Victim #138

huato.com.tw

Speaking with LOCKBIT

Victim #138

You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat. If your archive weighs more than 10 megabytes, please use our file sharing service. http://lockbitfss2w7co3ij6am6wox4xcurtgwukunx3yubcoe5cbxiqakxqd.onion http://lockbitfsvf75glg226he5inkfgtuoakt4vgfhd7nfgghx5kwz5zo3ad.onion http://lockbitfskq2fxclyfrop5yizyxpzu65w7pphsgthawcyb4gd27x62id.onion For security reasons we do not click on other links you send in chat. Please wait for a reply, sometimes it takes several hours due to possible time zone differences.

Mon Feb 03 2025 16:31:31 GMT+0000 (Coordinated Universal Time)

Victim #138

how much

Mon Feb 03 2025 16:32:33 GMT+0000 (Coordinated Universal Time)

LOCKBIT

30k$ in bitcoin

Mon Feb 03 2025 16:48:41 GMT+0000 (Coordinated Universal Time)

Victim #138

HI

Tue Feb 04 2025 12:44:34 GMT+0000 (Coordinated Universal Time)

LOCKBIT

hi

Tue Feb 04 2025 12:46:01 GMT+0000 (Coordinated Universal Time)

Victim #138

30 K USD in bit?

Tue Feb 04 2025 12:46:35 GMT+0000 (Coordinated Universal Time)

LOCKBIT

yes

Tue Feb 04 2025 12:51:19 GMT+0000 (Coordinated Universal Time)

Victim #138

after i pay how can u help me?

Tue Feb 04 2025 12:52:37 GMT+0000 (Coordinated Universal Time)

LOCKBIT

after payment you will be able to decrypt all company files, it will be easy, but our support is always available for you

Tue Feb 04 2025 12:57:35 GMT+0000 (Coordinated Universal Time)

Victim #138

30K is too high for us.

Tue Feb 04 2025 12:59:49 GMT+0000 (Coordinated Universal Time)

LOCKBIT

20% discount may be for you if you are ready to close the discuss quickly

Tue Feb 04 2025 13:03:24 GMT+0000 (Coordinated Universal Time)

Victim #138

Can you give me some confidence first? Try unlocking part of the system for me so that I can convince my supervisor.

Tue Feb 04 2025 13:09:06 GMT+0000 (Coordinated Universal Time)

LOCKBIT

you can make a test decryptor of some small files, just send the archive here in the chat

Tue Feb 04 2025 13:13:20 GMT+0000 (Coordinated Universal Time)

Victim #138

How should I send the file to you?

Tue Feb 04 2025 14:23:39 GMT+0000 (Coordinated Universal Time)

LOCKBIT

http://lockbitfskq2fxclyfrop5yizyxpzu65w7pphsgthawcyb4gd27x62id.onion/

Tue Feb 04 2025 14:43:08 GMT+0000 (Coordinated Universal Time)

LOCKBIT

upload here

Tue Feb 04 2025 14:43:29 GMT+0000 (Coordinated Universal Time)

Victim #138

http://lockbitfskq2fxclyfrop5yizyxpzu65w7pphsgthawcyb4gd27x62id.onion/r/LZVeRGfa17#XMaP5fIrsmRRrIGAHd+aF8hBCL6/8BJakWKT7sizMrc=

Tue Feb 04 2025 14:44:47 GMT+0000 (Coordinated Universal Time)

LOCKBIT

wait pls

Tue Feb 04 2025 14:47:29 GMT+0000 (Coordinated Universal Time)

LOCKBIT

you need to wait for tech support, sometimes it takes time

Tue Feb 04 2025 15:04:53 GMT+0000 (Coordinated Universal Time)

Victim #138

ok

Tue Feb 04 2025 15:09:15 GMT+0000 (Coordinated Universal Time)

Victim #138

How long will it take? I might need to rest later.

Tue Feb 04 2025 15:46:03 GMT+0000 (Coordinated Universal Time)

LOCKBIT

i submitted a request, not online yet, till tomorrow for sure.

Tue Feb 04 2025 15:54:35 GMT+0000 (Coordinated Universal Time)

Victim #138

ok

Tue Feb 04 2025 15:56:56 GMT+0000 (Coordinated Universal Time)

Victim #138

If there is any news, please let me know

Wed Feb 05 2025 01:01:25 GMT+0000 (Coordinated Universal Time)

LOCKBIT

I'm sorry, but you have to wait. It's just that our tech support is not always online every day, they should come today to do it

Wed Feb 05 2025 06:51:25 GMT+0000 (Coordinated Universal Time)

LOCKBIT

you can read for us in Google and not worry, we are responsible for our reputation

Wed Feb 05 2025 06:52:07 GMT+0000 (Coordinated Universal Time)

Victim #138

Can we know which country your organization is from? We are asking this because we want to clarify whether we are being attacked by a domestic competitor.

Wed Feb 05 2025 07:32:28 GMT+0000 (Coordinated Universal Time)

LOCKBIT

No, it's definitely not your competitors, we had nothing to do with it.

Wed Feb 05 2025 07:36:20 GMT+0000 (Coordinated Universal Time)

LOCKBIT

test decryptor will be done today, if you are ready to pay you can do the exchange for cryptocurrency, it will take time.

Wed Feb 05 2025 07:37:27 GMT+0000 (Coordinated Universal Time)

LOCKBIT

after payment, we will inform you of your mistake so that this does not happen again

Wed Feb 05 2025 07:38:49 GMT+0000 (Coordinated Universal Time)

Victim #138

Sorry for having this thought. Our boss has helped many charity organizations, which might have affected certain people's interests. That's why we asked you this question.

Wed Feb 05 2025 07:42:21 GMT+0000 (Coordinated Universal Time)

Victim #138

Thks for u help

Wed Feb 05 2025 07:44:12 GMT+0000 (Coordinated Universal Time)

Victim #138

Additionally, we would like to know if USDT can be used for payment besides Bitcoin.

Wed Feb 05 2025 07:50:12 GMT+0000 (Coordinated Universal Time)

LOCKBIT

No, we only work with bitcoin, this is done for our security

Wed Feb 05 2025 07:53:48 GMT+0000 (Coordinated Universal Time)

LOCKBIT

no, we have nothing to do with this, your company appeared with us randomly because of your simple password

Wed Feb 05 2025 07:54:34 GMT+0000 (Coordinated Universal Time)

LOCKBIT

I will be gone for a few hours now, I hope that when I return you will have the decryptor test

Wed Feb 05 2025 07:55:29 GMT+0000 (Coordinated Universal Time)

Victim #138

Also, please help us restore the files we sent yesterday.thks

Wed Feb 05 2025 07:58:00 GMT+0000 (Coordinated Universal Time)

LOCKBIT

Yes, of course. We'll do the test decrypt, then you can decide whether to pay or not.

Wed Feb 05 2025 07:59:58 GMT+0000 (Coordinated Universal Time)

Victim #138

I appreciate it. You surely understand that I am just an employee, so please don't make things difficult for me. Thks

Wed Feb 05 2025 08:01:49 GMT+0000 (Coordinated Universal Time)

LOCKBIT

don't worry, usually the decryptor test is done quickly, but it doesn't depend on me. After payment the full decryptor will be available immediately, you just need to run it, but if it is not clear I will help you

Wed Feb 05 2025 08:08:14 GMT+0000 (Coordinated Universal Time)

Victim #138

Thank you. After the payment, will the decryption be done through a program, or what method will be used? Could you let me know in advance?

Wed Feb 05 2025 08:10:03 GMT+0000 (Coordinated Universal Time)

Victim #138

I saw local news reporting that many companies have been successfully breached. Was it all done by you?

Wed Feb 05 2025 11:02:07 GMT+0000 (Coordinated Universal Time)

LOCKBIT

Give me log files for test decrypt

Wed Feb 05 2025 16:06:21 GMT+0000 (Coordinated Universal Time)

LOCKBIT

you gived Huato-CPS_1-flat.vmdk_meta.8F33a442hKl3GlPZGFJ

Wed Feb 05 2025 16:06:26 GMT+0000 (Coordinated Universal Time)

LOCKBIT

it's meta files of our encryptor

Wed Feb 05 2025 16:06:37 GMT+0000 (Coordinated Universal Time)

LOCKBIT

after payment you will have available to the decryptor for win and esxi, with instructed. if there are any questions by decrypt, the support service is open Was it all done by you? no, we only have a few companies in the works.

Thu Feb 06 2025 01:26:18 GMT+0000 (Coordinated Universal Time)

LOCKBIT

make a new archive for decryption test, log file vm and possibly for win system

Thu Feb 06 2025 01:29:20 GMT+0000 (Coordinated Universal Time)

Victim #138

Here?

Thu Feb 06 2025 03:25:20 GMT+0000 (Coordinated Universal Time)

LOCKBIT

yes

Thu Feb 06 2025 06:39:12 GMT+0000 (Coordinated Universal Time)

Victim #138

here?

Fri Feb 07 2025 08:34:29 GMT+0000 (Coordinated Universal Time)

Victim #138

Is your Bitcoin account on an exchange?

Fri Feb 07 2025 08:36:08 GMT+0000 (Coordinated Universal Time)

LOCKBIT

no

Fri Feb 07 2025 08:46:09 GMT+0000 (Coordinated Universal Time)

Victim #138

How should I send you Bitcoin?

Fri Feb 07 2025 09:15:42 GMT+0000 (Coordinated Universal Time)

LOCKBIT

1BnSNSLk1zA3Jmcv6CMPqVmbMGwJrHThrp

Fri Feb 07 2025 09:49:08 GMT+0000 (Coordinated Universal Time)

LOCKBIT

btc wallet

Fri Feb 07 2025 09:49:18 GMT+0000 (Coordinated Universal Time)

Victim #138

We don't have this technology, please teach us.

Fri Feb 07 2025 10:39:58 GMT+0000 (Coordinated Universal Time)

LOCKBIT

you need to buy bitcoin through exchangers in your country e.g. binance,coinbase,bitfinex

Fri Feb 07 2025 10:44:58 GMT+0000 (Coordinated Universal Time)

Victim #138

Then how should I send it to you?

Fri Feb 07 2025 10:47:04 GMT+0000 (Coordinated Universal Time)

LOCKBIT

First you register and up your bitcoin wallet, then transfer to ours

Fri Feb 07 2025 10:48:03 GMT+0000 (Coordinated Universal Time)

LOCKBIT

or you can search for a private exchanger and they transfer directly to our wallet

Fri Feb 07 2025 10:50:41 GMT+0000 (Coordinated Universal Time)

Victim #138

Private exchangers are harder to find in our country.

Fri Feb 07 2025 10:53:29 GMT+0000 (Coordinated Universal Time)

LOCKBIT

https://cex.io/buy-bitcoin-in-china

Fri Feb 07 2025 10:55:12 GMT+0000 (Coordinated Universal Time)

Victim #138

Bro, we are in Taiwan, not China. We hate China.

Fri Feb 07 2025 10:58:24 GMT+0000 (Coordinated Universal Time)

Victim #138

If I provide the IP of a mainland Chinese company, can you attack it?

Fri Feb 07 2025 10:59:42 GMT+0000 (Coordinated Universal Time)

LOCKBIT

we do more china, we have enough companies)

Fri Feb 07 2025 11:03:31 GMT+0000 (Coordinated Universal Time)

LOCKBIT

https://bit2me.com/country-taiwan

Fri Feb 07 2025 11:05:13 GMT+0000 (Coordinated Universal Time)

LOCKBIT

what china company ?

Fri Feb 07 2025 11:05:47 GMT+0000 (Coordinated Universal Time)

Victim #138

We will pay, but you need to give me some time to convince my boss.

Fri Feb 07 2025 11:07:20 GMT+0000 (Coordinated Universal Time)

Victim #138

But you must say China is shit!!!!!!!

Fri Feb 07 2025 11:08:33 GMT+0000 (Coordinated Universal Time)

Victim #138

It is a publicly listed Chinese company. What information do I need to provide you?

Fri Feb 07 2025 11:09:50 GMT+0000 (Coordinated Universal Time)

LOCKBIT

we love working with China, they pay well)

Fri Feb 07 2025 11:11:59 GMT+0000 (Coordinated Universal Time)

LOCKBIT

need site

Fri Feb 07 2025 11:12:16 GMT+0000 (Coordinated Universal Time)

LOCKBIT

I'll just check out the website.

Fri Feb 07 2025 11:14:45 GMT+0000 (Coordinated Universal Time)

Victim #138

https://www.yusheng.com.tw This is their Taiwan branch, and all the money is here. I will prioritize providing it to you.

Fri Feb 07 2025 11:15:16 GMT+0000 (Coordinated Universal Time)

Victim #138

They are very wealthy. When you succeed, please ask for more.

Fri Feb 07 2025 11:18:23 GMT+0000 (Coordinated Universal Time)

LOCKBIT

ok we will check them

Fri Feb 07 2025 11:18:54 GMT+0000 (Coordinated Universal Time)

LOCKBIT

you name leo.lin?

Fri Feb 07 2025 11:20:04 GMT+0000 (Coordinated Universal Time)

Victim #138

That was our MIS. Because of your actions, he resigned voluntarily and left the mess to me. My name is Mike.

Fri Feb 07 2025 11:23:01 GMT+0000 (Coordinated Universal Time)

Victim #138

I hate that idiot Leo.

Fri Feb 07 2025 11:24:42 GMT+0000 (Coordinated Universal Time)

LOCKBIT

mike chang

Fri Feb 07 2025 11:24:53 GMT+0000 (Coordinated Universal Time)

Victim #138

Nice to meet you.

Fri Feb 07 2025 11:25:47 GMT+0000 (Coordinated Universal Time)

LOCKBIT

yes you had security issues

Fri Feb 07 2025 11:25:52 GMT+0000 (Coordinated Universal Time)

Victim #138

I know, so I have also told the company to make the payment. However, most people are against it, so I have been pushing for it. I understand that the problem comes from our side, so please give me more time.

Fri Feb 07 2025 11:27:42 GMT+0000 (Coordinated Universal Time)

LOCKBIT

tell the boss I can go back and make it worse, your pcs they just won't turn on anymore.

Fri Feb 07 2025 11:28:46 GMT+0000 (Coordinated Universal Time)

LOCKBIT

I'm in no hurry. I have a lot of work to do.

Fri Feb 07 2025 11:30:44 GMT+0000 (Coordinated Universal Time)

Victim #138

I know because I can see that you deliberately left the servers operational but locked the information. I also told them that your reputation internationally is very good. However, since this is the first time the company has encountered such a situation, it is understandable that they are afraid of being attacked again after unlocking it.

Fri Feb 07 2025 11:31:25 GMT+0000 (Coordinated Universal Time)

Victim #138

Don't misunderstand, I was suddenly assigned to replace someone, and my position is not high enough. So they haven't quickly accepted my opinion. Give me a little more time, and I will try to convince them.

Fri Feb 07 2025 11:33:19 GMT+0000 (Coordinated Universal Time)

LOCKBIT

no after payment, there is no point in doing it again. We are not limited to companies, but there are those who have paid others in the past and are paying us again, due to the vulnerability not being fixed

Fri Feb 07 2025 11:33:32 GMT+0000 (Coordinated Universal Time)

LOCKBIT

this amount is small for us, I have no worries.

Fri Feb 07 2025 11:35:55 GMT+0000 (Coordinated Universal Time)

Victim #138

I know it's small for you, but it's not small for us. I understand that this is our problem, so there's no one else to blame. In fact, after talking to you for a while, I even feel grateful to you. After all, your actions have made the company realize the importance of cybersecurity. If things go smoothly, I might even get a promotion. Many thanks!

Fri Feb 07 2025 11:42:30 GMT+0000 (Coordinated Universal Time)

LOCKBIT

after payment, I will tell you what you can easily fix so that this does not happen again

Fri Feb 07 2025 11:45:43 GMT+0000 (Coordinated Universal Time)

Victim #138

Will this chat remain after the payment is made?

Fri Feb 07 2025 11:46:01 GMT+0000 (Coordinated Universal Time)

LOCKBIT

will be deleted over time, but you will still have links to create a new chat

Fri Feb 07 2025 11:47:01 GMT+0000 (Coordinated Universal Time)

LOCKBIT

or I can delete the chat right away

Fri Feb 07 2025 11:47:30 GMT+0000 (Coordinated Universal Time)

Victim #138

Got it. I was just thinking that if there are any issues in the future, I could consult you.

Fri Feb 07 2025 11:48:14 GMT+0000 (Coordinated Universal Time)

LOCKBIT

yes, you can create a new chat using the link in the note

Fri Feb 07 2025 11:50:21 GMT+0000 (Coordinated Universal Time)

Victim #138

Great! I think you're a good person, and I don't want to lose contact with you.

Fri Feb 07 2025 11:51:24 GMT+0000 (Coordinated Universal Time)

Victim #138

I learned to use the dark web because of this incident. Do you have any recommended dark web sites that I can browse? A safe place.

Fri Feb 07 2025 11:52:29 GMT+0000 (Coordinated Universal Time)

LOCKBIT

https://hackforums.net/

Fri Feb 07 2025 13:54:09 GMT+0000 (Coordinated Universal Time)

Victim #138

I can't access this forum, the system has blocked me.

Fri Feb 07 2025 14:27:25 GMT+0000 (Coordinated Universal Time)

LOCKBIT

vpn you know

Fri Feb 07 2025 14:48:20 GMT+0000 (Coordinated Universal Time)

Victim #138

Bro, I want to ask for your advice. If I want to make some extra money on the side but do it safely like you guys, do you have any recommended directions?

Sat Feb 08 2025 09:40:45 GMT+0000 (Coordinated Universal Time)

LOCKBIT

we now have open registration in the panel lockbit, but it costs 777$.

Sat Feb 08 2025 13:36:17 GMT+0000 (Coordinated Universal Time)

Victim #138

After joining, what can I help with? I don’t have any particular skills. If possible, can I join?

Sat Feb 08 2025 14:33:20 GMT+0000 (Coordinated Universal Time)

LOCKBIT

you don't need it

Sun Feb 09 2025 04:32:42 GMT+0000 (Coordinated Universal Time)

Victim #138

yo bro

Mon Feb 10 2025 04:24:44 GMT+0000 (Coordinated Universal Time)

Victim #138

Get up, please tell me?

Mon Feb 10 2025 04:43:20 GMT+0000 (Coordinated Universal Time)

LOCKBIT

what?

Mon Feb 10 2025 07:16:20 GMT+0000 (Coordinated Universal Time)

Victim #138

I secured $20K worth of Bitcoin to exchange with you for the decryption method. Is that acceptable?

Mon Feb 10 2025 08:24:29 GMT+0000 (Coordinated Universal Time)

Victim #138

I will have someone transfer it from a private wallet, but I need to wait until they wake up later.

Mon Feb 10 2025 08:25:34 GMT+0000 (Coordinated Universal Time)

Victim #138

yo Bro

Mon Feb 10 2025 11:13:40 GMT+0000 (Coordinated Universal Time)

LOCKBIT

you don't seem like a bad person, let's agree 20k

Mon Feb 10 2025 12:40:55 GMT+0000 (Coordinated Universal Time)

LOCKBIT

btc wallet 1BnSNSLk1zA3Jmcv6CMPqVmbMGwJrHThrp

Mon Feb 10 2025 12:42:52 GMT+0000 (Coordinated Universal Time)

Victim #138

I know, my boss asked me to do it.

Mon Feb 10 2025 13:04:28 GMT+0000 (Coordinated Universal Time)

Victim #138

I'll talk to him about the price.Give me some time.

Mon Feb 10 2025 13:05:33 GMT+0000 (Coordinated Universal Time)

LOCKBIT

ok

Mon Feb 10 2025 13:08:09 GMT+0000 (Coordinated Universal Time)

Victim #138

I'll ask first, if the decryption is successful, will you give me a program? How will you send it to me?

Mon Feb 10 2025 13:14:49 GMT+0000 (Coordinated Universal Time)

LOCKBIT

I didn't understand what program ?)

Mon Feb 10 2025 13:29:42 GMT+0000 (Coordinated Universal Time)

LOCKBIT

after payment, a decryptor will be sent here in the chat

Mon Feb 10 2025 13:30:37 GMT+0000 (Coordinated Universal Time)

Victim #138

Is the decryption tool with you, or do we need to wait for the technical team? Also, do you know which tool corresponds to decrypting our files? I've heard that each company has a different decryption key.

Mon Feb 10 2025 13:34:12 GMT+0000 (Coordinated Universal Time)

LOCKBIT

don't worry, send a decryptor from tech support, it's unique for each company, there is a version for esxi and win

Mon Feb 10 2025 13:37:08 GMT+0000 (Coordinated Universal Time)

Victim #138

Okay, because I'm worried that the technical staff might not be available. Is he working today?

Mon Feb 10 2025 13:47:06 GMT+0000 (Coordinated Universal Time)

LOCKBIT

so you understand, only one person has access to the decryptor, and that's the boss)

Mon Feb 10 2025 13:53:26 GMT+0000 (Coordinated Universal Time)

LOCKBIT

yesterday and today was here. But sometimes you have to wait for it, usually no more than 24 hours

Mon Feb 10 2025 13:54:03 GMT+0000 (Coordinated Universal Time)

Victim #138

I know~ So I just want to confirm when he is available, that way the transaction will be faster, and my stress will be lower. So, I appreciate your help.

Mon Feb 10 2025 13:56:05 GMT+0000 (Coordinated Universal Time)

LOCKBIT

tell me how long it will take you to pay and I can check if he will be there

Mon Feb 10 2025 13:57:18 GMT+0000 (Coordinated Universal Time)

Victim #138

I will let you know once I get the Bitcoin because many exchanges now have risk controls that prevent me from buying too much. I am trying to buy from individuals instead.

Mon Feb 10 2025 13:59:11 GMT+0000 (Coordinated Universal Time)

LOCKBIT

ok, we are here now for 5-6 hours

Mon Feb 10 2025 14:13:47 GMT+0000 (Coordinated Universal Time)

Victim #138

I still haven't received their message, so I probably won't be able to pick it up today. I'll get it in a couple of days and contact you then, okay?

Mon Feb 10 2025 14:57:33 GMT+0000 (Coordinated Universal Time)

LOCKBIT

no problem

Mon Feb 10 2025 15:03:18 GMT+0000 (Coordinated Universal Time)

Victim #138

Here?

Tue Feb 11 2025 02:23:31 GMT+0000 (Coordinated Universal Time)

Victim #138

24K USD is approximately 0.2455 BTC. Is this okay?

Tue Feb 11 2025 02:24:33 GMT+0000 (Coordinated Universal Time)

LOCKBIT

hi bro, yes right

Tue Feb 11 2025 06:51:47 GMT+0000 (Coordinated Universal Time)

Victim #138

OK,Is the boss in today?

Tue Feb 11 2025 07:10:58 GMT+0000 (Coordinated Universal Time)

LOCKBIT

I haven't seen it yet today, but it should be later

Tue Feb 11 2025 07:16:08 GMT+0000 (Coordinated Universal Time)

Victim #138

If he shows up, let me know.

Tue Feb 11 2025 07:21:45 GMT+0000 (Coordinated Universal Time)

LOCKBIT

ok

Tue Feb 11 2025 07:27:57 GMT+0000 (Coordinated Universal Time)

LOCKBIT

here

Tue Feb 11 2025 12:35:06 GMT+0000 (Coordinated Universal Time)

Victim #138

Sorry bro, I’ve been sick for a few days.

Sat Feb 15 2025 13:55:59 GMT+0000 (Coordinated Universal Time)

LOCKBIT

are you ready to pay ?

Sat Feb 15 2025 14:14:41 GMT+0000 (Coordinated Universal Time)

Victim #138

Can you help me ask if your boss will be there tomorrow? Buying Bitcoin is really troublesome; the exchange keeps blocking me. I should be able to collect it tomorrow."

Sat Feb 15 2025 14:16:32 GMT+0000 (Coordinated Universal Time)

LOCKBIT

boss is here every day

Sat Feb 15 2025 14:17:27 GMT+0000 (Coordinated Universal Time)

Victim #138

Okay, my friend has transferred it to me using a wallet, and I'll transfer it to you. Can I confirm the address with you again?

Sat Feb 15 2025 14:18:32 GMT+0000 (Coordinated Universal Time)

LOCKBIT

1BWbqn6xdFat3zLiaHPuFLqnZL7Q4obSKC

Sat Feb 15 2025 14:20:57 GMT+0000 (Coordinated Universal Time)

Victim #138

I expect to receive it tomorrow afternoon if there are no issues.

Sat Feb 15 2025 14:22:04 GMT+0000 (Coordinated Universal Time)

Victim #138

But brot, please, I beg you to unlock it for me. This is a large amount, and if I can't unlock it, you will make me lose my job. I really trust you. Thank you.

Sat Feb 15 2025 14:23:39 GMT+0000 (Coordinated Universal Time)

LOCKBIT

after payment, you will not have problems with decryption

Sat Feb 15 2025 14:26:14 GMT+0000 (Coordinated Universal Time)

Victim #138

Bro, you promised me, right? Because I heard that with 4.0, many people paid but didn't get the decryption.

Sat Feb 15 2025 14:28:58 GMT+0000 (Coordinated Universal Time)

LOCKBIT

where is this written

Sat Feb 15 2025 14:30:00 GMT+0000 (Coordinated Universal Time)

Victim #138

There are many articles on the Taiwanese internet saying that decryption will not be received.

Sat Feb 15 2025 14:31:20 GMT+0000 (Coordinated Universal Time)

LOCKBIT

lies

Sat Feb 15 2025 14:32:02 GMT+0000 (Coordinated Universal Time)

LOCKBIT

I can refuse you

Sat Feb 15 2025 14:32:34 GMT+0000 (Coordinated Universal Time)

LOCKBIT

all this is not serious anymore

Sat Feb 15 2025 14:32:54 GMT+0000 (Coordinated Universal Time)

Victim #138

From our conversation, I feel that you are a good person. You wouldn't deceive me, right?

Sat Feb 15 2025 14:33:30 GMT+0000 (Coordinated Universal Time)

LOCKBIT

If you pay

Sat Feb 15 2025 14:34:49 GMT+0000 (Coordinated Universal Time)

LOCKBIT

waiting for your payment

Sat Feb 15 2025 14:35:22 GMT+0000 (Coordinated Universal Time)

Victim #138

Hey bro, do you know where to buy some girl on the dark web?

Sat Feb 15 2025 14:38:15 GMT+0000 (Coordinated Universal Time)

Victim #138

By the way, after payment, will you also tell us where the vulnerability is?

Sat Feb 15 2025 14:53:04 GMT+0000 (Coordinated Universal Time)

LOCKBIT

weak passwords

Sat Feb 15 2025 14:59:23 GMT+0000 (Coordinated Universal Time)

LOCKBIT

why are you wasting your time

Sat Feb 15 2025 15:01:57 GMT+0000 (Coordinated Universal Time)

LOCKBIT

if you're not going to pay

Sat Feb 15 2025 15:02:20 GMT+0000 (Coordinated Universal Time)

Victim #138

We really intend to pay, but Bitcoin's price has been very strong recently, and there are very few holders in Taiwan. Also, I was sick and unable to work for the past few days.

Sat Feb 15 2025 15:04:05 GMT+0000 (Coordinated Universal Time)

Victim #138

he A flu virus has been spreading in Asia recently, and I had a fever for two days.

Sat Feb 15 2025 15:05:11 GMT+0000 (Coordinated Universal Time)

Victim #138

I can suggest that if you can accept payments in USDT, people in Taiwan will be able to pay faster. USDT is more commonly used here.

Sat Feb 15 2025 15:06:23 GMT+0000 (Coordinated Universal Time)

LOCKBIT

only btc

Sat Feb 15 2025 15:24:25 GMT+0000 (Coordinated Universal Time)

LOCKBIT

I have enough clients, some pay, some don't, I don't care

Sat Feb 15 2025 15:26:35 GMT+0000 (Coordinated Universal Time)

Victim #138

Of course, I'm just letting you know that I finally convinced our boss because we trust you as a person. But I just need a little more time because obtaining Bitcoin is difficult. Besides, I also want to learn more from you.

Sat Feb 15 2025 15:29:24 GMT+0000 (Coordinated Universal Time)

LOCKBIT

I'm not in a hurry, when you're ready to pay, write

Sat Feb 15 2025 15:31:28 GMT+0000 (Coordinated Universal Time)

LOCKBIT

everyone gets a decryptor after payment, we have a reputation

Sat Feb 15 2025 15:32:33 GMT+0000 (Coordinated Universal Time)

Victim #138

THX

Sat Feb 15 2025 15:33:07 GMT+0000 (Coordinated Universal Time)

LOCKBIT

your tw colleagues found bitcoin and paid for it in one day, it was this week

Sat Feb 15 2025 15:33:39 GMT+0000 (Coordinated Universal Time)

LOCKBIT

I also expect payments not only from you

Sat Feb 15 2025 15:34:19 GMT+0000 (Coordinated Universal Time)

LOCKBIT

we don't have a kindergarten here, we've been working here for 6 years

Sat Feb 15 2025 15:35:22 GMT+0000 (Coordinated Universal Time)

Victim #138

I will make the payment within these two days, I promise.

Sat Feb 15 2025 15:35:25 GMT+0000 (Coordinated Universal Time)

LOCKBIT

okay, we're here every day.

Sat Feb 15 2025 15:36:09 GMT+0000 (Coordinated Universal Time)

Victim #138

Before making the payment, I will confirm with you whether your boss is available to ensure the transaction goes smoothly and quickly.

Sat Feb 15 2025 15:37:17 GMT+0000 (Coordinated Universal Time)

LOCKBIT

ok

Sat Feb 15 2025 15:46:20 GMT+0000 (Coordinated Universal Time)

Victim #138

What time are you usually online? That way, I can better coordinate with the Bitcoin trader.

Sat Feb 15 2025 15:47:42 GMT+0000 (Coordinated Universal Time)

LOCKBIT

in the afternoon your time

Sat Feb 15 2025 16:09:53 GMT+0000 (Coordinated Universal Time)

Victim #138

If I make the payment within these two days, and also send the $777 membership fee to the same account, can I join you?

Sat Feb 15 2025 16:12:32 GMT+0000 (Coordinated Universal Time)

LOCKBIT

only by himself, not with me

Sat Feb 15 2025 16:20:30 GMT+0000 (Coordinated Universal Time)

Victim #138

Morning, bro. Are you up?

Sun Feb 16 2025 04:46:39 GMT+0000 (Coordinated Universal Time)

Victim #138

Hi

Sun Feb 16 2025 09:00:22 GMT+0000 (Coordinated Universal Time)

LOCKBIT

Hi

Sun Feb 16 2025 09:00:32 GMT+0000 (Coordinated Universal Time)

LOCKBIT

what you want?

Sun Feb 16 2025 09:00:36 GMT+0000 (Coordinated Universal Time)

Victim #138

Boss here?

Sun Feb 16 2025 09:01:40 GMT+0000 (Coordinated Universal Time)

LOCKBIT

yes

Sun Feb 16 2025 09:06:27 GMT+0000 (Coordinated Universal Time)

LOCKBIT

I am boss

Sun Feb 16 2025 09:06:27 GMT+0000 (Coordinated Universal Time)

Victim #138

Do you have the program to unlock our data?

Sun Feb 16 2025 09:10:25 GMT+0000 (Coordinated Universal Time)

LOCKBIT

yes

Sun Feb 16 2025 09:10:42 GMT+0000 (Coordinated Universal Time)

LOCKBIT

30k$ in bitcoin

Sun Feb 16 2025 09:11:25 GMT+0000 (Coordinated Universal Time)

Victim #138

We will proceed with the payment. How will you deliver the program to me?

Sun Feb 16 2025 09:11:32 GMT+0000 (Coordinated Universal Time)

LOCKBIT

in this chat

Sun Feb 16 2025 09:11:42 GMT+0000 (Coordinated Universal Time)

LOCKBIT

I will give you exe file for decrypt

Sun Feb 16 2025 09:11:57 GMT+0000 (Coordinated Universal Time)

Victim #138

Last time, this account told me 24K. We are ready now.

Sun Feb 16 2025 09:12:45 GMT+0000 (Coordinated Universal Time)

LOCKBIT

ok 24k

Sun Feb 16 2025 09:12:55 GMT+0000 (Coordinated Universal Time)

LOCKBIT

give money and I will give you decryptor

Sun Feb 16 2025 09:13:06 GMT+0000 (Coordinated Universal Time)

Victim #138

Please give me the wallet address again.Approximately 0.2458 BTC.

Sun Feb 16 2025 09:14:45 GMT+0000 (Coordinated Universal Time)

LOCKBIT

you will pay now?

Sun Feb 16 2025 09:14:57 GMT+0000 (Coordinated Universal Time)

Victim #138

Give me five minutes to get approval from my boss. Please provide the address in the meantime.

Sun Feb 16 2025 09:15:58 GMT+0000 (Coordinated Universal Time)

LOCKBIT

bc1qvltxkhn7njvd9gqegsurkv6y97j4rum5kyr2n2

Sun Feb 16 2025 09:16:18 GMT+0000 (Coordinated Universal Time)

Victim #138

1BWbqn6xdFat3zLiaHPuFLqnZL7Q4obSKC No this one?

Sun Feb 16 2025 09:17:02 GMT+0000 (Coordinated Universal Time)

LOCKBIT

it's affilate wallet, I am boss

Sun Feb 16 2025 09:17:29 GMT+0000 (Coordinated Universal Time)

LOCKBIT

you can sent 80% to affilate 20% to me

Sun Feb 16 2025 09:17:38 GMT+0000 (Coordinated Universal Time)

Victim #138

You are the boss, so I can give it directly to you in exchange for the password, right?

Sun Feb 16 2025 09:19:36 GMT+0000 (Coordinated Universal Time)

LOCKBIT

yes

Sun Feb 16 2025 09:20:02 GMT+0000 (Coordinated Universal Time)

Victim #138

I will proceed with the transfer. Since there are two accounts, I want to confirm that I will receive the key after payment, because it's clear that you are not the same person as the one in the chat before.

Sun Feb 16 2025 09:22:18 GMT+0000 (Coordinated Universal Time)

Victim #138

After the payment, you will immediately teach me how to unlock it, right?

Sun Feb 16 2025 09:24:15 GMT+0000 (Coordinated Universal Time)

Victim #138

boss say OK R U here

Sun Feb 16 2025 09:35:39 GMT+0000 (Coordinated Universal Time)

LOCKBIT

hi

Sun Feb 16 2025 09:38:03 GMT+0000 (Coordinated Universal Time)

LOCKBIT

yes.here

Sun Feb 16 2025 09:38:09 GMT+0000 (Coordinated Universal Time)

Victim #138

bc1qvltxkhn7njvd9gqegsurkv6y97j4rum5kyr2n2 This Right?

Sun Feb 16 2025 09:39:52 GMT+0000 (Coordinated Universal Time)

LOCKBIT

no

Sun Feb 16 2025 09:40:23 GMT+0000 (Coordinated Universal Time)

LOCKBIT

where did you get this wallet, it's not ours

Sun Feb 16 2025 09:41:03 GMT+0000 (Coordinated Universal Time)

LOCKBIT

this 1BWbqn6xdFat3zLiaHPuFLqnZL7Q4obSKC

Sun Feb 16 2025 09:41:21 GMT+0000 (Coordinated Universal Time)

Victim #138

Which address is it?

Sun Feb 16 2025 09:41:29 GMT+0000 (Coordinated Universal Time)

LOCKBIT

transfer 10$ first

Sun Feb 16 2025 09:41:34 GMT+0000 (Coordinated Universal Time)

LOCKBIT

btc transfer here here 1BWbqn6xdFat3zLiaHPuFLqnZL7Q4obSKC

Sun Feb 16 2025 09:42:31 GMT+0000 (Coordinated Universal Time)

LOCKBIT

and only me talked to you

Sun Feb 16 2025 09:43:25 GMT+0000 (Coordinated Universal Time)

Victim #138

1BWbqn6xdFat3zLiaHPuFLqnZL7Q4obSKC Final confirmation.

Sun Feb 16 2025 09:47:09 GMT+0000 (Coordinated Universal Time)

Victim #138

Right?

Sun Feb 16 2025 09:48:15 GMT+0000 (Coordinated Universal Time)

LOCKBIT

1BWbqn6xdFat3zLiaHPuFLqnZL7Q4obSKC yes right

Sun Feb 16 2025 09:51:55 GMT+0000 (Coordinated Universal Time)

Victim #138

Sent 0.07 BTC, please check."

Sun Feb 16 2025 09:53:02 GMT+0000 (Coordinated Universal Time)

Victim #138

Did you receive it?

Sun Feb 16 2025 09:54:40 GMT+0000 (Coordinated Universal Time)

LOCKBIT

I confirm received 0.07

Sun Feb 16 2025 09:55:35 GMT+0000 (Coordinated Universal Time)

Victim #138

Should I send the next payment to the same address?

Sun Feb 16 2025 09:56:14 GMT+0000 (Coordinated Universal Time)

LOCKBIT

yes

Sun Feb 16 2025 09:56:35 GMT+0000 (Coordinated Universal Time)

Victim #138

Please provide me with the program immediately after completion. My boss is right beside me. Thank you.

Sun Feb 16 2025 09:57:15 GMT+0000 (Coordinated Universal Time)

LOCKBIT

don't worry, everything will be fine with you

Sun Feb 16 2025 09:58:54 GMT+0000 (Coordinated Universal Time)

LOCKBIT

but you will have to wait for some time, there is no other way

Sun Feb 16 2025 09:59:22 GMT+0000 (Coordinated Universal Time)

Victim #138

Sent, please confirm

Sun Feb 16 2025 09:59:52 GMT+0000 (Coordinated Universal Time)

LOCKBIT

but the decryptor will be done today.

Sun Feb 16 2025 09:59:53 GMT+0000 (Coordinated Universal Time)

LOCKBIT

I also need to confirm the payment and give the % to the boss, only after he sees the decryptor will be ready

Sun Feb 16 2025 10:01:27 GMT+0000 (Coordinated Universal Time)

LOCKBIT

I confirm received all 0.24500000

Sun Feb 16 2025 10:01:54 GMT+0000 (Coordinated Universal Time)

Victim #138

It shows that the transfer is complete, please confirm.

Sun Feb 16 2025 10:01:58 GMT+0000 (Coordinated Universal Time)

LOCKBIT

you must believe me, you won't be deceived here

Sun Feb 16 2025 10:02:27 GMT+0000 (Coordinated Universal Time)

LOCKBIT

I confirm received all 0.24500000

Sun Feb 16 2025 10:02:45 GMT+0000 (Coordinated Universal Time)

LOCKBIT

allright

Sun Feb 16 2025 10:02:52 GMT+0000 (Coordinated Universal Time)

Victim #138

There was an issue with the transaction fee that I didn't calculate properly. I overlooked that, and it's slightly short.

Sun Feb 16 2025 10:03:37 GMT+0000 (Coordinated Universal Time)

Victim #138

Is the transaction complete? Can you give me the decryptor now? My boss is asking.

Sun Feb 16 2025 10:06:05 GMT+0000 (Coordinated Universal Time)

LOCKBIT

all amount is received, i sent % to the boss and requested a decryptor

Sun Feb 16 2025 10:09:33 GMT+0000 (Coordinated Universal Time)

LOCKBIT

please don't worry, just wait a little

Sun Feb 16 2025 10:10:10 GMT+0000 (Coordinated Universal Time)

Victim #138

Thanks, bro. I appreciate it. Please send it to me as soon as possible.

Sun Feb 16 2025 10:10:29 GMT+0000 (Coordinated Universal Time)

LOCKBIT

we'll wait for him together.

Sun Feb 16 2025 10:11:25 GMT+0000 (Coordinated Universal Time)

LOCKBIT

I can't do anything here, our boss is working on the update and is very busy now, we'll have to wait and see how he will be

Sun Feb 16 2025 10:12:19 GMT+0000 (Coordinated Universal Time)

LOCKBIT

and you had to pay immediately, because without % of the boss, we will not get an answer from him

Sun Feb 16 2025 10:13:06 GMT+0000 (Coordinated Universal Time)

LOCKBIT

this is how it works, but I say again, there is no deception here

Sun Feb 16 2025 10:13:51 GMT+0000 (Coordinated Universal Time)

Victim #138

Payment? I just paid 0.245 BTC. What else do I need to pay?

Sun Feb 16 2025 10:14:49 GMT+0000 (Coordinated Universal Time)

LOCKBIT

look at our blog and see how many companies are out there, and just think about whether or not we're scamming them.

Sun Feb 16 2025 10:14:56 GMT+0000 (Coordinated Universal Time)

LOCKBIT

you paid, allright

Sun Feb 16 2025 10:15:29 GMT+0000 (Coordinated Universal Time)

LOCKBIT

just wait decryptor here in the chat

Sun Feb 16 2025 10:16:03 GMT+0000 (Coordinated Universal Time)

Victim #138

Okay, thanks, bro.

Sun Feb 16 2025 10:16:38 GMT+0000 (Coordinated Universal Time)

LOCKBIT

do you need a decryptor for esxi or win ?

Sun Feb 16 2025 10:17:31 GMT+0000 (Coordinated Universal Time)

Victim #138

ESXi

Sun Feb 16 2025 10:18:41 GMT+0000 (Coordinated Universal Time)

LOCKBIT

win not needed ?

Sun Feb 16 2025 10:19:56 GMT+0000 (Coordinated Universal Time)

LOCKBIT

I'll send you the instructions for the esxi

Sun Feb 16 2025 10:20:32 GMT+0000 (Coordinated Universal Time)

Victim #138

Please provide it as well, as I am the one taking over and I'm not entirely sure about the full situation. Thank you.

Sun Feb 16 2025 10:20:52 GMT+0000 (Coordinated Universal Time)

LOCKBIT

I wrote above that we're waiting for a decryptor from the boss.

Sun Feb 16 2025 10:22:06 GMT+0000 (Coordinated Universal Time)

LOCKBIT

Procedure for decrypting ESXi: - log in to vCenter - enable ssh access to ESXi - upload decryptor to ESXi via WinSCP or FileZilla; navigate to /tmp folder - login to ssh with root privileges - set permissions to run the decryptor with the command - chmod 777 decrypt - launch decryptor ./decrypt - follow the first method of decrypting by viewing the log file: tail -f /tmp/decrypt.llg, wait for the message at the end of the log - Your system is decrypted - the second way is to check the presence on the disk file decrypt.pid command ls, which protects the decryptor from the restart - the third way - ps | grep decrypt, as soon as decrypt.pid will be removed from the disk, or decrypt will disappear from the running processes, decrypt is complete - check the decrypt.llg log file and see the message at the end that the system was successfully decrypted "Your system is decrypted" - turn on virtual machines in ESXi You cannot run multiple copies of a decryptor at the same time. After launching, the decryptor deletes the executable file and is demonetized, so that you cannot run the decryptor again and damage the files, this is normal. If you have more than one ESXi host then you should not run the decryptor on all hosts simultaneously, make the decryption alternately, in the case of simultaneous operation of two decryptors may corrupt files and not be able to decrypt If any files in another folder stay crypted, please use this command with path Example: ./decrypt -i /tmp/files1/

Sun Feb 16 2025 10:22:50 GMT+0000 (Coordinated Universal Time)

Victim #138

I'm also very interested in joining you. My job in the real world is not ideal.

Sun Feb 16 2025 10:22:50 GMT+0000 (Coordinated Universal Time)

Victim #138

Is this the correct decryption process? No other programs are needed?

Sun Feb 16 2025 10:24:17 GMT+0000 (Coordinated Universal Time)

LOCKBIT

You won't succeed, you need to learn this for a long time

Sun Feb 16 2025 10:26:02 GMT+0000 (Coordinated Universal Time)

LOCKBIT

Now we're just waiting for the decryptor itself.

Sun Feb 16 2025 10:26:39 GMT+0000 (Coordinated Universal Time)

Victim #138

So our vulnerability is simply that the password was too weak?

Sun Feb 16 2025 10:27:45 GMT+0000 (Coordinated Universal Time)

LOCKBIT

host admin needs to be removed from the domain

Sun Feb 16 2025 10:28:22 GMT+0000 (Coordinated Universal Time)

LOCKBIT

and close the ports at the admin

Sun Feb 16 2025 10:28:38 GMT+0000 (Coordinated Universal Time)

Victim #138

Got it!!THX!

Sun Feb 16 2025 10:30:30 GMT+0000 (Coordinated Universal Time)

LOCKBIT

192.168.2.53

Sun Feb 16 2025 10:31:35 GMT+0000 (Coordinated Universal Time)

LOCKBIT

backups do not show in the domain

Sun Feb 16 2025 10:32:37 GMT+0000 (Coordinated Universal Time)

LOCKBIT

and nas

Sun Feb 16 2025 10:33:00 GMT+0000 (Coordinated Universal Time)

LOCKBIT

domain is not a secure infostructure

Sun Feb 16 2025 10:33:34 GMT+0000 (Coordinated Universal Time)

Victim #138

Got it, we’ll take this as a lesson learned. Thanks for the assistance.

Sun Feb 16 2025 10:34:27 GMT+0000 (Coordinated Universal Time)

LOCKBIT

and of course passwords, but they won't help you if there are vulnerabilities in the domain

Sun Feb 16 2025 10:36:25 GMT+0000 (Coordinated Universal Time)

Victim #138

I'm glad you keep your word, you are a great person, and you've also taught us a lot.

Sun Feb 16 2025 10:37:43 GMT+0000 (Coordinated Universal Time)

LOCKBIT

now just don't worry, the boss will see it and send you a decryptor

Sun Feb 16 2025 10:40:41 GMT+0000 (Coordinated Universal Time)

Victim #138

Okay, will it take long?

Sun Feb 16 2025 10:41:39 GMT+0000 (Coordinated Universal Time)

LOCKBIT

this week we got decryptors for others quickly, I hope it will be the same now

Sun Feb 16 2025 10:42:47 GMT+0000 (Coordinated Universal Time)

LOCKBIT

you're gonna be fine.

Sun Feb 16 2025 10:43:30 GMT+0000 (Coordinated Universal Time)

LOCKBIT

and I will be here too

Sun Feb 16 2025 10:43:48 GMT+0000 (Coordinated Universal Time)

LOCKBIT

if you need help later with decryption

Sun Feb 16 2025 10:44:07 GMT+0000 (Coordinated Universal Time)

Victim #138

kay, thank you. I can't afford to lose this job. Thanks.

Sun Feb 16 2025 10:44:36 GMT+0000 (Coordinated Universal Time)

LOCKBIT

ok we'll wait

Sun Feb 16 2025 10:44:57 GMT+0000 (Coordinated Universal Time)

Victim #138

Thx

Sun Feb 16 2025 10:46:09 GMT+0000 (Coordinated Universal Time)

Victim #138

I'm going to have a meal and will be away for a while. If the program is ready, please send it over.

Sun Feb 16 2025 11:01:55 GMT+0000 (Coordinated Universal Time)

LOCKBIT

boss here

Sun Feb 16 2025 11:07:20 GMT+0000 (Coordinated Universal Time)

LOCKBIT

wait decryptor in 5 min

Sun Feb 16 2025 11:07:28 GMT+0000 (Coordinated Universal Time)

Victim #138

Great! Thank you!

Sun Feb 16 2025 11:08:11 GMT+0000 (Coordinated Universal Time)

LOCKBIT


Attachment: LBB_decryptor_E7BCACA89BD361E6.zip

Sun Feb 16 2025 11:17:04 GMT+0000 (Coordinated Universal Time)

LOCKBIT

Give me readme file from ESXI, I need esxi decryption ID

Sun Feb 16 2025 11:18:07 GMT+0000 (Coordinated Universal Time)

Victim #138

"Let me take a look.

Sun Feb 16 2025 11:19:02 GMT+0000 (Coordinated Universal Time)

Victim #138

8F33a442 Is this the one?

Sun Feb 16 2025 11:20:58 GMT+0000 (Coordinated Universal Time)

LOCKBIT

give me all text from readme files

Sun Feb 16 2025 11:21:20 GMT+0000 (Coordinated Universal Time)

Victim #138

~~~ You have been attacked by LockBit 4.0 - the fastest, most stable and immortal ransomware since 2019 ~~~~ >>>>> You must pay us. Tor Browser Links BLOG where the stolen infortmation will be published: ( often times to protect our web sites from ddos attacks we include ACCESS KEY - ADTISZRLVUMXDJ34RCBZFNO6BNKLEYKYS5FZPNNXK4S2RSHOENUA ) http://lockbit3753ekiocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2id.onion/ http://lockbit3g3ohd3katajf6zaehxz4h4cnhmz5t735zpltywhwpc6oy3id.onion/ http://lockbit3olp7oetlc4tl5zydnoluphh7fvdt5oa6arcp2757r7xkutid.onion/ http://lockbit435xk3ki62yun7z5nhwz6jyjdp2c64j5vge536if2eny3gtid.onion/ http://lockbit4lahhluquhoka3t4spqym2m3dhe66d6lr337glmnlgg2nndad.onion/ http://lockbit6knrauo3qafoksvl742vieqbujxw7rd6ofzdtapjb4rrawqad.onion/ http://lockbit7ouvrsdgtojeoj5hvu6bljqtghitekwpdy3b6y62ixtsu5jqd.onion/ >>>>> What is the guarantee that we won't scam you? We are the oldest extortion gang on the planet and nothing is more important to us than our reputation. We are not a politically motivated group and want nothing but financial rewards for our work. If we defraud even one client, other clients will not pay us. In 5 years, not a single client has been left dissatisfied after making a deal with us. If you pay the ransom, we will fulfill all the terms we agreed upon during the negotiation process. Treat this situation simply as a paid training session for your system administrators, because it was the misconfiguration of your corporate network that allowed us to attack you. Our pentesting services should be paid for the same way you pay your system administrators' salaries. You can get more information about us on Elon Musk's Twitter at https://twitter.com/hashtag/lockbit?f=live. >>>>> Warning! Do not delete or modify encrypted files, it will lead to irreversible problems with decryption of files! >>>>> Don't go to the police or the FBI for help and don't tell anyone that we attacked you. They will forbid you from paying the ransom and will not help you in any way, you will be left with encrypted files and your business will die. >>>>> When buying bitcoin, do not tell anyone the true purpose of the purchase. Some brokers, especially in the US, do not allow you to buy bitcoin to pay ransom. Communicate any other reason for the purchase, such as: personal investment in cryptocurrency, bitcoin as a gift, paying to buy assets for your business using bitcoin, cryptocurrency payment for consulting services, cryptocurrency payment for any other services, cryptocurrency donations, cryptocurrency donations for Donald Trump to win the election, buying bitcoin to participate in ICO and buy other cryptocurrencies, buying cryptocurrencies to leave an inheritance for your children, or any other purpose for buying cryptocurrency. Also you can use adequate cryptocurrency brokers who do not ask questions for what you buy cryptocurrency. >>>>> After buying cryptocurrency from a broker, store the cryptocurrency on a cold wallet, such as https://electrum.org/ or any other cold cryptocurrency wallet, more details on https://bitcoin.org By paying the ransom from your personal cold cryptocurrency wallet, you will avoid any problems from regulators, police and brokers. >>>>> Don't be afraid of any legal consequences, you were very scared, that's why you followed all our instructions, it's not your fault if you are very scared. Not a single company that paid us has had issues. Any excuses are just for insurance company to not pay on their obligation. >>>>> You need to contact us via TOR darknet sites with your personal ID Download and install Tor Browser https://www.torproject.org/ Write to the chat room and wait for an answer, we'll guarantee a response from us. If you need a unique ID for correspondence with us that no one will know about, ask it in the chat, we will generate a secret chat for you and give you ID via private one-time memos service, no one can find out this ID but you. Sometimes you will have to wait some time for our reply, this is because we have a lot of work and we attack hundreds of companies around the world. Tor Browser personal link for CHAT available only to you: ( often times to protect our web sites from ddos attacks we include ACCESS KEY - ADTISZRLVUMXDJ34RCBZFNO6BNKLEYKYS5FZPNNXK4S2RSHOENUA ) http://e4hwk3w4ztqfkyo6l36ss3tfj4bw2jw4ytkmomkx2ugwjgrs4w3lriid.onion Tor Browser Links for CHAT ( often times to protect our web sites from ddos attacks we include ACCESS KEY - ADTISZRLVUMXDJ34RCBZFNO6BNKLEYKYS5FZPNNXK4S2RSHOENUA ) http://lockbitspyakyequybgwgwauhzqxx7ba2gh3lmlj3zyeuaknrexdzfid.onion http://lockbitspxmqqfi6bw4y7f5psnpoaakhlisdx33busmnpgtimart5fad.onion http://lockbitspxgtf65ej7uu5h7qtephbevcsc2sk2brxzmt754etrrzhdqd.onion http://lockbitspudgjptrzadjzi7b4n2nw3yq6aqqqqw6wbrrjkr2ffuhkhyd.onion http://lockbitsptqsmaf56cmo7bieqwh5htlsfkodpahsaurxlquoz67zwrad.onion >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> >>>>> Your personal identifier to communicate with us ID: E7BCACA89BD361E681D717C1AC3917CC <<<<< >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> >>>>> Want a lamborghini, a ferrari and lots of titty girls? Sign up and start your pentester billionaire journey in 5 minutes with us. ( often times to protect our web sites from ddos attacks we include ACCESS KEY - ADTISZRLVUMXDJ34RCBZFNO6BNKLEYKYS5FZPNNXK4S2RSHOENUA ) http://lockbitapyx2kr5b7ma7qn6ziwqgbrij2czhcbojuxmgnwpkgv2yx2yd.onion http://lockbitapyum2wks2lbcnrovcgxj7ne3ua7hhcmshh3s3ajtpookohqd.onion http://lockbitapp24bvbi43n3qmtfcasf2veaeagjxatgbwtxnsh5w32mljad.onion http://lockbitapo3wkqddx2ka7t45hejurybzzjpos4cpeliudgv35kkizrid.onion http://lockbitapiahy43zttdhslabjvx4q6k24xx7r33qtcvwqehmnnqxy3yd.onion Version: LockBitBlack4.0-rc-001

Sun Feb 16 2025 11:22:47 GMT+0000 (Coordinated Universal Time)

LOCKBIT

its not esxi

Sun Feb 16 2025 11:23:06 GMT+0000 (Coordinated Universal Time)

LOCKBIT

it's windows

Sun Feb 16 2025 11:23:11 GMT+0000 (Coordinated Universal Time)

Victim #138

I'm not in the server room, I'll ask and get back to you. Please wait a moment.

Sun Feb 16 2025 11:23:56 GMT+0000 (Coordinated Universal Time)

LOCKBIT

ok

Sun Feb 16 2025 11:24:12 GMT+0000 (Coordinated Universal Time)

Victim #138

The engineer went to find it. Will about half an hour be okay for you?

Sun Feb 16 2025 11:26:34 GMT+0000 (Coordinated Universal Time)

LOCKBIT

ok

Sun Feb 16 2025 11:28:52 GMT+0000 (Coordinated Universal Time)

Victim #138

~~~ You have been attacked by LockBit 4.0 - the fastest, most stable and immortal ransomware since 2019 ~~~~ >>>>> You must pay us. Tor Browser Links BLOG where the stolen infortmation will be published: ( often times to protect our web sites from ddos attacks we include ACCESS KEY - ADTISZRLVUMXDJ34RCBZFNO6BNKLEYKYS5FZPNNXK4S2RSHOENUA ) http://lockbit3753ekiocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2id.onion/ http://lockbit3g3ohd3katajf6zaehxz4h4cnhmz5t735zpltywhwpc6oy3id.onion/ http://lockbit3olp7oetlc4tl5zydnoluphh7fvdt5oa6arcp2757r7xkutid.onion/ http://lockbit435xk3ki62yun7z5nhwz6jyjdp2c64j5vge536if2eny3gtid.onion/ http://lockbit4lahhluquhoka3t4spqym2m3dhe66d6lr337glmnlgg2nndad.onion/ http://lockbit6knrauo3qafoksvl742vieqbujxw7rd6ofzdtapjb4rrawqad.onion/ http://lockbit7ouvrsdgtojeoj5hvu6bljqtghitekwpdy3b6y62ixtsu5jqd.onion/ >>>>> What is the guarantee that we won't scam you? We are the oldest extortion gang on the planet and nothing is more important to us than our reputation. We are not a politically motivated group and want nothing but financial rewards for our work. If we defraud even one client, other clients will not pay us. In 5 years, not a single client has been left dissatisfied after making a deal with us. If you pay the ransom, we will fulfill all the terms we agreed upon during the negotiation process. Treat this situation simply as a paid training session for your system administrators, because it was the misconfiguration of your corporate network that allowed us to attack you. Our pentesting services should be paid for the same way you pay your system administrators' salaries. You can get more information about us on Elon Musk's Twitter at https://twitter.com/hashtag/lockbit?f=live. >>>>> Warning! Do not delete or modify encrypted files, it will lead to irreversible problems with decryption of files! >>>>> Don't go to the police or the FBI for help and don't tell anyone that we attacked you. They will forbid you from paying the ransom and will not help you in any way, you will be left with encrypted files and your business will die. >>>>> When buying bitcoin, do not tell anyone the true purpose of the purchase. Some brokers, especially in the US, do not allow you to buy bitcoin to pay ransom. Communicate any other reason for the purchase, such as: personal investment in cryptocurrency, bitcoin as a gift, paying to buy assets for your business using bitcoin, cryptocurrency payment for consulting services, cryptocurrency payment for any other services, cryptocurrency donations, cryptocurrency donations for Donald Trump to win the election, buying bitcoin to participate in ICO and buy other cryptocurrencies, buying cryptocurrencies to leave an inheritance for your children, or any other purpose for buying cryptocurrency. Also you can use adequate cryptocurrency brokers who do not ask questions for what you buy cryptocurrency. >>>>> After buying cryptocurrency from a broker, store the cryptocurrency on a cold wallet, such as https://electrum.org/ or any other cold cryptocurrency wallet, more details on https://bitcoin.org By paying the ransom from your personal cold cryptocurrency wallet, you will avoid any problems from regulators, police and brokers. >>>>> Don't be afraid of any legal consequences, you were very scared, that's why you followed all our instructions, it's not your fault if you are very scared. Not a single company that paid us has had issues. Any excuses are just for insurance company to not pay on their obligation. >>>>> You need to contact us via TOR darknet sites with your personal ID Download and install Tor Browser https://www.torproject.org/ Write to the chat room and wait for an answer, we'll guarantee a response from us. If you need a unique ID for correspondence with us that no one will know about, ask it in the chat, we will generate a secret chat for you and give you ID via private one-time memos service, no one can find out this ID but you. Sometimes you will have to wait some time for our reply, this is because we have a lot of work and we attack hundreds of companies around the world. Tor Browser personal link for CHAT available only to you: http://iyuggdvguyt4f4hdk6eudwcdtlsw3ixi5thzhqb6fpydw6jblf3sxlyd.onion Tor Browser Links for CHAT ( often times to protect our web sites from ddos attacks we include ACCESS KEY - ADTISZRLVUMXDJ34RCBZFNO6BNKLEYKYS5FZPNNXK4S2RSHOENUA ) http://lockbitspgsxzkoi2cuwklu6hzvuvoj4qggvqwan3nr4zy7ge3s7rtad.onion http://lockbitspfigqwjpd6v3az57xpykygkpdzb4xz2imwnxckxh7oyvxuyd.onion http://lockbitspckzvghfqwd6uowk2y6gtb4ltbd3miqp53okfkc3j5rrunqd.onion http://lockbitspchsxta4gug5wj5tdsvvmbtqdjmtqfwdoeqfodqzpkmviyqd.onion http://lockbitspbsvke7ucgvegltl4acagjjjfkhoi4efxti7gyw742jgjeyd.onion >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> >>>>> Your personal identifier to communicate with us ID: 8A5974B9949E37E530CE855DC545540A <<<<< >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> >>>>> Want a lamborghini, a ferrari and lots of titty girls? Sign up and start your pentester billionaire journey in 5 minutes with us. ( often times to protect our web sites from ddos attacks we include ACCESS KEY - ADTISZRLVUMXDJ34RCBZFNO6BNKLEYKYS5FZPNNXK4S2RSHOENUA ) http://lockbitapyx2kr5b7ma7qn6ziwqgbrij2czhcbojuxmgnwpkgv2yx2yd.onion http://lockbitapyum2wks2lbcnrovcgxj7ne3ua7hhcmshh3s3ajtpookohqd.onion http://lockbitapp24bvbi43n3qmtfcasf2veaeagjxatgbwtxnsh5w32mljad.onion http://lockbitapo3wkqddx2ka7t45hejurybzzjpos4cpeliudgv35kkizrid.onion http://lockbitapiahy43zttdhslabjvx4q6k24xx7r33qtcvwqehmnnqxy3yd.onion Version: LockBit4.0.029-esxi_x64

Sun Feb 16 2025 11:40:02 GMT+0000 (Coordinated Universal Time)

Victim #138

This one?

Sun Feb 16 2025 11:41:08 GMT+0000 (Coordinated Universal Time)

Victim #138

yes?

Sun Feb 16 2025 12:27:09 GMT+0000 (Coordinated Universal Time)

Victim #138

hey man

Sun Feb 16 2025 13:19:59 GMT+0000 (Coordinated Universal Time)

LOCKBIT

yes

Sun Feb 16 2025 13:50:45 GMT+0000 (Coordinated Universal Time)

LOCKBIT


Attachment: decrypt_LINUX_X64.7z

Sun Feb 16 2025 13:50:51 GMT+0000 (Coordinated Universal Time)

Victim #138

so is this one decrypt_LINUX_X64.7z

Sun Feb 16 2025 14:12:51 GMT+0000 (Coordinated Universal Time)

Victim #138

What's LBB_decryptor_E7BCACA89BD361E6.zip what's this one?

Sun Feb 16 2025 14:14:23 GMT+0000 (Coordinated Universal Time)

LOCKBIT

decrypt_LINUX_X64.7z this for ESXI

Mon Feb 17 2025 09:45:32 GMT+0000 (Coordinated Universal Time)

LOCKBIT

LBB_decryptor_E7BCACA89BD361E6.zip this for windows

Mon Feb 17 2025 09:45:40 GMT+0000 (Coordinated Universal Time)

Victim #138

ok bro so nice to help

Mon Feb 17 2025 14:43:22 GMT+0000 (Coordinated Universal Time)

Victim #138

Do you have the ability to anonymously send a recording file to a mobile phone in Taiwan?

Fri Feb 21 2025 05:52:14 GMT+0000 (Coordinated Universal Time)

LOCKBIT

No

Fri Feb 21 2025 08:04:08 GMT+0000 (Coordinated Universal Time)

End of chat