abcapital.com.ph
Speaking with LOCKBIT
Victim #154
You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat. If your archive weighs more than 10 megabytes, please use our file sharing service. http://lockbitfss2w7co3ij6am6wox4xcurtgwukunx3yubcoe5cbxiqakxqd.onion http://lockbitfsvf75glg226he5inkfgtuoakt4vgfhd7nfgghx5kwz5zo3ad.onion http://lockbitfskq2fxclyfrop5yizyxpzu65w7pphsgthawcyb4gd27x62id.onion For security reasons we do not click on other links you send in chat. Please wait for a reply, sometimes it takes several hours due to possible time zone differences.
Tue Feb 11 2025 05:00:25 GMT+0000 (Coordinated Universal Time)
Victim #154
Hi Lockbit, this is AB Capital and saw the post and may we ask to get the directory listing of all the files that you have. May we ask for more time so we can inform our stakeholders for them to assess and consider our next move? Thank you for understanding.
Tue Feb 11 2025 13:04:40 GMT+0000 (Coordinated Universal Time)
LOCKBIT
http://lockbit6vhrjaqzsdj6pqalyideigxv4xycfeyunpx35znogiwmojnid.onion/secret/c291b98a5d93e850aced101f8ae13b2f-655124cf-6f28-3065-a931-c7a86c7228d9/abcapital.com.ph
Tue Feb 11 2025 13:14:56 GMT+0000 (Coordinated Universal Time)
LOCKBIT
you can download all the files that we have and see for yourself
Tue Feb 11 2025 13:15:59 GMT+0000 (Coordinated Universal Time)
LOCKBIT
the blog was taken down for a while
Tue Feb 11 2025 13:37:21 GMT+0000 (Coordinated Universal Time)
Victim #154
Thank you for your consideration.
Tue Feb 11 2025 13:40:00 GMT+0000 (Coordinated Universal Time)
Victim #154
Good day, may we negotiate the amount you have in mind and what in turn would be Lockbit's end of the bargain.
Tue Feb 11 2025 14:47:32 GMT+0000 (Coordinated Universal Time)
LOCKBIT
120k$ in bitcoin
Tue Feb 11 2025 15:08:14 GMT+0000 (Coordinated Universal Time)
LOCKBIT
After payment, 100% of your files will be securely deleted and our team won't bother you again. You can trust us by reading about us on the global internet. We value our reputation
Tue Feb 11 2025 15:13:42 GMT+0000 (Coordinated Universal Time)
LOCKBIT
our deals run on a regular basis, client want to solve the problem before first posting information on the blog
Tue Feb 11 2025 15:34:00 GMT+0000 (Coordinated Universal Time)
Victim #154
Dear Lockbit, may we state that last year was the only time we were profitable and we only earned $200k. We have also notified the regulators and our clients as well as required by law since the encryption last January 25 caused a major outage. That said, we were able to restore operation with some backups, albeit with some data loss therefore decryption wont really be necessary. Please give as an amount that we can get back to our leaders to be considered.
Tue Feb 11 2025 15:34:41 GMT+0000 (Coordinated Universal Time)
LOCKBIT
maybe we can lower the amount, but not by much.
Tue Feb 11 2025 15:51:36 GMT+0000 (Coordinated Universal Time)
LOCKBIT
in the process of working with you, we thought about 100k.
Tue Feb 11 2025 15:54:01 GMT+0000 (Coordinated Universal Time)
LOCKBIT
our principles have become worth more than money. However, a discount can be negotiated.
Tue Feb 11 2025 16:04:05 GMT+0000 (Coordinated Universal Time)
Victim #154
Thank you for your consideration. 100k is still very steep for us as its half of our revenue which will be negated with the damage caused by the outage. May we respectfully ask to please significantly bring it down since we are only technically be requesting for the deletion of the data and we do understand that this is just business for you.
Tue Feb 11 2025 16:06:15 GMT+0000 (Coordinated Universal Time)
LOCKBIT
7 directors at 14k can't chip in )
Tue Feb 11 2025 16:09:28 GMT+0000 (Coordinated Universal Time)
LOCKBIT
I don't know how much you'd be willing to pay.
Tue Feb 11 2025 16:14:27 GMT+0000 (Coordinated Universal Time)
LOCKBIT
but I know it would be a big problems to you if we released your data in blog.
Tue Feb 11 2025 16:15:51 GMT+0000 (Coordinated Universal Time)
LOCKBIT
They often say they've had a bad year, but they'll still have to pay.
Tue Feb 11 2025 16:17:29 GMT+0000 (Coordinated Universal Time)
LOCKBIT
If I give a price now, it will be the last one.
Tue Feb 11 2025 16:28:29 GMT+0000 (Coordinated Universal Time)
Victim #154
We understand, and we actually had a good year last year since thats the first time we were positive. But this incident wiped it off all away and will be spending more in recovery. Also, the directors are there just for name as a favor and add credibility which by the way is now in shambles, but they dont really contribute, otherwise they would have sent their army of IT to help us recover. I am looking at 10-20K to comeback to the heads and this will be coming from our own personal funds. While there will be some issues on publishing this, as we mentioned, we have already notified the clients and regulators about this breach.
Tue Feb 11 2025 16:30:56 GMT+0000 (Coordinated Universal Time)
LOCKBIT
by the way, you downloaded your backup files, which will help you as well.
Tue Feb 11 2025 16:32:44 GMT+0000 (Coordinated Universal Time)
LOCKBIT
20k is not possible and 50k is also not possible, companies much smaller than you pay us such amounts
Tue Feb 11 2025 16:33:48 GMT+0000 (Coordinated Universal Time)
LOCKBIT
We are not paid from IT team, they do not have that kind of money. We are paid by the heads of the companies
Tue Feb 11 2025 16:35:32 GMT+0000 (Coordinated Universal Time)
LOCKBIT
we don't need from yours own personal funds
Tue Feb 11 2025 16:36:52 GMT+0000 (Coordinated Universal Time)
LOCKBIT
we can't agree on this
Tue Feb 11 2025 16:37:25 GMT+0000 (Coordinated Universal Time)
LOCKBIT
we were already aiming to publish you, you may have noticed by the posting time of only 1 day.
Tue Feb 11 2025 16:38:37 GMT+0000 (Coordinated Universal Time)
LOCKBIT
you are lucky that you reacted quickly, we did not expect this
Tue Feb 11 2025 16:39:18 GMT+0000 (Coordinated Universal Time)
LOCKBIT
even though there was a warning on viber
Tue Feb 11 2025 16:39:57 GMT+0000 (Coordinated Universal Time)
LOCKBIT
why didn't you react immediately
Tue Feb 11 2025 16:40:36 GMT+0000 (Coordinated Universal Time)
LOCKBIT
it's your fault
Tue Feb 11 2025 16:40:58 GMT+0000 (Coordinated Universal Time)
LOCKBIT
I consulted and asked for another discount for you, our price will be 70k
Tue Feb 11 2025 16:48:03 GMT+0000 (Coordinated Universal Time)
LOCKBIT
and we will not rush you to pay
Tue Feb 11 2025 16:48:40 GMT+0000 (Coordinated Universal Time)
LOCKBIT
your office will allow you to pay that amount
Tue Feb 11 2025 16:51:12 GMT+0000 (Coordinated Universal Time)
Victim #154
Thank you for your concern and consideration, yes this funds will not be coming from IT. But we only have one owner, as we are a small private company, and he will have to cover everything. We were unsure of the viber message, but here we are. We will come back to you if we can convince him to pay 50k as this is still big for one person.
Tue Feb 11 2025 16:55:20 GMT+0000 (Coordinated Universal Time)
LOCKBIT
in the message in Viber there was a link to your archive to make sure
Tue Feb 11 2025 16:58:42 GMT+0000 (Coordinated Universal Time)
LOCKBIT
our price was 70k you write about 50k, let me talk to the team and agree on 60k for everyone
Tue Feb 11 2025 17:00:47 GMT+0000 (Coordinated Universal Time)
Victim #154
Ok, let us know. Thank you.
Tue Feb 11 2025 17:07:51 GMT+0000 (Coordinated Universal Time)
LOCKBIT
we agree to 60k, decision is yours
Tue Feb 11 2025 17:17:33 GMT+0000 (Coordinated Universal Time)
Victim #154
Will relay this and come back with a decision tomorrow morning as its 1am here. Do you have a code name or nickname so we know we are talking to the same customer support tomorrow?
Tue Feb 11 2025 17:21:40 GMT+0000 (Coordinated Universal Time)
LOCKBIT
ok, on your time 16-17 o clock, I'll be online in this chat, possibly earlier
Tue Feb 11 2025 17:27:16 GMT+0000 (Coordinated Universal Time)
Victim #154
Ok, thank you for your patience.
Tue Feb 11 2025 17:29:11 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Thank you too, good luck.
Tue Feb 11 2025 17:30:55 GMT+0000 (Coordinated Universal Time)
Victim #154
Good day Lockbit, we have met and we have come up with our final offer of 30k. Please do consider that we are only asking for the deletion of the data as we have already notified the regulators and clients about the breach as mandated by law. So this is just to minimize exposure so we can concentrate in the restoration activities. Hoping for you kind consideration.
Wed Feb 12 2025 08:30:58 GMT+0000 (Coordinated Universal Time)
LOCKBIT
you know, if we publish your data, you will lose more than 30k
Wed Feb 12 2025 08:58:37 GMT+0000 (Coordinated Universal Time)
LOCKBIT
they will also end up with your competitors, and you will be on the verge of closing down
Wed Feb 12 2025 09:00:09 GMT+0000 (Coordinated Universal Time)
LOCKBIT
If your directors wants to get off easy, it won't work
Wed Feb 12 2025 09:01:23 GMT+0000 (Coordinated Universal Time)
LOCKBIT
30k doesn't mean anything to us.
Wed Feb 12 2025 09:02:32 GMT+0000 (Coordinated Universal Time)
LOCKBIT
We are waiting for another offer from you
Wed Feb 12 2025 09:05:00 GMT+0000 (Coordinated Universal Time)
LOCKBIT
our last successful data deal that we had was for 500k, clients pay well for their data, not for encryption
Wed Feb 12 2025 09:11:23 GMT+0000 (Coordinated Universal Time)
LOCKBIT
we made concessions to you, but you're upsetting us with your offer.
Wed Feb 12 2025 09:12:50 GMT+0000 (Coordinated Universal Time)
Victim #154
Let me get back to you.
Wed Feb 12 2025 09:37:46 GMT+0000 (Coordinated Universal Time)
Victim #154
Hi Lockbit, I've talked to our heads and most of them are against of paying at all. We don't know much about your business and the heads are insistent that you would go against your word and sell the data nonetheless. We've been transparent with our regulators and clients and have been working days and nights non-stop for restoration activities. And now, we just want to minimize the damage and hoping for peaceful restoration activities by deleting the data that you have. The heads don't want to pay at all but I've told them that you value your reputation as you said and have managed to convince them to pay 40k for the destruction of data. Kindly consider this offer.
Wed Feb 12 2025 10:42:09 GMT+0000 (Coordinated Universal Time)
LOCKBIT
We keep our word! only one person and me has your files, after your payment 40k, they will be securely removed by the program eraser.heidi.ie
Wed Feb 12 2025 11:14:22 GMT+0000 (Coordinated Universal Time)
LOCKBIT
we were going to agree with you for 50k, but okay, I personally agree with you on 40k
Wed Feb 12 2025 11:17:21 GMT+0000 (Coordinated Universal Time)
Victim #154
Thank you for consideration. Do we have a deal at 40k?
Wed Feb 12 2025 11:17:46 GMT+0000 (Coordinated Universal Time)
LOCKBIT
you need to buy bitcoin, write to me when you are ready and I will give you a wallet
Wed Feb 12 2025 11:18:16 GMT+0000 (Coordinated Universal Time)
LOCKBIT
40k$ in bitcoin
Wed Feb 12 2025 11:19:01 GMT+0000 (Coordinated Universal Time)
Victim #154
I will relay the agreement and will get back to you tomorrow same time. Thank you for your consideration.
Wed Feb 12 2025 11:33:29 GMT+0000 (Coordinated Universal Time)
LOCKBIT
ok
Wed Feb 12 2025 11:37:52 GMT+0000 (Coordinated Universal Time)
Victim #154
Good day, we are now preparing the funds and should be ready by Monday. We need help in converting to bitcoin. Would you be able to point us to how any of your previous clients from the Philippines is able to acquire bitcoins for payment?
Thu Feb 13 2025 10:00:20 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Hello, I can only give you a our bitcoin wallet
Thu Feb 13 2025 10:10:48 GMT+0000 (Coordinated Universal Time)
LOCKBIT
http://lockbit3753ekiocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2id.onion/buybitcoin#mirrors
Thu Feb 13 2025 10:11:14 GMT+0000 (Coordinated Universal Time)
LOCKBIT
here you can see where to buy bitcoin
Thu Feb 13 2025 10:11:38 GMT+0000 (Coordinated Universal Time)
Victim #154
Thank you and will check this out.
Thu Feb 13 2025 10:18:52 GMT+0000 (Coordinated Universal Time)
Victim #154
Just an update that our resource will be ready on our end by next week and hopefully we can start sending by then once we have converted this to bitcoins. Will give update again by Tuesday next week. Same time.
Fri Feb 14 2025 12:24:57 GMT+0000 (Coordinated Universal Time)
Victim #154
Happy Valentines.
Fri Feb 14 2025 12:27:02 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Thanks, allright
Fri Feb 14 2025 14:00:26 GMT+0000 (Coordinated Universal Time)
Victim #154
Good day Lockbit, we are consolidating the funds and should be completed within the week. We have candidates on where to purchase bitcoin locally with minimal paperworks and will be talking to them on Thursday.
Tue Feb 18 2025 11:05:51 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Good day, please don't delay for long time
Tue Feb 18 2025 11:07:50 GMT+0000 (Coordinated Universal Time)
LOCKBIT
when I wait for a long time I start to worry)
Tue Feb 18 2025 11:10:20 GMT+0000 (Coordinated Universal Time)
LOCKBIT
waiting for Thursday)
Tue Feb 18 2025 11:10:55 GMT+0000 (Coordinated Universal Time)
Victim #154
Rest assured we are doing our best to process the funds immediately. Thank you for your patience.
Tue Feb 18 2025 12:14:02 GMT+0000 (Coordinated Universal Time)
LOCKBIT
fine, I'm not hurry you
Tue Feb 18 2025 12:20:34 GMT+0000 (Coordinated Universal Time)
LOCKBIT
I'm waiting for you on Thursday
Tue Feb 18 2025 12:21:01 GMT+0000 (Coordinated Universal Time)
Victim #154
Yes, will give update by then. We are really trying to get the money out and buy crypto but it's harder when we want less paper trail. This is also the first time we are doing this so thank you for your patience.
Tue Feb 18 2025 13:07:35 GMT+0000 (Coordinated Universal Time)
Victim #154
Good day Lockbit, we're expecting to get the cash out by Saturday or Monday then we can start purchasing the coins next week. Will update you again on Monday
Thu Feb 20 2025 15:06:18 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Thanks, allright
Fri Feb 21 2025 08:53:11 GMT+0000 (Coordinated Universal Time)
Victim #154
Good day Lockbit, We have finally acquired the funds and is now in the process of buying bitcoin. We are evaluating possible sources of bitcoins this week without KYC then it might take some time since we have to split the purchase under $8,000 to avoid being flagged. We'll give you our wallet address once we start purchasing so you could monitor then we'll do an initial test transfer to you after. We could send you a picture for proof of our activities with your required instructions if needed. Thank you for understanding.
Mon Feb 24 2025 11:07:43 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Hello, proofs not need, we'll wait
Mon Feb 24 2025 11:45:52 GMT+0000 (Coordinated Universal Time)
Victim #154
Thank you for the trust. One of us got a call from an unknown number in Lithuania, please give us time to purchase bitcoins.
Tue Feb 25 2025 14:09:05 GMT+0000 (Coordinated Universal Time)
LOCKBIT
I don't know who called, not us, we just waiting
Tue Feb 25 2025 14:25:34 GMT+0000 (Coordinated Universal Time)
LOCKBIT
how are you doing with buying bitcoin ?
Tue Feb 25 2025 14:32:39 GMT+0000 (Coordinated Universal Time)
LOCKBIT
how long do you think it will take ?
Tue Feb 25 2025 14:33:17 GMT+0000 (Coordinated Universal Time)
Victim #154
We will be splitting the purchase to avoid tripping regulatory limits, so once we have a seller, the estimate time is 2 weeks.
Tue Feb 25 2025 14:58:20 GMT+0000 (Coordinated Universal Time)
LOCKBIT
we have never waited so long, and the amount is not large
Tue Feb 25 2025 15:01:01 GMT+0000 (Coordinated Universal Time)
LOCKBIT
this is suspicious, why are you delaying time
Tue Feb 25 2025 15:02:36 GMT+0000 (Coordinated Universal Time)
LOCKBIT
anyone can register a personal account on the exchange and buy bitcoin in the moment
Tue Feb 25 2025 15:04:13 GMT+0000 (Coordinated Universal Time)
LOCKBIT
very long and it becomes strange
Tue Feb 25 2025 15:05:06 GMT+0000 (Coordinated Universal Time)
Victim #154
Apologies for the wait. We are doing precautionary measures to minimize our trail of buying bitcoins and paying for the ransom.
Tue Feb 25 2025 15:08:03 GMT+0000 (Coordinated Universal Time)
Victim #154
We can send you the picture of the cash with a marker you will request as proof. But we can't deposit this to a bank and use that account to buy crypto without paper trail. Hope you understand
Tue Feb 25 2025 15:09:36 GMT+0000 (Coordinated Universal Time)
LOCKBIT
you can put cash on a card of a person not from the company, and he will be able to buy bitcoin in one click on a popular exchange, for example, binance.com
Tue Feb 25 2025 15:16:21 GMT+0000 (Coordinated Universal Time)
LOCKBIT
do not use personal exchangers, they will have a bad rate bitcoin and they may scam you
Tue Feb 25 2025 15:17:52 GMT+0000 (Coordinated Universal Time)
Victim #154
Yes it was an option before but Binance is banned in the Philippines and can't get them from the app stores or create accounts. We are talking to 2 possible sellers. Please be patient, this is the first time we are doing this kind of transaction. We do have good progress.
Tue Feb 25 2025 15:23:17 GMT+0000 (Coordinated Universal Time)
LOCKBIT
ok, no problem
Tue Feb 25 2025 15:26:26 GMT+0000 (Coordinated Universal Time)
Victim #154
Good day Lockbit, we already got the crypto this morning. Could we do the transaction within today since the market is going down. Would like to conduct test transfer first before giving the full amount.
Fri Feb 28 2025 04:36:27 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Hello, great
Fri Feb 28 2025 09:29:42 GMT+0000 (Coordinated Universal Time)
LOCKBIT
1JTCt7wvKiBgT7rba5YZna8irfMvkacqFG
Fri Feb 28 2025 09:30:21 GMT+0000 (Coordinated Universal Time)
LOCKBIT
this is a btc wallet, you can send test transfer
Fri Feb 28 2025 09:41:44 GMT+0000 (Coordinated Universal Time)
Victim #154
Alright, will now start sending test transfer payment of $100.
Fri Feb 28 2025 09:51:24 GMT+0000 (Coordinated Universal Time)
Victim #154
We would like to mention that we bought 40k USD worth of bitcoin this morning but with the volatility and transaction fees it will be less. Hope this is okay with you as we want to complete the transaction. Rest assured that we will give you all the btc we were able to acquire.
Fri Feb 28 2025 10:03:13 GMT+0000 (Coordinated Universal Time)
LOCKBIT
ok
Fri Feb 28 2025 10:04:41 GMT+0000 (Coordinated Universal Time)
Victim #154
Test transfer of $100 worth of btc has been sent to your btc address and is now PENDING in status. Please confirm once received. Thank you.
Fri Feb 28 2025 10:08:34 GMT+0000 (Coordinated Universal Time)
Victim #154
The status of the test transfer is now COMPLETED, could you please check on your end?
Fri Feb 28 2025 10:32:34 GMT+0000 (Coordinated Universal Time)
LOCKBIT
+
Fri Feb 28 2025 10:36:40 GMT+0000 (Coordinated Universal Time)
LOCKBIT
test transfer came
Fri Feb 28 2025 10:37:12 GMT+0000 (Coordinated Universal Time)
LOCKBIT
0.00124505
Fri Feb 28 2025 10:38:34 GMT+0000 (Coordinated Universal Time)
LOCKBIT
you can send all amout
Fri Feb 28 2025 10:49:29 GMT+0000 (Coordinated Universal Time)
Victim #154
We would like to split the next transactions in case we make a mistake. We will next transfer 20k usd in btc first and then the rest of the amount. We hope you understand and this is okay with you.
Fri Feb 28 2025 11:00:51 GMT+0000 (Coordinated Universal Time)
LOCKBIT
yes of course, ok
Fri Feb 28 2025 11:05:06 GMT+0000 (Coordinated Universal Time)
Victim #154
Split transfer of $20k worth of btc has been sent to your btc address and is now PENDING in status. Please confirm once received. Thank you.
Fri Feb 28 2025 11:08:46 GMT+0000 (Coordinated Universal Time)
Victim #154
Could you help me a bit, may I ask the details of how you got access to our network? Did you exploit our public web app server or phish our users?
Fri Feb 28 2025 11:10:56 GMT+0000 (Coordinated Universal Time)
LOCKBIT
is fine, 20k confirm
Fri Feb 28 2025 11:11:23 GMT+0000 (Coordinated Universal Time)
LOCKBIT
remove the admin from the domain who controls infostructure, no matter what antivirus you install, the domain will always be vulnerable
Fri Feb 28 2025 11:13:45 GMT+0000 (Coordinated Universal Time)
LOCKBIT
got to you through phishing, but I don't remember the first host
Fri Feb 28 2025 11:16:19 GMT+0000 (Coordinated Universal Time)
LOCKBIT
and you had very easy passwords
Fri Feb 28 2025 11:17:38 GMT+0000 (Coordinated Universal Time)
LOCKBIT
I followed the work Glen Moyo, and waited for him to log into Google Backup
Fri Feb 28 2025 11:19:18 GMT+0000 (Coordinated Universal Time)
LOCKBIT
about a month
Fri Feb 28 2025 11:19:41 GMT+0000 (Coordinated Universal Time)
LOCKBIT
sorry can you transfer the rest, i'm very late now
Fri Feb 28 2025 11:22:44 GMT+0000 (Coordinated Universal Time)
LOCKBIT
I need to go and I'll be here in a few hours
Fri Feb 28 2025 11:23:28 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Within 24 hours your archive will be deleted from the blog, also i use software heidi.ie delete archive from physical pc I'll send you a screenshot, you don't have to worry, we won't bother you anymore and your data will be securely deleted
Fri Feb 28 2025 11:26:03 GMT+0000 (Coordinated Universal Time)
Victim #154
Sorry just wanted to clarify does this mean you were able to get glen moyo's account through phishing as well?
Fri Feb 28 2025 11:37:37 GMT+0000 (Coordinated Universal Time)
Victim #154
We are now sending the rest of the payment. Thank you for your response.
Fri Feb 28 2025 11:39:48 GMT+0000 (Coordinated Universal Time)
Victim #154
Rest of the payment has been sent to your btc address and is now PENDING in status
Fri Feb 28 2025 11:41:30 GMT+0000 (Coordinated Universal Time)
LOCKBIT
we got into the network through a manager with user priv, and dump ntlm local admin access on all the hosts in the domain.
Fri Feb 28 2025 11:42:28 GMT+0000 (Coordinated Universal Time)
LOCKBIT
then we found the admin in the domain
Fri Feb 28 2025 11:43:02 GMT+0000 (Coordinated Universal Time)
LOCKBIT
ITD Admin:itd_1002
Fri Feb 28 2025 11:43:45 GMT+0000 (Coordinated Universal Time)
LOCKBIT
You have a Kaspersky server in your domain, remove it
Fri Feb 28 2025 11:44:23 GMT+0000 (Coordinated Universal Time)
LOCKBIT
thank you, the full amount has been received
Fri Feb 28 2025 11:45:48 GMT+0000 (Coordinated Universal Time)
LOCKBIT
I'll be back a little later and get to work on deleting your data
Fri Feb 28 2025 11:46:23 GMT+0000 (Coordinated Universal Time)
LOCKBIT
You can also ask what you need, I will answer
Fri Feb 28 2025 11:46:43 GMT+0000 (Coordinated Universal Time)
LOCKBIT
now sorry me, I need to go
Fri Feb 28 2025 11:47:47 GMT+0000 (Coordinated Universal Time)
Victim #154
Thank you and apologies for the questions, on the domain, could you expound a bit as we didn't have domain configured yet at the time of the incident.
Fri Feb 28 2025 11:48:06 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Let me come back and of course I will answer
Fri Feb 28 2025 11:48:52 GMT+0000 (Coordinated Universal Time)
LOCKBIT
I didn't expect you today, I had other plans)
Fri Feb 28 2025 11:49:14 GMT+0000 (Coordinated Universal Time)
Victim #154
It's alright. Thank you. We'll get back on this chat to check in on the deletion as well.
Fri Feb 28 2025 11:49:43 GMT+0000 (Coordinated Universal Time)
LOCKBIT
I'm expected, I have to leave now.
Fri Feb 28 2025 11:49:46 GMT+0000 (Coordinated Universal Time)
LOCKBIT
of course i will be here
Fri Feb 28 2025 11:50:08 GMT+0000 (Coordinated Universal Time)
LOCKBIT
thanks
Fri Feb 28 2025 11:50:12 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Your data was deleted
Sat Mar 01 2025 15:28:31 GMT+0000 (Coordinated Universal Time)
LOCKBIT
http://lockbitfskq2fxclyfrop5yizyxpzu65w7pphsgthawcyb4gd27x62id.onion/r/A92AhVtry4#NnaQzPn9YB18sGhEcJO0J/MxOBh377D8mD2tssXo30A=
Sat Mar 01 2025 15:29:18 GMT+0000 (Coordinated Universal Time)
LOCKBIT
proof
Sat Mar 01 2025 15:29:22 GMT+0000 (Coordinated Universal Time)
Victim #154
Thank you for this. May I ask another question, we've read from reports that you often use Anydesk in your attacks, can you explain how it is relevant to you?
Wed Mar 05 2025 11:17:28 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Hello, you had anydesk installed on many hosts, we just used it to get back
Thu Mar 06 2025 06:06:27 GMT+0000 (Coordinated Universal Time)
End of chat