nicatel.com
Speaking with LOCKBIT
Victim #124
You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat. If your archive weighs more than 10 megabytes, please use our file sharing service. http://lockbitfss2w7co3ij6am6wox4xcurtgwukunx3yubcoe5cbxiqakxqd.onion http://lockbitfsvf75glg226he5inkfgtuoakt4vgfhd7nfgghx5kwz5zo3ad.onion http://lockbitfskq2fxclyfrop5yizyxpzu65w7pphsgthawcyb4gd27x62id.onion For security reasons we do not click on other links you send in chat. Please wait for a reply, sometimes it takes several hours due to possible time zone differences.
Fri Jan 24 2025 16:37:40 GMT+0000 (Coordinated Universal Time)
LOCKBIT
hi
Fri Jan 24 2025 16:37:51 GMT+0000 (Coordinated Universal Time)
Victim #124
hi, I'm here
Fri Jan 24 2025 16:38:46 GMT+0000 (Coordinated Universal Time)
LOCKBIT
The previous public chat has been blocked. Now we can communicate with you privately.
Fri Jan 24 2025 16:38:48 GMT+0000 (Coordinated Universal Time)
LOCKBIT
We know about the TOX conversation and that you have already agreed to a price of $50,000. When will you be ready to pay? How much time do you need?
Fri Jan 24 2025 16:39:42 GMT+0000 (Coordinated Universal Time)
Victim #124
50,000 is really difficult for me. What is the lowest price you can give me?
Fri Jan 24 2025 16:41:17 GMT+0000 (Coordinated Universal Time)
LOCKBIT
So in the last chat you agreed to the amount of 40,000 dollars. We do not agree with this price. But we agree to give you a discount of 5,000 dollars, and the final price will be 45,000 dollars, but on one condition: that you make the payment within 24 hours. Do you agree?
Fri Jan 24 2025 16:45:03 GMT+0000 (Coordinated Universal Time)
Victim #124
I can get 30,000 today. The 40,000 would be for Monday. Also, in a few hours the banks close until Monday. I don't think I can make any payment in 24 hours.
Fri Jan 24 2025 16:49:31 GMT+0000 (Coordinated Universal Time)
LOCKBIT
We offer you the following options: Main Option: The main payment is due on Tuesday. Find an additional $5,000 to bring the total payment to $45,000. We are willing to offer you an alternate option: If you make a $5,000 deposit today, we will give you a $5,000 discount and you can pay the balance of $35,000 on Monday or Tuesday. Which option do you choose?
Fri Jan 24 2025 17:01:20 GMT+0000 (Coordinated Universal Time)
Victim #124
Ok I would accept the second option. Today I could transfer the 5000, I need the instructions. On the other hand, I would appreciate it if you could send me some other file, of your choice, so that I know that I am not spending the money uselessly.
Fri Jan 24 2025 17:13:10 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Now prepare the money for payment, so that you are ready to make a prepayment quickly. In the next tens of minutes we will send you a bitcoin wallet address for payment, and you will be able to make a payment as soon as you are ready. In the next few hours we will send you a PARTIAL file tree, from which you can choose any file, and we will send you the original file, or its screenshots if the file is too important in our opinion (happens rarely). We will try to do all this as soon as possible. You can make a prepayment after we send you the original file, but the main thing is that the prepayment must be made today.
Fri Jan 24 2025 17:22:55 GMT+0000 (Coordinated Universal Time)
LOCKBIT
We always focus on the time zone UTC+0, so you have approximately 6.5 hours.
Fri Jan 24 2025 17:24:17 GMT+0000 (Coordinated Universal Time)
Victim #124
Perfect. I'm getting everything ready. I'm waiting for the address.
Fri Jan 24 2025 17:33:02 GMT+0000 (Coordinated Universal Time)
LOCKBIT
This is bitcoin wallet address for payment: bc1q6tqarpua79kwqr0u6np9ac4faqv5hz96rhl92v
Fri Jan 24 2025 17:55:12 GMT+0000 (Coordinated Universal Time)
LOCKBIT
We are currently preparing a partial file tree for you. This will take some time.
Fri Jan 24 2025 17:56:15 GMT+0000 (Coordinated Universal Time)
Victim #124
Good
Fri Jan 24 2025 18:41:30 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Fri Jan 24 2025 19:17:23 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Please select a file and we will send you the original file.
Fri Jan 24 2025 19:17:45 GMT+0000 (Coordinated Universal Time)
Victim #124
.\Datos\MCasella\PC\NICATEL\EMPLEADOS\SUELDOS\PLANILLA ARCHIVO SANTANDER\11.2024\Planilla adelantos Santander 11.2024.txt
Fri Jan 24 2025 19:30:44 GMT+0000 (Coordinated Universal Time)
Victim #124
Please, could you also confirm that you have the original .mfd files and show me their names?
Fri Jan 24 2025 19:32:03 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Fri Jan 24 2025 20:19:13 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Perhaps you are not talking about "mfd" files, but about "mdf" database files?
Fri Jan 24 2025 20:20:20 GMT+0000 (Coordinated Universal Time)
LOCKBIT
All the files we downloaded from you are in perfect order, and they are whole and functioning. We sent you a list of files, a partial file tree, which contains about 5% of all the files we downloaded. The full file tree + full logs of deleting these files from our servers you can get only after payment.
Fri Jan 24 2025 20:24:32 GMT+0000 (Coordinated Universal Time)
Victim #124
Yes, sorry I mean MDF
Fri Jan 24 2025 20:46:57 GMT+0000 (Coordinated Universal Time)
LOCKBIT
I see that these files are not in the partial file tree. They may be in the general list, but you will be able to see it only after payment. In any case, if these files are there, they are in perfect order. But you should not worry about this, because after payment you will also receive the decryption keys for the files, and you will be able to decrypt your files if they are encrypted and do not function for now. When will you make the payment? We have fulfilled the conditions on our side. You have about 3 hours left.
Fri Jan 24 2025 20:52:32 GMT+0000 (Coordinated Universal Time)
Victim #124
Well, we trust you. Payment will be made today. We are working on it.
Fri Jan 24 2025 20:55:42 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Ok, we are waiting.
Fri Jan 24 2025 21:45:43 GMT+0000 (Coordinated Universal Time)
Victim #124
Ok, I'm waiting for the dollar transaction to the wallet
Fri Jan 24 2025 21:50:54 GMT+0000 (Coordinated Universal Time)
LOCKBIT
ok
Fri Jan 24 2025 22:08:59 GMT+0000 (Coordinated Universal Time)
Victim #124
Done
Fri Jan 24 2025 22:45:13 GMT+0000 (Coordinated Universal Time)
Victim #124
you need the id?
Fri Jan 24 2025 22:46:24 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Everything is fine. We have received your advance payment. We will wait for the rest of the money from you, Monday or Tuesday. $35,000.
Fri Jan 24 2025 23:00:37 GMT+0000 (Coordinated Universal Time)
Victim #124
thanks
Fri Jan 24 2025 23:01:22 GMT+0000 (Coordinated Universal Time)
LOCKBIT
After full payment, you will be able to receive a full tree of files (only upon your request), full logs of deletion of all files from our servers, as well as decryption keys.
Fri Jan 24 2025 23:01:49 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Hello. We are expecting payment from you today, right?
Tue Jan 28 2025 14:32:28 GMT+0000 (Coordinated Universal Time)
Victim #124
Good morning. Yes, I am waiting for the last loan I requested to be credited. I estimate that it will be resolved in 1 hour.
Tue Jan 28 2025 14:50:16 GMT+0000 (Coordinated Universal Time)
Victim #124
Good afternoon. The bank tells me that the process has been accepted but the accreditation may take a while. In the meantime, I can transfer what I already have, which is 27,000.
Tue Jan 28 2025 18:07:49 GMT+0000 (Coordinated Universal Time)
Victim #124
Hi, I already have the total. Should I send the 35,000 to the same wallet?
Tue Jan 28 2025 19:27:59 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Hello! Please wait, we will answer you soon
Tue Jan 28 2025 20:10:03 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Yes, that's right, you can send money to the same wallet.
Tue Jan 28 2025 21:14:19 GMT+0000 (Coordinated Universal Time)
Victim #124
Payment has already been sent, it is pending
Tue Jan 28 2025 21:37:13 GMT+0000 (Coordinated Universal Time)
Victim #124
The order was processed
Tue Jan 28 2025 21:52:40 GMT+0000 (Coordinated Universal Time)
LOCKBIT
We confirm receipt of funds. We will soon give you the decryption keys for the files, in this chat. We are also ready to begin the process of deleting all your files and creating deletion logs for you. Please let us know if you need a full file tree before we begin the process of deleting files. You will also see all these files in the deletion logs.
Tue Jan 28 2025 22:17:50 GMT+0000 (Coordinated Universal Time)
Victim #124
Ok, I need the MDF files with the decryption key. I have to be away for a few minutes. How long will it take you?
Tue Jan 28 2025 22:29:10 GMT+0000 (Coordinated Universal Time)
LOCKBIT
It may not be fast, it is already late today. It may be tomorrow. I cannot give a time frame yet.
Tue Jan 28 2025 22:30:07 GMT+0000 (Coordinated Universal Time)
Victim #124
Ok, I'll be back in an hour too. If you have the key for later that would be great.
Tue Jan 28 2025 22:31:56 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Wed Jan 29 2025 03:36:20 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Wed Jan 29 2025 03:36:27 GMT+0000 (Coordinated Universal Time)
Victim #124
Thank you, what is the procedure?
Wed Jan 29 2025 04:59:01 GMT+0000 (Coordinated Universal Time)
LOCKBIT
The deletion process is in progress. Once completed, we will give you full logs of deleting all your files. Regarding the file decryption keys, have you figured it out yet?
Wed Jan 29 2025 21:02:03 GMT+0000 (Coordinated Universal Time)
Victim #124
Yes, perfect. Thank you. I was able to recover the most important things. Could you give me some recommendations so that this doesn't happen again?
Thu Jan 30 2025 02:05:24 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Yes, of course, we will prepare it for you.
Thu Jan 30 2025 13:11:25 GMT+0000 (Coordinated Universal Time)
Victim #124
Thank you. Is there any way I can download the MDF files you have without encryption? The system provider tells me that they may be corrupted. Thank you.
Thu Jan 30 2025 16:35:25 GMT+0000 (Coordinated Universal Time)
LOCKBIT
I not understand you
Thu Jan 30 2025 21:45:25 GMT+0000 (Coordinated Universal Time)
LOCKBIT
We checked the file tree, unfortunately there are no mdf files among them. But our encryption does not damage files, check everything carefully.
Fri Jan 31 2025 02:44:13 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Hello Your deletion files log:
Mon Feb 03 2025 19:49:02 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Mon Feb 03 2025 19:49:08 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Some tips to improve the security of your servers: First of all, to improve security, you need to change all Windows account passwords without exception. You need to change them to long and complex passwords. Secondly, you need to install antivirus software on all servers without exception (Kaspersky, Sophos, Bitdefender or other reliable antivirus software). You also need to more carefully monitor activity on the corporate network, look for unnecessary activity on the network (track traffic) and not run third-party software on machines without antivirus software.
Tue Feb 04 2025 13:17:36 GMT+0000 (Coordinated Universal Time)
End of chat