:49:50] Upload to another file hosting, this one has a limit.

[2025-04-22 11:50:02] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-04-22 11:54:24] i dont understand youï¼

[2025-04-22 11:56:12] did you dowload my files
?

[2025-04-22 11:59:21] you mean cant download files/?

[2025-04-22 12:04:24] you mean i need use other upload web,to up load files?

[2025-04-22 12:11:54] hello

[2025-04-22 12:16:52] We selected two small VMDK files. Since some of them are relatively large, we uploaded this one. May I ask if you want me to change to the previous uploaded website? Or replace the uploaded file?

[2025-04-22 12:47:07] Do you mean that this link cannot be downloaded? Do I need to change to another upload website?

[2025-04-22 12:55:48] hello

[2025-04-22 12:58:48] wait pls, the technician may take a long time to answer

[2025-04-22 12:59:13] did you get files?

[2025-04-22 13:01:51] yes

[]

[2025-04-22 13:05:26] I consulted some professionals, and they said it was very likely that the encryption was stopped during the encryption process. When encrypting files, the encryption process was terminated, resulting in file damage

[2025-04-22 13:19:35] i understand, build was running almost all night, process was not terminated

[2025-04-22 13:20:45] look lockbit.log file in esxi folder tmp

[2025-04-22 13:21:07] and upload here

[2025-04-22 13:31:17]

[2025-04-22 13:33:49] +

[] NULL

[2025-04-22 13:45:39] may i ask you 3 esxi system Will each one have this file?

[2025-04-22 13:48:36] yes

[] NULL

[2025-04-22 13:55:18] we would like to have a list of the extracted files if thats possible – we would need some solid proof for 2 mio USD

[2025-04-22 14:13:43] ok, waiting for a response from the technician, but now he is not there

[2025-04-22 14:18:51] okay

[2025-04-22 15:23:33] hello. you stole our files, what can we do to get them back?

[2025-04-22 15:28:47] Thank you. How do we know you actually have these files?

[2025-04-22 15:29:08] The team will be updated.

[2025-04-22 16:00:05] 3 days left for the discount.

[2025-04-22 16:20:00] select 10 files and we will send them to you as proof

[2025-04-22 16:46:40] http://lockbitfskq2fxclyfrop5yizyxpzu65w7pphsgthawcyb4gd27x62id.onion/r/dMyCJVQVKD#ehUDCgKJtapTNv9t3Vrvqqxy49cbOISjJFE8T6BF9Vo=

[2025-04-22 20:45:18] We will need time to discuss further and ask for patience

[2025-04-22 21:14:39] You have time till the end of this month. Then timer starts if no confirmation received.

[2025-04-22 23:33:23] any news

[]

[2025-04-23 04:00:41] Can it be cheaper

[2025-04-23 04:23:43] hi

[2025-04-23 04:23:55] anynewsï¼

[2025-04-23 04:24:57] yes, the technician wrote that it was successfully decrypted your vmdk

[2025-04-23 04:26:20] he can decryptï¼but the file was not encrypt completï¼ and More than 90% of VMDKS have garbled suffixes that are not fixed

[2025-04-23 04:26:29] vmdk will be uploaded today

[2025-04-23 04:27:40] More than 90% of VMDKS have garbled suffixes that are not fixedï¼ How to solve this problem?

[2025-04-23 04:28:12] this is not the first case, the decryptor can decrypt everything if you pay

[2025-04-23 04:28:36] pay and get decryptor

[2025-04-23 04:28:49] .4D749484 This should be with the correct suffix

[] NULL

[2025-04-23 04:30:34] ineed chackVMDK and show my bossï¼

[2025-04-23 04:30:51] ok wait pls

[2025-04-23 04:51:01] Hello , wait test. We can talk about discount if you pay fast

[2025-04-23 04:56:04] Hello, I have a question to consult you. Our virtual machine has many different suffixes, and their lengths and characters are all different. However, the first few characters are the same, while the latter ones are either very poor or very short. May I ask whether to use one KEY for decryption in this situation, or if different suffixes require different keys? Sorry, I have to make a report for my boss to see. Only then will the boss decide how to handle it

[2025-04-23 05:01:11] you will have one decryptor for all esxi system, also one build was used for encryption

[2025-04-23 05:02:20] after payment, you will immediately receive a decryptor and will be able to return all virtual machines on the same day

[2025-04-23 05:04:14] we also stay in the chat in case of questions

[2025-04-23 05:09:52] In this situation, we need to first encrypt the files that were not encrypted before? And then decrypt?

[2025-04-23 05:10:16] noo

[2025-04-23 05:11:03] you will only need to run the decryptor

[2025-04-23 05:11:15] I know that those VMDK files were not encrypted completely and were terminated during the encryption process

[] NULL

[2025-04-23 05:17:35] i nee make a report to my boss

[2025-04-23 05:18:16] please wait for your vmdk, i will be later

[] 2025-04-23 06:19:08

[2025-04-23 07:21:56] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[] 1

[2025-04-23 07:45:17] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-04-23 08:00:27]

[2025-04-23 08:14:13] wait

[2025-04-23 09:06:24] Can I send a sample first?

[2025-04-23 09:37:11] https://gofile.io/d/44I1S7

[2025-04-23 10:29:59] wait test

[2025-04-23 11:57:01] yes

[]

[2025-04-23 12:06:01] http://lockbitfskq2fxclyfrop5yizyxpzu65w7pphsgthawcyb4gd27x62id.onion/r/Rzc6kq_cna#LWwR+5gVKpR6FHV3m62KICW/pkSkOVaSUVKSDAyeDbU= – tree of stolen data

[2025-04-23 12:06:04] get it

[2025-04-23 12:06:17] http://lockbitfskq2fxclyfrop5yizyxpzu65w7pphsgthawcyb4gd27x62id.onion/r/kq03w8sz_y#AZTiWBvIIMVmnfzumDjuuLJ/6lSwzOakmUxxa1ITSTo= – tree of stolen data

[2025-04-23 12:08:38] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-04-23 12:10:54] hello

[2025-04-23 12:17:13] The file you sent me, although the suffix has been removed, is still damaged

[2025-04-23 12:20:54] i ready check it ï¼bro

[1] You can have your technicians detect it. It’s exactly the same as before decryption

[2025-04-23 12:35:07] yeah well we discussed it with the companies and just very few want to pay, if we put the money together what they individually are ready to pay we are at about 200.000 USD. Are there any possible other ways?

[2025-04-23 12:39:35] Are you sure you want to lose your reputation? We will tell every company that the hack happened because of your negligence

[2025-04-23 12:40:16] we are a small hosting company, it is now in our decision to pay this, you must know this

[2025-04-23 12:42:34] What do you think will happen to your company if we publish all the data on each company?

[2025-04-23 12:43:07] how do you think we could pay 2 million USD when we are just a small company? we could not even if we would like to

[2025-04-23 12:43:38] This is very bad.

[] NULL

[2025-04-23 12:45:32] Explain what will happen if their data is published.

[] 2025-04-23 12:49:32

[] NULL

[2025-04-23 13:02:15] yeah the small companies need the decryptor and thats what they would pay the 200.000 USD for

[] NULL

[2025-04-23 13:03:03] Because either everyone or no one will get the decryptor

[2025-04-23 13:25:40] Hello? Can I take a look at the test file?

[2025-04-23 13:27:29] Please wait, a technician will answer you

[2025-04-23 13:34:49]

[2025-04-23 13:36:28] More than 90 percent of the files have this situation, and only a small amount of encryption is normal

[] NULL

[2025-04-23 13:39:50] Just as my partner described, for 90% of virtual machine files, the first few digits of their suffixes are normal, but there are some strange characters at the end. Of course, there will be a small number of normally encrypted virtual machines, and that is a very small quantity.

[2025-04-23 13:48:32] you can run your vmdk after decryption ?

[2025-04-23 13:49:37] noï¼The link you just sent me has been downloaded by me. It is no different from the previously encrypted and damaged file, except that there is no suffix

[2025-04-23 13:51:03] interesting, we are waiting for a response from the technician

[2025-04-23 13:51:27] is still damaged

[2025-04-23 13:52:53] Did you see the compressed package I just sent you? It contains some virtual machines that I randomly inspected, and they all have such problems

[] 2025-04-23 13:56:37

[1] If the technician doesn’t solve the situation

[2025-04-23 14:05:12] But we still have several others that we want to decrypt. Could they be cheaper

[2025-04-23 14:08:35] Including a NAS, which can be accessed through the windows system, but the office files inside have been encrypted by you

[2025-04-23 14:09:36] We just want to try our best to recover the losses

[NULL] bro no it won’t be cheaper

[2025-04-23 14:14:22] Just as we said before, some of us are normal, bro. You encrypted our data, which prevented us from working normally. But we still want to recover some losses. We are sincere

[2025-04-23 14:16:02] Since we have several ESXI machines, one of them seems normal, but the number of virtual machines on that one is not large. Moreover, we have a NAS with a lot of office documents that we want to decrypt. Considering the current situation, I would like to communicate sincerely with you. You take the money, and we will try to minimize the loss of some data. Is that okay

[] 2025-04-23 14:20:00

[2025-04-23 14:21:11] I understand the situation is difficult for you

[2025-04-23 14:22:17] yes ï¼my friend

[2025-04-23 14:23:19] Hello. Yes wait . Tomorrow

[NULL] If I don’t try my best to recover the losses

[] 2025-04-23 14:25:24

[2025-04-23 14:27:24] From the very beginning, I sincerely wanted to cooperate with you. However, at present, our problem is very bad. Even though you have a lot of money and may look down upon our case, please help us. Thank you. We will keep all your affairs confidential. We just want to recover some losses

[] 2025-04-23 14:29:45

[2025-04-23 14:57:35] we have a reputation, we have been working for more than 6 years and after pay the decryptor we have not had any problems with their decryption

[2025-04-23 14:58:22] we are not a scam, we work honestly

[2025-04-23 15:01:47] Brother, I have known some of you before. Through the Internet, you are very honest and have a good reputation.

[] 2025-04-23 15:03:40

[2025-04-23 15:04:41] Our boss has arranged for me to minimize the losses as much as possible. If the decryption cannot be done correctly, we will either replenish the data or create a new virtual machine. However, for those with normal suffixes, we want to decrypt them.

[] 2025-04-23 15:05:43

[] NULL

[2025-04-23 15:11:17] We have three esxi systems. Two of them have garbled file suffixes. The samples have also been sent to you. Indeed, their decryption cannot proceed normally. However, there is still one esxi whose suffix is normal. We want to decrypt it. If the price is too high, our boss will ask me to leave. So I would like to request you to reset a reasonable price. Regarding our current special circumstances,

[2025-04-23 15:15:47] Brother, please reply to me as soon as possible. I hope we can reach an agreement today, solve this matter, forget those bad things. You take the money and we can recover some losses

[] NULL

[2025-04-23 15:29:35] Our team has met and we find that our policy does not expressly make funds available for a payment when there are existing riders to get us up and running. Your demand does not allow for that.

[2025-04-23 15:39:05] Your answer is unclear. We need a straight explanation: what exactly is stopping the payment? If there are specific conditions, name them â or let me ask another way: should we start publishing your data?

[2025-04-23 15:55:45] helloï¼ ?

[2025-04-23 16:15:10] My boss is going to fire me. I want to reach an agreement with you as soon as possible and solve some problems. Is that okay?

[2025-04-23 17:21:46] or how much would be just the decryptor?

[2025-04-23 17:54:21]

[]

[2025-04-23 19:00:25] hl

[2025-04-23 20:01:46] 2 million USD

[2025-04-23 22:07:24] bro

[2025-04-23 23:45:58] hello,here

[2025-04-24 01:06:37] different extensions are normal, let you send different extensions to decrypt and we will decrypt everything

[2025-04-24 02:48:02] different extensions are normal, let you send different extensions to decrypt and we will decrypt everything

[2025-04-24 02:50:06]

[2025-04-24 02:51:20] However, I sent you a VMDK earlier. The file you sent back is still unusable and damaged,Our technicians compared the underlying hex code of the file. The file you sent back and decrypted is exactly the same as the original one, except that the suffix has been removed

[2025-04-24 02:53:24] Please check the attachment I just uploaded

[2025-04-24 02:55:15] We also found some issues. For some small files, their extensions are incorrect, but when I was asked to remove the file extension, it was not encrypted. However, for the large file VMDK, its extension is abnormal, and removing the file extension is bad. I sent one of them to you, but after you decrypted it, it was still the same as before and could not be used

[2025-04-24 02:58:15] Can you give me a cheap price?

[] 2025-04-24 02:59:47

[2025-04-24 03:04:39] Please spend more time online. My boss has been scolding me

[2025-04-24 03:17:58] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-04-24 03:47:36]

[] NULL

[2025-04-24 03:54:48] So there are many problems with our encryption. We are waiting for your reply. Thank you

[2025-04-24 04:26:20] hi, i am administrator. they say it is my fault

[2025-04-24 04:31:53] Hello

[2025-04-24 04:33:57] We made such a price for you because a lot of computers were encrypted. If you make payment quickly we will meet you halfway and give you a 15% discount.

[] NULL

[2025-04-24 06:40:53] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-04-24 06:43:21] Hello,how much ?

[] NULL

[2025-04-24 06:48:33]

[2025-04-24 06:51:37] test

[2025-04-24 06:53:34] The boss comes back to test

[2025-04-24 06:55:12] The boss is not here, wait for him to come back to test

[2025-04-24 07:00:55] ok

[2025-04-24 07:04:27] whats next?

[2025-04-24 07:22:31] you pay

[2025-04-24 07:22:52] how much

[2025-04-24 07:23:02] Ð¿ÑÐ¸Ð²ÐµÑ, Ð³Ð¾Ð²Ð¾ÑÐ¸ÑÑ Ð¿Ð¾ ÑÑÑÑÐºÐ¸?

[2025-04-24 08:14:40]

[2025-04-24 08:22:33] Customers need to pay 50,000 USDT ransom

[] 1

[2025-04-24 11:23:47] Could you please discuss it with your boss?

[2025-04-24 11:44:56] Please discuss it with your boss
Dear Mr. Hacker

[] NULL

[2025-04-24 11:47:09] oh, dear mr hacker, If our files with abnormal suffixes cannot be decrypted or are damaged, can we get a refund?

[2025-04-24 11:47:15] 70k is really not high for your company

[] 2025-04-24 11:48:16

[2025-04-24 11:49:02] you will decrypts critical vmdk everything is ok with them, you know it

[2025-04-24 11:49:44] oh, dear mr hacker, If our files with abnormal suffixes cannot be decrypted or are damaged, can we get a refund?

[2025-04-24 11:50:54] I know what you want is money and you are not short of it. But we are poorer than you. We are just making a small request regarding our current situation

[] NULL

[] 2025-04-24 11:53:15

[2025-04-24 11:55:02] Brother, hearing you say so, you have your boss and I have mine. We are both wage earners. Of course, you might be richer and have a more stable job than me. I hope you can help me and offer a lower price so that I can settle accounts with my boss.

[] NULL

[2025-04-24 11:57:44] Mr hacker, help me, You make it symbolically cheaper.

[NULL] Brother, could you please discuss it with your boss? Is 50K okay? It can’t go any higher. This is our limit

[2025-04-24 12:02:10] We are really sincere!

[1] May I think that you are also the boss? Let’s help each other. If possible

[2025-04-24 12:13:45] We have a little request.
Could you please tell us the way you invaded, or where our vulnerability lies,
and how to protect ourselves from being prevented from being attacked again by you or other ransomware

[2025-04-24 12:14:03] 1.5 BTC

[2025-04-24 12:26:42] Dear Mr hacker

[2025-04-24 12:38:49] Could you please tell us the way you invaded, or where our vulnerability lies,
-yes only after payment of 70k

[2025-04-24 12:40:22] ransomware will not be disturbed anymore

[] 2025-04-24 12:40:38

[2025-04-24 12:41:53] 50K ok?

[2025-04-24 12:42:16] we have already made a 30% discount

[NULL] i know, I know there will be a lot of losses after we decrypt it. I won’t argue with you about this fact

[] NULL

[2025-04-24 12:49:51] 55K pay think your boss or you are also reasonable people. Even if you make a concession of just one yuan, that would be your sincerity. I have already shown our sincerity!

[] 2025-04-24 12:50:31

[2025-04-24 12:51:59] NULL

[1] there were companies in the same situation and they couldn’t pay the required amount

[1] You help me and I’ll help you get the money quickly

[2025-04-24 12:53:53] i know you team ,You are very rich. it is great,

[2025-04-24 12:58:18] NULL

[2025-04-24 12:56:19] We have raised from our 40K to 60K. It’s sincere enough. Let’s reach a cooperation.

[2025-04-24 12:57:26] And keep this incident absolutely confidential

[NULL] Because we have comprehensively evaluated which encryption suffixes are garbled, even if you fail to decrypt them correctly, we won’t cause you any trouble. If they are unable to decrypt them

[2025-04-24 12:59:18] oh, well I can my support personally give you a 2k discount

[2025-04-24 13:00:21] bro, 60K , let is do it fast, We are all straightforward people

[2025-04-24 13:00:37] we will stay here if you need our help

[] NULL

[2025-04-24 13:04:24] okay
how to pay you !

[] 2025-04-24 13:04:58

[] NULL

[2025-04-24 13:05:50] but this stays between you and me.

[2025-04-24 13:06:07] okay ?

[2025-04-24 13:06:14] oh!

[2025-04-24 13:07:36] how to pay

[2025-04-24 13:07:47] 1PSg1u5WvoeJkzekTVJATzpS467NHG5Yyi

[2025-04-24 13:15:58] BTC right?

[2025-04-24 13:17:56] yes only

[] NULL

[2025-04-24 13:19:15] 0.6465 pls confrim

[2025-04-24 13:22:32] we We are preparing.

[2025-04-24 13:24:30] 0.6465 right

[2025-04-24 13:24:59] We have a little request.
Could you please tell us the way you invaded, or where our vulnerability lies,
and how to protect ourselves from being prevented from being attacked again by you or other ransomware

[2025-04-24 13:26:10] Could you just make a detailed report for me?

[2025-04-24 13:38:32] The ransom amount is determined by our team of analysts. We have studied your files and put forward the best price for you. We can make a 10 percent discount if you spare us useless discussions and proceed directly to the transaction. Otherwise, we can increase the price.

[2025-04-24 13:43:18] hello?

[] 1

[2025-04-24 14:01:36] Could you just make a detailed report for me? only briefly after payment, but you will understand everything

[] 1

[2025-04-24 14:02:56] yes, it would be better to indicate all the IDs.

[2025-04-24 14:03:55] okay we will pay you

[]

[2025-04-24 14:07:37] 60k good price, you are good

[]

[2025-04-24 14:08:53] Brother, I’ll report the decryption result to you. Even though I’ll pay, I still think there will be a lot of damage.

[2025-04-24 14:10:03] I just want to say that although we have reached a consensus, I think the documents will be damaged. This is not to deceive you and ask you to lower the price, did you understand me ?

[] 2025-04-24 14:10:37

[2025-04-24 14:11:05] we aready pay you, in process

[2025-04-24 14:11:44] ok

[2025-04-24 14:12:58] after payment you will have to wait from an hour to 24 hours until the technicial sends the decryptor here in the chat

[2025-04-24 14:15:24] i still hope you can help me,

[2025-04-24 14:16:33] pls check you wallet, we pay you success

[2025-04-24 14:17:35] What documents do I need to provide? 2 readme from 2 esxi, right, and 1 readme from windows,

[1] I’m not a technician

[2025-04-24 14:18:48] yes all ids

[2025-04-24 14:19:04] pls check you wallet, we pay you success

[2025-04-24 14:19:14] 0.64650000 received

[2025-04-24 14:20:19] you Vincent ?

[2025-04-24 14:22:25] what?

[2025-04-24 14:22:52]

[2025-04-24 14:23:56] pls check ids Please check the file I just sent

[2025-04-24 14:26:10] your name Vincent_Wen ?

[2025-04-24 14:26:30] no,

[2025-04-24 14:27:31] I sent a request to technician for the decryptor to you

[2025-04-24 14:27:38] wait pls

[2025-04-24 14:27:40] who is that

[2025-04-24 14:28:23] your it

[2025-04-24 14:29:01] Vincent_Wen ? now i ready pay you , can you tell ?

[2025-04-24 14:30:11] The money was paid to you by me. Could you please tell me what you know?

[2025-04-24 14:31:45] you will be very grateful to us, we really don’t have time for you
I’ll show you after I pay you what I mean.
but this stays between you and me.

[2025-04-24 14:31:56]

[2025-04-24 14:32:54] chmod +x decrypt_ESXI_X64
./decrypt_ESXI_X64

if u need decrypt folder
./decrypt_ESXI_X64 -i /folder/

[2025-04-24 14:33:18] wait windows decryptor

[2025-04-24 14:34:18]

[2025-04-24 14:36:53] Where did you get these screenshots from?

[2025-04-24 14:38:04] Brother, I paid you the money. Should you tell me the truth?

[2025-04-24 14:39:55] yes i knew

[] NULL

[2025-04-24 14:41:11] I gave you a discount, but I could have finished you off

[2025-04-24 14:41:37] say thank you

[2025-04-24 14:41:42] Does the file list represent everything you have taken from our network? Also how many GB in total did you take?

[2025-04-24 14:41:56] I am not cruel

[2025-04-24 14:42:06] thank you very much my brother

[2025-04-24 14:42:45] 1740254448 $inox10ck IT d3303

[2025-04-24 14:43:10] now you know what you need to do

[2025-04-24 14:43:19] you are good man bro

[2025-04-24 14:44:23] 1740254448 $inox10ck IT d3303 but i dnt know what is thisï¼

[2025-04-24 14:46:38] you will understand

[2025-04-24 14:46:59] but i dont know what is thisï¼

[2025-04-24 14:48:10] Please tell me directly. thx good man

[2025-04-24 14:49:19] Vencent _wen is your partner or your team ? or what?

[2025-04-24 14:51:02] We have already paid you. Why can’t you tell me in detail? Did they register for your organization’s backend and contact you?

[2025-04-24 14:51:04]

[2025-04-24 14:52:10] Did you invade his computer?

[2025-04-24 14:52:37] he managed backups and his host is in the domain so it was not difficult to get him

[2025-04-24 14:53:25] So did you control his computer? And obtained some useful information?

[1] Don’t manage backups in the domain

[2025-04-24 14:54:07] yes, but I deleted it after payment

[] NULL

[2025-04-24 14:54:43] I can come to you now, but you change the passwords again

[2025-04-24 14:55:41] no,no, brother, we aready pay you, dont do it,

[2025-04-24 14:55:59] we got to you through phishing, captured the domain, and then the admin host Vincent

[2025-04-24 14:56:49] we got to you through phishing, captured the domain, and then the admin host Vincent, I wonder if there is an insider in our company

[] NULL

[] 2025-04-24 14:58:02

[] NULL

[2025-04-24 14:58:56] the entry point was not vincent

[] 2025-04-24 14:59:46

[2025-04-24 15:01:08] you should have given me more 10k for this information

[] 1

[] NULL

[2025-04-24 15:03:42] thx

[2025-04-24 15:12:26] yes, 95 gb

[2025-04-24 15:18:17] hi, Could you just make a detailed report for me?

[2025-04-24 15:19:04] no

[2025-04-24 15:21:14] We have a little request.
Could you please tell us the way you invaded, or where our vulnerability lies,
and how to protect ourselves from being prevented from being attacked again by you or other ransomware

[] NULL

[2025-04-24 15:22:10] Well, I wrote everything above, a security specialist will understand what the matter is

[2025-04-24 15:22:29] can you write here?But before we made the payment, you promised us that you would tell me

[] 2025-04-24 15:23:03

[2025-04-24 15:24:01] and showed

[2025-04-24 15:24:01] I saw from the ransom letter that I could pay $777 to join you? May I ask what benefits there are after joining? What needs to be done? Could you give me some information?

[] oh no, that’s not for me

[2025-04-24 15:25:31] this is for the boss

[2025-04-24 15:27:14] http://lockbit3753ekiocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2id.onion/rules

[2025-04-24 15:27:27] here

[2025-04-24 15:31:06] i know, that we can contact boss?

[2025-04-24 15:32:12] maybe

[2025-04-24 15:33:03] thank you very much you r good man

[2025-04-24 15:33:34] kk

[2025-04-24 15:41:33] we have to coordinate more than 20 customers and we would ask you to please be patient, we do what we can to get a deal

[2025-04-24 15:42:40] So far you are only trying to lower the price, and not solve the problem.

[2025-04-24 15:44:24] how long time s i can get windows decryptor

[2025-04-24 15:51:07] we try to raise more money with all the customers and will tell you what we have as soon as possible

[] NULL

[including financial statements] resumes

[2025-04-24 16:07:38] hello i use the ESXI_decryptot on the linux cant decrypt May I ask if the decryptor you gave me is correct

[2025-04-24 16:09:03] linux!
./decryptor -y -i /folder

esxi
./decryptor
not more

[2025-04-24 16:09:31] ok i try

[2025-04-24 16:40:29] test done,

[2025-04-24 16:41:31] how long time i can get win decryptor

[2025-04-24 16:50:09] in proccess

[2025-04-24 16:53:06] pls send window dectyptor to here this is windows chat room! thx

[2025-04-24 16:53:56] pls send window dectyptor to ohter chat room that is windows chat room! thx

[2025-04-24 16:55:22] my partner aready write you in windows chat room pls send win decrypt to that room

[2025-04-24 16:56:36] of cuse you can send it here thx very much my brother

[2025-04-24 16:58:33] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-04-24 16:59:48] testing in preparation for attack – not real victim writing. Ignore this.

[2025-04-24 17:05:57] 00000000

[2025-04-24 17:06:14] ok

[2025-04-24 17:06:21] test

[2025-04-24 17:07:44] works

[2025-04-24 20:26:01] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-04-24 20:27:22] Hello. We are reaching out to this chat as directed. Can you please tell us what data you took from our network?

[2025-04-24 20:30:15]

[2025-04-24 20:30:32] We uploaded partial file listing.

[2025-04-24 23:20:06] any news

[2025-04-24 23:22:14] wait tech support

[2025-04-24 23:23:58] esxi and win not same supportï¼

[2025-04-25 01:28:18]
There are three situations where the suffix is incorrect. 1: The file itself is not encrypted. We can directly delete the suffix and the file can be used, or change it to the correct suffix and decrypt it without affecting its use. 2: When the encryption of a file is correct, we need to change its abnormal suffix to a normal one to decrypt it correctly. After the file is decrypted, it is normal. 3: If the file encryption process stops and the file is damaged, and we change it to a normal suffix,
it will not be decrypted either, because the file itself is not fully encrypted and its encrypted information is incomplete, so it will not be decrypted

[2025-04-25 01:29:42] Most of our data is still damaged. Of course, this is just an objective response. The real situation is that a small amount of VMDK has been decrypted. Just as I said before, I’m not lying. I’m just giving you suggestions to update your encryption.

[2025-04-25 05:47:49] 1

[2025-04-25 05:52:52]

[2025-04-25 09:59:19]

[2025-04-25 10:06:24] is it possible if we pay from different bitcoin wallets? we are trying to consolidate the money, but as you know it is complicated with that many companies

[2025-04-25 10:11:29] Ð¡Ð¿Ð°ÑÐ¸Ð±Ð¾

[2025-04-25 10:11:44] +

[2025-04-25 10:17:34] as of now, we have about 1.281.000 swiss franks collected which is roughly 1.540.000 USD, would you be able to settle on this if we can transform that money into BTC?

[2025-04-25 10:55:13] You can transfer this money to your wallet and we will give you time to collect the remaining money.

[2025-04-25 10:57:15] we started the onboarding process with the bank and the customers will transfer the money as soon as possible, it should be there on monday / tuesday and we can then buy the BTC and pay, thank you for your patience so far

[2025-04-25 11:00:23] Give me the exact date and time when the payment will be made, otherwise my boss will make a fundamental decision and increase the amount to 4 million.

[2025-04-25 11:03:39] we do now know since we do not know how long it takes for all companies to transfer the money to the BTC bank but it should be within next week

[] NULL

[2025-04-25 11:07:15] the process is that we buy the BTC with a neutral bank to have the trust between all the customers also

[2025-04-25 11:08:28] its not so easy to buy that amount of BTC without raising money laundering alarms in switzerland

[2025-04-25 11:09:50] Okay, do you guarantee to pay the $2 million by the end of next week?

[2025-04-25 11:12:54] we cannot guarantee to raise the whole 2 million since the companies for now raised 1.54 million and it is not our money. If they can raise the other half million we will transfer the money on their behalf as soon as its in the wallet and yes, we hope that this will be within the end of next week. if you can lower the price a bit – to probably 1.6 or 1.7 million they would probably be able to pay by tuesday or wednesday, that is what we can offer for now. We will have more information on monday and tuesday when the money trickles in

[2025-04-25 11:16:05] hi

[2025-04-25 11:35:26] ok

[2025-04-25 11:48:17] Brother, I have obtained the encryption of the Windows system. Could you permanently close this chat window? Because there is too much information about the company in it.

[2025-04-25 12:14:09] ÐÑÐ´Ð° Ð¿ÑÐ¾Ð¿Ð°Ð»?

[2025-04-25 12:14:11] Then we expect the first transaction of $1.5 million by Tuesday inclusive.

[2025-04-25 12:24:20] ÐÑÐ¶Ð½Ð° Ð¿Ð¾Ð¼Ð¾ÑÑ! Ð ÐÐ£ Ð½ÐµÑÐ²Ð½Ð¸ÑÐ°Ñ.

[2025-04-25 13:27:10] hello

[2025-04-25 14:07:15] hello

[2025-04-25 14:11:04] Thank you for the list and for taking our name off your site. I will pass this on to our team and let you know as soon as I can once they have reviewed it

[2025-04-25 14:20:31] Okay.

[2025-04-25 21:55:46] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-04-25 21:57:15]

[2025-04-25 22:06:57] drecrypt test dont work

[2025-04-25 22:08:57] hi

[]

[2025-04-26 07:24:28] https://temp.sh/WMHEH/tree_MCERVANTES.txt – tree of stolen data

[2025-04-26 07:25:53] Only my boss can do this, he is not at work yet.

[2025-04-26 07:25:58] Wait

[2025-04-26 07:27:36] ok my friend

[2025-04-26 07:31:11] We are a non-profit school… If they prove that they recover the sent file we can see the payment

[2025-04-26 07:32:47] I need to retrieve the files demonstrated in the tree you uploaded… i wait for you

[2025-04-26 07:41:04] In this file there is content that I know what it is to validate if you can effectively repair it.

[2025-04-26 08:17:34] Request 10 files from the tree. The files should not be important and should provide opportunities for restoring backups.

[] NULL

[2025-04-26 08:53:26] We make a one-time deal. You pay the ransom, get the stolen information removed from our servers and a full restoration of your systems

[2025-04-26 08:55:09] What is the value?

[2025-04-26 09:16:41] Dude, we are a non-profit school, we can research, we are not banks or big companies, which make a lot of money, we are a school to educate children.

[NULL] I know this doesn’t matter to you

[2025-04-26 09:25:59] ExplicaÃ§Ã£o Detalhada:
Privado, mas sem fins lucrativos:
O colÃ©gio Ã© uma instituiÃ§Ã£o privada, o que significa que Ã© gerido por particulares e nÃ£o pelo Estado. No entanto, ao contrÃ¡rio de uma empresa que visa lucrar, Cervantes nÃ£o tem a intenÃ§Ã£o de gerar lucro para os seus proprietÃ¡rios.

[2025-04-26 09:29:05] https://www.google.com.br/search?q=col%C3%A9gio+miguel+de+cervantes+%C3%A9+sem+fins+lucrativos&sca_esv=4ef6d43eae67c29a&ei=O6YMaI_CL67b1sQPyaD28QE&ved=0ahUKEwjPy5acsPWMAxWurZUCHUmQPR4Q4dUDCBA&uact=5&oq=col%C3%A9gio+miguel+de+cervantes+%C3%A9+sem+fins+lucrativos&gs_lp=Egxnd3Mtd2l6LXNlcnAaAhgCIjNjb2zDqWdpbyBtaWd1ZWwgZGUgY2VydmFudGVzIMOpIHNlbSBmaW5zIGx1Y3JhdGl2b3MyCBAAGKIEGIkFMgUQABjvBTIFEAAY7wUyCBAAGIAEGKIEMggQABiABBiiBEi5RlDKBVihRXAGeAGQAQCYAfICoAH_PaoBCDAuNDcuMy4xuAEDyAEA-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-AUYqAMYiwMYrwEYlwUY3AQY3gQY4ATYAQHCAgYQABgWGB7CAgIQJsICBRAhGKABwgIIEAAYFhgKGB7CAgcQIRigARgKwgIEECEYCpgDAIgGAZAGCroGBggBEAEYFJIHCDYuNDcuMy4xoAfh0QSyBwgwLjQ3LjMuMbgH3EA&sclient=gws-wiz-serp

[2025-04-26 10:20:17] 100k usd

[1] Dude, I’m from Brazil

[2025-04-26 10:24:28] Did you understand that we are a non-profit school? That several children have scholarships

[NULL]
I know you don’t respect that

[2025-04-26 10:29:21] please i need your help

[2025-04-26 10:30:39] I take out a loan from the bank and get 4k usd

[] 2025-04-26 10:32:23

[2025-04-26 10:46:25] hereï¼

[2025-04-26 11:09:46] yes

[2025-04-26 11:10:03]
There are three situations where the suffix is incorrect. 1: The file itself is not encrypted. We can directly delete the suffix and the file can be used, or change it to the correct suffix and decrypt it without affecting its use. 2: When the encryption of a file is correct, we need to change its abnormal suffix to a normal one to decrypt it correctly. After the file is decrypted, it is normal. 3: If the file encryption process stops and the file is damaged, and we change it to a normal suffix,
it will not be decrypted either, because the file itself is not fully encrypted and its encrypted information is incomplete, so it will not be decrypted

[2025-04-26 11:13:03] Brother, I have obtained the encryption of the Windows system. Could y— this

[2025-04-26 11:13:58]

[NULL] Dude, thank you so much for your kindness!
Unfortunately, I tried to recover one of the lost files from Azure, I recovered the others, but one of them didn’t work. If I can get 4k USD

[0] This txt password was the password for a bank backup, but it didn’t work 🙁 I can pay 4k

[2025-04-26 13:12:30] Brother, I have obtained the encryption of the Windows system. Could you permanently close this chat window? Because there is too much information about the company in it.

[2025-04-26 13:14:20] thanks

[2025-04-26 13:17:54] can you help me

[2025-04-26 13:18:32] okay

[2025-04-26 14:30:01] help me please

[2025-04-26 14:33:06] My time is running out… My bosses want to fire me… We can recover my environment for $4000… please help me I will be fired

[2025-04-26 16:29:13] oi

[2025-04-26 16:46:11] ?

[1]
Hi friend, how are you? I’m sorry to be annoying

[2025-04-26 16:54:21]

[2025-04-26 17:26:14] and I have a bank file to restore as well that I would like to trade with you

[2025-04-26 21:18:48] how long do we have till you publish our data?

[] NULL

[2025-04-26 23:43:29]

[2025-04-27 00:14:45] I have already checked how to buy bitcoins, you help me describe if I pay the 4K, that’s all I can if you tell me ok I’ll buy it now and transfer it to you

[NULL] Hi, tell me the minimum amount you can afford, I’ll see what I can do

[2025-04-27 05:24:14] 100k usd

[I’ll do my best here.
And in the end, I’ll lose my job. I’ll let you know that I couldn’t do it and let you know again. My only problem is a 20 gig file] I’ll talk to the school and explain.
Unfortunately

[NULL] The Azure crap didn’t restore a database backup

[2025-04-27 13:50:03] Offer a higher amount

[2025-04-27 14:45:22] 10 k

[2025-04-27 14:46:30] As I informed you, we are a non-profit school, it is very difficult to make a profit, we have no funds.

[2025-04-27 14:49:10] As I informed you, we are a non-profit school, it is very difficult to make a profit, we have no funds.

[2025-04-27 14:55:21] 25 gigas

[2025-04-27 15:14:13] That policy does not expressly make funds available for ransom payment. There are other considerations that are expressed in the policy like restoration & remediation support to assist with us becoming operational and liability issues. We do not want you to publish data either. Our team will be meeting mid-week to fully assess our options.

[2025-04-27 16:17:43] There is a person who was fired from school, she was not an honest person, with her password she deleted several things afterwards, because there was a backdoor user, so out of malice I think she passed information to you.

[2025-04-27 16:18:53] the intention was certainly to harm me

[2025-04-27 19:03:16] Could you provide the following files from the file list.

KINOUSSIS INSPIRATION DESIGN GROUP ÎÎÎÎÎ Î¡ÎÎ£Î©Î Î ÎÎÎ.pdf
Lifthellas .pdf
lista dwmatiwn.xlsx
~$Î¤ÎÎÎÎ¦Î©ÎÎ euphoria 2024.xlsx
DSC8203.jpg SNACK-OROFH-SCOUT2.skb VIDEO IMPERIAL CONGRESS HALL.mp4 Î£Î¥ÎÎÎÎ¡ÎÎ ÎÎÎÎÎÎ©Î£ÎÎÎ£ 2023_2024_2025.xlsx
CONFERENCE & EVENT INCOME 2024.xlsx

[]

[2025-04-27 22:35:26] hi

[2025-04-28 01:42:35] It takes time to contact the boss, you must contact us before 2025-05-02 00:00:00.

[2025-04-28 02:53:56] Think about the price again

[2025-04-28 05:15:39] http://lockbitfskq2fxclyfrop5yizyxpzu65w7pphsgthawcyb4gd27x62id.onion/r/HmTCwdQakz#G9QLymQtd32Vnr+zSnEgZTl2qS6NWQXgt/FDLk1/E9w=

[1] Dude, the school’s maintainers don’t receive any profit. If you want, I can prove it to you.

I’m sure that whoever contacted you did so with the intention of directly harming me.

I would just like you to help me and tell me what your minimum is. I understand that you don’t negotiate, that you have your own price, but look, we are a school, all our income goes to paying the employees and keeping the school running.

I don’t know what to offer

[2025-04-28 09:29:38] Thank you for sharing the details.

We understand that you expect to be compensated for your efforts, and we respect the work youâve done.
However, the amount youâre asking for is extremely difficult for us to manage, especially under the current circumstances.
Is there any way we could work together to find a figure that would be more realistic for us, while still respecting the effort youâve made?
We are trying to find a solution that minimizes losses on both sides.

[2025-04-28 10:21:12] You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat.

[2025-04-28 10:22:37] i wont to pay

[2025-04-28 10:24:31] ADTISZRLVUMXDJ34RCBZFNO6BNKLEYKYS5FZPNNXK4S2RSHOENUA

[2025-04-28 10:26:38] i want to pay

[2025-04-28 13:03:45] Hello. Thank you for joining the chat.
Currently, we are preparing the list of data we took from your network. For now you have to know that dealing with us is the best possible way to settle this quick and cheap. Keep in touch and be patient with us. We will reach out to you soon. Do you have a permission to conduct a negotiation on behalf of your organization? Once we get a response you will be provided with all the details.

[] NULL

[2025-04-28 13:49:29] Roughly 400 GB of files were taken from your network prior to encryption, including emails, important documents, company source code, databases, nextcloud data. The attached list was limited to depth 5 of the file tree.

[2025-04-28 13:51:09] Download link
http://lockbitfskq2fxclyfrop5yizyxpzu65w7pphsgthawcyb4gd27x62id.onion/r/wpBr5st2Gj#8RDtjfm594SrhVKDXnzxHLgoTXpjdiWENNtYl143vTc=

[2025-04-28 13:51:32] You can pick 2-3 random files up to 10mb size from the list and we will upload them to this chat as a proof of possession.
To prove that we can properly decrypt your data you can upload 2-3 encrypted files up to 10mb size to our chat and we will upload decrypted copies back.

[2025-04-28 13:52:08] How can we proceed

[]