aoet.com.tw
Speaking with LOCKBIT
Victim #158
You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat. If your archive weighs more than 10 megabytes, please use our file sharing service. http://lockbitfss2w7co3ij6am6wox4xcurtgwukunx3yubcoe5cbxiqakxqd.onion http://lockbitfsvf75glg226he5inkfgtuoakt4vgfhd7nfgghx5kwz5zo3ad.onion http://lockbitfskq2fxclyfrop5yizyxpzu65w7pphsgthawcyb4gd27x62id.onion For security reasons we do not click on other links you send in chat. Please wait for a reply, sometimes it takes several hours due to possible time zone differences.
Wed Feb 12 2025 12:31:02 GMT+0000 (Coordinated Universal Time)
Victim #158
hello what is your lowest price？
Wed Feb 12 2025 12:32:23 GMT+0000 (Coordinated Universal Time)
Victim #158
Wed Feb 12 2025 12:33:55 GMT+0000 (Coordinated Universal Time)
Victim #158
this is test files， pls test for me，
Wed Feb 12 2025 12:35:33 GMT+0000 (Coordinated Universal Time)
LOCKBIT
hello, please wait
Wed Feb 12 2025 13:04:50 GMT+0000 (Coordinated Universal Time)
Victim #158
what is your lower price？
Wed Feb 12 2025 13:14:28 GMT+0000 (Coordinated Universal Time)
LOCKBIT
35k
Wed Feb 12 2025 13:18:16 GMT+0000 (Coordinated Universal Time)
Victim #158
Boss, this is too expensive, we can't afford it,
Wed Feb 12 2025 13:27:19 GMT+0000 (Coordinated Universal Time)
Victim #158
The other day you told us 30K,
Wed Feb 12 2025 13:28:26 GMT+0000 (Coordinated Universal Time)
LOCKBIT
ok 30k
Wed Feb 12 2025 13:35:39 GMT+0000 (Coordinated Universal Time)
Victim #158
but my we can ‘t accept it，
Wed Feb 12 2025 13:35:48 GMT+0000 (Coordinated Universal Time)
LOCKBIT
then there will be no deal
Wed Feb 12 2025 13:36:43 GMT+0000 (Coordinated Universal Time)
Victim #158
I still have some virtual machine files that I can't find,
Wed Feb 12 2025 13:36:50 GMT+0000 (Coordinated Universal Time)
LOCKBIT
how much you want ?
Wed Feb 12 2025 13:38:12 GMT+0000 (Coordinated Universal Time)
Victim #158
To be honest, there are some virtual machine files that, while being encrypted, stopped being encrypted, some of them were intact, some of them were partially encrypted, we fixed some of them, but some of them couldn't be found, or weren't fully encrypted
Wed Feb 12 2025 13:38:27 GMT+0000 (Coordinated Universal Time)
Victim #158
Now our virtual machines are encrypted and messed up,
Wed Feb 12 2025 13:39:48 GMT+0000 (Coordinated Universal Time)
LOCKBIT
I understand there's been some confusion over the disconnected disks.
Wed Feb 12 2025 13:46:26 GMT+0000 (Coordinated Universal Time)
LOCKBIT
ok how much are you offering ?
Wed Feb 12 2025 13:46:48 GMT+0000 (Coordinated Universal Time)
Victim #158
i need wai you test and reply my boss
Wed Feb 12 2025 13:48:47 GMT+0000 (Coordinated Universal Time)
LOCKBIT
I sent a request to tech support, you need to wait. He is not online now
Wed Feb 12 2025 13:49:28 GMT+0000 (Coordinated Universal Time)
LOCKBIT
boss here
Wed Feb 12 2025 19:14:09 GMT+0000 (Coordinated Universal Time)
LOCKBIT
make test decrypt for you
Wed Feb 12 2025 19:14:14 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Wed Feb 12 2025 19:33:41 GMT+0000 (Coordinated Universal Time)
Victim #158
HI pls check you send files not decrypt
Wed Feb 12 2025 19:43:17 GMT+0000 (Coordinated Universal Time)
Victim #158
you cant decrypt？
Wed Feb 12 2025 19:45:51 GMT+0000 (Coordinated Universal Time)
LOCKBIT
sorry
Wed Feb 12 2025 19:45:55 GMT+0000 (Coordinated Universal Time)
LOCKBIT
missclick
Wed Feb 12 2025 19:45:59 GMT+0000 (Coordinated Universal Time)
LOCKBIT
wait 5 min
Wed Feb 12 2025 19:46:43 GMT+0000 (Coordinated Universal Time)
Victim #158
allright
Wed Feb 12 2025 19:46:59 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Wed Feb 12 2025 19:54:24 GMT+0000 (Coordinated Universal Time)
Victim #158
we check the test file, it is all right, But I know we'll still have a lot of files that are corrupted and can't be decrypted
Thu Feb 13 2025 02:06:48 GMT+0000 (Coordinated Universal Time)
LOCKBIT
what files are you talking about, they are fully encrypted and not corrupted, after payment you will get all your files back
Thu Feb 13 2025 06:42:01 GMT+0000 (Coordinated Universal Time)
Victim #158
i mean，To be honest, there are some virtual machine files that, while being encrypted, stopped being encrypted, some of them were intact, some of them were partially encrypted, we fixed some of them, but some of them couldn't be found, or weren't fully encrypted
Thu Feb 13 2025 06:46:28 GMT+0000 (Coordinated Universal Time)
Victim #158
We are still measuring the loss of the lost virtual machines, because we did fix some of them, because the encryption was not complete, resulting in encryption failures, some encrypted 1 percent, some encrypted 50 percent, some encrypted 90 percent, some encrypted 100 percent
Thu Feb 13 2025 06:48:11 GMT+0000 (Coordinated Universal Time)
Victim #158
hello brother， can we talk about the price，
Thu Feb 13 2025 07:05:01 GMT+0000 (Coordinated Universal Time)
Victim #158
As I said, we lost a lot of files, and the encryption mess, resulting in a lot of file corruption, too expensive price, we can not accept, brother
Thu Feb 13 2025 07:06:29 GMT+0000 (Coordinated Universal Time)
LOCKBIT
I don't understand what you're talking about, the crypt worked in normal mode for full encryption, it's a long process, some of it was done, some of it wasn't.
Thu Feb 13 2025 07:10:51 GMT+0000 (Coordinated Universal Time)
LOCKBIT
the fact that you are messing with files and you can corrupted them yourself
Thu Feb 13 2025 07:11:44 GMT+0000 (Coordinated Universal Time)
LOCKBIT
where there are extensions on files, they will all be decrypted
Thu Feb 13 2025 07:12:57 GMT+0000 (Coordinated Universal Time)
Victim #158
First of all, we did not make any changes to the original file, the second question is that the encryption process is not complete, when the encryption program encrypts the file, encrypts part of it, does not complete the encryption, this can also be decrypted?
Thu Feb 13 2025 07:14:59 GMT+0000 (Coordinated Universal Time)
Victim #158
Because our technical staff did find that the underlying code of some WMDK virtual machine files was 100% rewritten, that is, completely encrypted, but some Wmdk encrypted suffixes are very long, and normal, we detected his underlying code information, and indeed did not complete the encryption, those who did not complete the encryption, only destroyed part. Can you decrypt something like this?
Thu Feb 13 2025 07:16:40 GMT+0000 (Coordinated Universal Time)
LOCKBIT
There were two modes, encryption by spots and then full encryption.
Thu Feb 13 2025 07:16:50 GMT+0000 (Coordinated Universal Time)
Victim #158
As you said before, because it should be the encryption process, our disk disconnected, resulting in encryption problems, this is the key reason, some files can remove the suffix
Thu Feb 13 2025 07:17:54 GMT+0000 (Coordinated Universal Time)
LOCKBIT
you have the crypt log in tmp in the esxi.
Thu Feb 13 2025 07:19:09 GMT+0000 (Coordinated Universal Time)
Victim #158
It's encrypted and messy anyway, isn't it? That's the truth,
Thu Feb 13 2025 07:21:24 GMT+0000 (Coordinated Universal Time)
LOCKBIT
but you'd better ask yesterday our boss, he's the only one who can give the right answer.
Thu Feb 13 2025 07:22:57 GMT+0000 (Coordinated Universal Time)
Victim #158
We are very aware of our current situation, the files are encrypted in a mess, some can be decrypted, some can not, encrypted files with problems, his suffix is a dozen bits, the normal should be 8 bits of code,
Thu Feb 13 2025 07:23:39 GMT+0000 (Coordinated Universal Time)
LOCKBIT
let's wait for him again, ask him.
Thu Feb 13 2025 07:23:57 GMT+0000 (Coordinated Universal Time)
LOCKBIT
but I'll say again where there's an extension, you get them back.
Thu Feb 13 2025 07:24:38 GMT+0000 (Coordinated Universal Time)
Victim #158
We want to spend less money, and if we fail, we lose a little less,
Thu Feb 13 2025 07:25:00 GMT+0000 (Coordinated Universal Time)
Victim #158
you told me ，----I understand there's been some confusion over the disconnected disks.
Thu Feb 13 2025 07:26:37 GMT+0000 (Coordinated Universal Time)
LOCKBIT
and the fact that encrypted in a mess is how crypt can work
Thu Feb 13 2025 07:27:34 GMT+0000 (Coordinated Universal Time)
LOCKBIT
bro, the disks turned off, the crypt simply skipped them because they were not there and continued to suggest making VMs that are available
Thu Feb 13 2025 07:28:19 GMT+0000 (Coordinated Universal Time)
Victim #158
Can you decrypt only a few computers for us?
Thu Feb 13 2025 07:28:49 GMT+0000 (Coordinated Universal Time)
LOCKBIT
I'll say it again, so where there's an extension, the decryptor will return those files.
Thu Feb 13 2025 07:28:54 GMT+0000 (Coordinated Universal Time)
LOCKBIT
it's gonna take a long time, and it's not gonna be cheap for you.
Thu Feb 13 2025 07:29:35 GMT+0000 (Coordinated Universal Time)
Victim #158
Brother, we have also hired professional technicians to check the encryption situation, as I said, there was a serious accident in the encryption process, resulting in WM loss, or WM encryption failure, some of which we have repaired through technical means, or recovered the files inside, and now want to decrypt, those encrypted correctly, can not be repaired,
Thu Feb 13 2025 07:30:15 GMT+0000 (Coordinated Universal Time)
Victim #158
Let's get to the point, our boss doesn't want to spend so much money,
Thu Feb 13 2025 07:31:26 GMT+0000 (Coordinated Universal Time)
LOCKBIT
disks unmounted, there are still vm untouched, but netapp it encrypted in normal mode, and where there is an extension you will get the files back
Thu Feb 13 2025 07:33:40 GMT+0000 (Coordinated Universal Time)
LOCKBIT
You don't have to pay me, but deal with your professionals technicians, pay them the same amount and you won't get any results
Thu Feb 13 2025 07:35:32 GMT+0000 (Coordinated Universal Time)
Victim #158
yesterday you ask me --- how much you want ?
Thu Feb 13 2025 07:36:09 GMT+0000 (Coordinated Universal Time)
LOCKBIT
let's talk about the price
Thu Feb 13 2025 07:36:22 GMT+0000 (Coordinated Universal Time)
Victim #158
our boss want Spend less， and 5000，
Thu Feb 13 2025 07:37:11 GMT+0000 (Coordinated Universal Time)
LOCKBIT
this is not possible, sort it out without us
Thu Feb 13 2025 07:37:53 GMT+0000 (Coordinated Universal Time)
LOCKBIT
not interesting at all
Thu Feb 13 2025 07:38:13 GMT+0000 (Coordinated Universal Time)
Victim #158
I know you also want some money, not to embarrass us, our purpose is very simple, minimize the loss,
Thu Feb 13 2025 07:38:18 GMT+0000 (Coordinated Universal Time)
Victim #158
Am I wrong? it is right
Thu Feb 13 2025 07:39:32 GMT+0000 (Coordinated Universal Time)
LOCKBIT
I know your company, I don't need your 5k as a handout
Thu Feb 13 2025 07:40:25 GMT+0000 (Coordinated Universal Time)
LOCKBIT
I'm saying 20k, and then you decide whether to pay or not, I don't care.
Thu Feb 13 2025 07:41:14 GMT+0000 (Coordinated Universal Time)
LOCKBIT
tell the boss that it won't be any lower
Thu Feb 13 2025 07:41:37 GMT+0000 (Coordinated Universal Time)
LOCKBIT
I offered you the lowest price for you, anything lower would be an insult to me.
Thu Feb 13 2025 07:43:32 GMT+0000 (Coordinated Universal Time)
LOCKBIT
we can end this talk, test decrypt and price provided, write to me only if you can pay
Thu Feb 13 2025 07:49:26 GMT+0000 (Coordinated Universal Time)
Victim #158
i need talk with my boss， bro
Thu Feb 13 2025 07:50:40 GMT+0000 (Coordinated Universal Time)
LOCKBIT
the price is really not high
Thu Feb 13 2025 07:52:04 GMT+0000 (Coordinated Universal Time)
Victim #158
How soon can I get the decryptor after payment
Thu Feb 13 2025 07:52:45 GMT+0000 (Coordinated Universal Time)
LOCKBIT
you pay extra money to a professional technicians
Thu Feb 13 2025 07:53:49 GMT+0000 (Coordinated Universal Time)
LOCKBIT
as soon as the boss gets here, he's usually in the evening
Thu Feb 13 2025 07:54:59 GMT+0000 (Coordinated Universal Time)
Victim #158
We just fixed some virtual machines at a fraction of the cost, and that's the truth, I'm not lying,
Thu Feb 13 2025 07:55:08 GMT+0000 (Coordinated Universal Time)
Victim #158
Brother, I'll be honest, it should be your encryption process stopped, or there was an error, which caused the file encryption failure, they are only small encrypted areas, but there are some virtual machine underlying sectors are 100% encrypted, we can't get any files from them
Thu Feb 13 2025 07:56:47 GMT+0000 (Coordinated Universal Time)
LOCKBIT
you have a lot of files and not only vmdk, they will not decrypt everything for you
Thu Feb 13 2025 07:56:54 GMT+0000 (Coordinated Universal Time)
Victim #158
yes，you are right，That's why I came to contact you, but our focus is not on files, office files, or useless files, as I'm sure you know, our focus is on virtual machines, right
Thu Feb 13 2025 07:58:08 GMT+0000 (Coordinated Universal Time)
LOCKBIT
well, it happens, they pay for a small fraction of the critical machines.
Thu Feb 13 2025 07:58:20 GMT+0000 (Coordinated Universal Time)
LOCKBIT
the decrypt will be available for vmdk and also other files for full decryption
Thu Feb 13 2025 07:59:21 GMT+0000 (Coordinated Universal Time)
Victim #158
so i want ask you can you only decypt we need wms， As long as you can make it cheaper
Thu Feb 13 2025 07:59:44 GMT+0000 (Coordinated Universal Time)
LOCKBIT
no, it doesn't work that way, the decryptor will only be available for all extensions
Thu Feb 13 2025 08:00:31 GMT+0000 (Coordinated Universal Time)
LOCKBIT
bro i made the lowest price
Thu Feb 13 2025 08:02:54 GMT+0000 (Coordinated Universal Time)
LOCKBIT
we have our own policy, we can't discount the price by 90%, usually maximum 50%. I went to meet you 20k last price
Thu Feb 13 2025 08:06:01 GMT+0000 (Coordinated Universal Time)
LOCKBIT
and I have a lot of work to do, you don't pay, other client pay now.
Thu Feb 13 2025 08:08:23 GMT+0000 (Coordinated Universal Time)
Victim #158
i need talk my boss ，
Thu Feb 13 2025 08:10:01 GMT+0000 (Coordinated Universal Time)
Victim #158
hello. my boss, want ask you how about 10K, if ok we can pay you
Thu Feb 13 2025 08:42:04 GMT+0000 (Coordinated Universal Time)
LOCKBIT
impossible
Thu Feb 13 2025 08:57:56 GMT+0000 (Coordinated Universal Time)
Victim #158
In view of the current reality, we really can not spend so much money, so I would like to ask you to make it cheaper.
Thu Feb 13 2025 09:19:03 GMT+0000 (Coordinated Universal Time)
Victim #158
We're sincere, and we'd like you to help me, because I'm just a poor caretaker,
Thu Feb 13 2025 09:20:08 GMT+0000 (Coordinated Universal Time)
LOCKBIT
well the boss write that 10k is impossible, here everything, is already the price 20k will remain unchanged
Thu Feb 13 2025 09:32:38 GMT+0000 (Coordinated Universal Time)
Victim #158
Brother, you also know that our case is very special, we did recover some virtual machines ourselves, the situation is relatively bad, those encryption error encryption process stopped at 50%, or 90% did not complete encryption, those can not be decrypted, only complete encryption can be decrypted correctly. You can ask your boss these questions,
Thu Feb 13 2025 09:35:20 GMT+0000 (Coordinated Universal Time)
Victim #158
What we're saying is, we meet each other halfway, 15000， ok？ This is also the maximum we can bear, judging by the current reality
Thu Feb 13 2025 09:37:18 GMT+0000 (Coordinated Universal Time)
LOCKBIT
ok, wait for his answer
Thu Feb 13 2025 09:38:10 GMT+0000 (Coordinated Universal Time)
Victim #158
our boss told me ，if you can argee ， We will prepare the money for you
Thu Feb 13 2025 09:38:25 GMT+0000 (Coordinated Universal Time)
Victim #158
This is very simple, you can be fully encrypted file underlying code, change, so that the file can not be decrypted, the same reason, when a file (relatively large file) in the encryption process stopped, he did not form a complete encrypted information, this file is unable to decrypt,
Thu Feb 13 2025 09:40:09 GMT+0000 (Coordinated Universal Time)
Victim #158
Let's meet each other halfway, you take the money, we will lose a little bit, because we know that we can't recover 100%, we can only try to save some,
Thu Feb 13 2025 09:41:42 GMT+0000 (Coordinated Universal Time)
LOCKBIT
let's wait for the boss's answer
Thu Feb 13 2025 09:41:47 GMT+0000 (Coordinated Universal Time)
Victim #158
how about 15000， brother，Let's meet each other halfway, you take the money, we will lose a little bit, because we know that we can't recover 100%, we can only try to save some,
Thu Feb 13 2025 09:42:43 GMT+0000 (Coordinated Universal Time)
LOCKBIT
are you ready to give me 15k today ?
Thu Feb 13 2025 09:43:37 GMT+0000 (Coordinated Universal Time)
LOCKBIT
15k today only
Thu Feb 13 2025 09:43:53 GMT+0000 (Coordinated Universal Time)
Victim #158
if you can argee my boss said we can pay you today
Thu Feb 13 2025 09:44:03 GMT+0000 (Coordinated Universal Time)
LOCKBIT
ok only today 15k, tomorrow will be 20k without changes
Thu Feb 13 2025 09:45:01 GMT+0000 (Coordinated Universal Time)
Victim #158
but you still need ask your support about my questions ，
Thu Feb 13 2025 09:45:37 GMT+0000 (Coordinated Universal Time)
LOCKBIT
yes, I passed everything on to the boss.
Thu Feb 13 2025 09:46:31 GMT+0000 (Coordinated Universal Time)
LOCKBIT
if there are problems, I won't take the money, but I won't give the decryptor either
Thu Feb 13 2025 09:47:35 GMT+0000 (Coordinated Universal Time)
Victim #158
My boss asked if you should wait until your boss is online to send the decryptor after payment
Thu Feb 13 2025 09:48:02 GMT+0000 (Coordinated Universal Time)
Victim #158
I just want to say that some files have problems and some files are encrypted without problems, which makes our work very difficult and we lose a lot of data，You can take the money, and we want to decrypt as many documents as we can properly decrypt, that's the truth
Thu Feb 13 2025 09:49:30 GMT+0000 (Coordinated Universal Time)
LOCKBIT
yes, but we will solution this today
Thu Feb 13 2025 09:49:50 GMT+0000 (Coordinated Universal Time)
LOCKBIT
the faster you pay today, the more likely the boss will still be online
Thu Feb 13 2025 09:51:21 GMT+0000 (Coordinated Universal Time)
Victim #158
iam calling my boss
Thu Feb 13 2025 10:02:42 GMT+0000 (Coordinated Universal Time)
Victim #158
hello
Thu Feb 13 2025 12:47:42 GMT+0000 (Coordinated Universal Time)
Victim #158
We've got the money ready
Thu Feb 13 2025 12:49:28 GMT+0000 (Coordinated Universal Time)
Victim #158
my boss want decrypt test again， if no problem we will pay you fast
Thu Feb 13 2025 12:56:07 GMT+0000 (Coordinated Universal Time)
Victim #158
Thu Feb 13 2025 12:56:33 GMT+0000 (Coordinated Universal Time)
Victim #158
Because we found a lot!! -restore-my-files! ! The encryption ID number inside is the same in the first few digits but different in the back
Thu Feb 13 2025 12:58:38 GMT+0000 (Coordinated Universal Time)
Victim #158
F7350D3F63AAC6494D699EC5B9A0D444 F7350D3F63AAC64934DE9C4FE522A829 F7350D3F63AAC6495F59137DA6F97D89
Thu Feb 13 2025 13:01:37 GMT+0000 (Coordinated Universal Time)
Victim #158
so pls test for me again， i need show my boss， if files ok i will pay you，
Thu Feb 13 2025 13:03:14 GMT+0000 (Coordinated Universal Time)
LOCKBIT
bro
Thu Feb 13 2025 13:24:37 GMT+0000 (Coordinated Universal Time)
Victim #158
yes
Thu Feb 13 2025 13:24:55 GMT+0000 (Coordinated Universal Time)
LOCKBIT
we have already made a test decrypt
Thu Feb 13 2025 13:25:14 GMT+0000 (Coordinated Universal Time)
Victim #158
As I said, why is the encryption ID in the front of different computers the same but not the back? Our boss is worried about decryption, there are many problems in front, I hope you can understand
Thu Feb 13 2025 13:26:00 GMT+0000 (Coordinated Universal Time)
LOCKBIT
We went to a meeting and lowered the minimum amount
Thu Feb 13 2025 13:26:04 GMT+0000 (Coordinated Universal Time)
LOCKBIT
I think the price is about to go back up high.
Thu Feb 13 2025 13:26:50 GMT+0000 (Coordinated Universal Time)
LOCKBIT
since you are fooling us
Thu Feb 13 2025 13:27:19 GMT+0000 (Coordinated Universal Time)
Victim #158
bro， We have a hard time communicating with the boss, and you have to change, which is not good,
Thu Feb 13 2025 13:27:48 GMT+0000 (Coordinated Universal Time)
LOCKBIT
you wanted to expand several files, now i see you care about all of them
Thu Feb 13 2025 13:28:00 GMT+0000 (Coordinated Universal Time)
Victim #158
you mean i let you test again？ right？ you think we fooling you ？
Thu Feb 13 2025 13:29:09 GMT+0000 (Coordinated Universal Time)
LOCKBIT
usually after receiving the decryptor they don't come back to us, I know that they return all their files
Thu Feb 13 2025 13:29:49 GMT+0000 (Coordinated Universal Time)
LOCKBIT
ok we will do the test but the price will be 20k
Thu Feb 13 2025 13:30:45 GMT+0000 (Coordinated Universal Time)
Victim #158
It's no big deal. Anything. We can negotiate, right? Like we said, you take the money, we try to lose it
Thu Feb 13 2025 13:30:57 GMT+0000 (Coordinated Universal Time)
LOCKBIT
my boss won't like this
Thu Feb 13 2025 13:31:10 GMT+0000 (Coordinated Universal Time)
LOCKBIT
I lowered the price and you want to get the test decrypt again, it's starting to get annoying
Thu Feb 13 2025 13:32:05 GMT+0000 (Coordinated Universal Time)
Victim #158
I'm not gonna make it hard for you, you doesnt test for me again
Thu Feb 13 2025 13:32:14 GMT+0000 (Coordinated Universal Time)
LOCKBIT
and the boss never answered you questions, he walked away
Thu Feb 13 2025 13:32:41 GMT+0000 (Coordinated Universal Time)
LOCKBIT
It's not difficult for me, we'll just wait
Thu Feb 13 2025 13:33:21 GMT+0000 (Coordinated Universal Time)
Victim #158
Please forget what just happened. ok？
Thu Feb 13 2025 13:33:55 GMT+0000 (Coordinated Universal Time)
LOCKBIT
you are worried, I understand
Thu Feb 13 2025 13:34:36 GMT+0000 (Coordinated Universal Time)
LOCKBIT
but you will get a decryptor for all your extensions
Thu Feb 13 2025 13:34:58 GMT+0000 (Coordinated Universal Time)
Victim #158
I will explain everything to the boss, so please forget what just happened, can we discuss how to pay?
Thu Feb 13 2025 13:35:31 GMT+0000 (Coordinated Universal Time)
LOCKBIT
and we will also stay here and we can help
Thu Feb 13 2025 13:35:34 GMT+0000 (Coordinated Universal Time)
LOCKBIT
but for some decisions you will have to wait for the boss, he is very busy with the update now
Thu Feb 13 2025 13:36:27 GMT+0000 (Coordinated Universal Time)
LOCKBIT
I'm not trying to just take your money, we're also responsible for our reputation.
Thu Feb 13 2025 13:37:14 GMT+0000 (Coordinated Universal Time)
Victim #158
But brother, you really have to help me this time, we've got the money ready and we're going to pay you, I don't want to lose this job either
Thu Feb 13 2025 13:37:48 GMT+0000 (Coordinated Universal Time)
Victim #158
yes， i know，
Thu Feb 13 2025 13:38:59 GMT+0000 (Coordinated Universal Time)
LOCKBIT
the files test again will 100% be decrypted. I know this, I have a lot of experience
Thu Feb 13 2025 13:39:30 GMT+0000 (Coordinated Universal Time)
LOCKBIT
the files test again will 100% be decrypted. I know this, I have a lot of experience
Thu Feb 13 2025 13:39:38 GMT+0000 (Coordinated Universal Time)
Victim #158
I've also been very busy coordinating the communication between you and my boss,
Thu Feb 13 2025 13:40:05 GMT+0000 (Coordinated Universal Time)
Victim #158
So let's talk about how to pay
Thu Feb 13 2025 13:41:18 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Are you ready to pay now? But do you understand that you will have to wait for the boss?
Thu Feb 13 2025 13:41:30 GMT+0000 (Coordinated Universal Time)
Victim #158
yes, i believe now, I have no choice., bro
Thu Feb 13 2025 13:42:43 GMT+0000 (Coordinated Universal Time)
Victim #158
i want to know ,how long time i need to wait? because i need reply my boss,
Thu Feb 13 2025 13:43:50 GMT+0000 (Coordinated Universal Time)
LOCKBIT
you see my attitude, i warn you in advance, but I could have just taken the money
Thu Feb 13 2025 13:44:21 GMT+0000 (Coordinated Universal Time)
Victim #158
yes,Will we have a long wait?
Thu Feb 13 2025 13:44:58 GMT+0000 (Coordinated Universal Time)
LOCKBIT
5 minutes, please.
Thu Feb 13 2025 13:45:32 GMT+0000 (Coordinated Universal Time)
Victim #158
I mean you don't need to give us another decryption test, you need to keep the original price, we can wait after payment
Thu Feb 13 2025 13:46:42 GMT+0000 (Coordinated Universal Time)
Victim #158
ok?Maybe there is something wrong with my English translator, I mean you don't need to test it for me again, just keep the original price and tell me how to pay
Thu Feb 13 2025 13:48:00 GMT+0000 (Coordinated Universal Time)
Victim #158
did you understand me?
Thu Feb 13 2025 13:50:46 GMT+0000 (Coordinated Universal Time)
LOCKBIT
yes
Thu Feb 13 2025 13:51:30 GMT+0000 (Coordinated Universal Time)
LOCKBIT
the only thing is we need to wait for the boss, everyone is waiting for him now, and we can't do anything about it yet, he's very busy
Thu Feb 13 2025 13:51:34 GMT+0000 (Coordinated Universal Time)
Victim #158
yes, you mean ,the wallet from you boss?
Thu Feb 13 2025 13:51:57 GMT+0000 (Coordinated Universal Time)
LOCKBIT
he responds from 10 minutes to 24 hours
Thu Feb 13 2025 13:52:04 GMT+0000 (Coordinated Universal Time)
LOCKBIT
not the wallet, I'll send it to you right now.
Thu Feb 13 2025 13:52:41 GMT+0000 (Coordinated Universal Time)
LOCKBIT
I'm just warning you
Thu Feb 13 2025 13:52:57 GMT+0000 (Coordinated Universal Time)
Victim #158
no problems bro
Thu Feb 13 2025 13:53:21 GMT+0000 (Coordinated Universal Time)
LOCKBIT
as you can see, he hasn't answered your questions yet.
Thu Feb 13 2025 13:53:23 GMT+0000 (Coordinated Universal Time)
LOCKBIT
but you should know that you will have the decryptor
Thu Feb 13 2025 13:54:08 GMT+0000 (Coordinated Universal Time)
LOCKBIT
just wait
Thu Feb 13 2025 13:54:18 GMT+0000 (Coordinated Universal Time)
Victim #158
that is not matter , As I know, if there is any damage, or if it cannot be decrypted, we will have to decrypt other documents, and if anything should happen, I will keep these secrets for you
Thu Feb 13 2025 13:54:57 GMT+0000 (Coordinated Universal Time)
LOCKBIT
1LZCdUhTZexZoRdS55wTcK1tAZrs8p7384
Thu Feb 13 2025 13:55:06 GMT+0000 (Coordinated Universal Time)
LOCKBIT
btc wallet
Thu Feb 13 2025 13:55:15 GMT+0000 (Coordinated Universal Time)
LOCKBIT
if there are problems with decryption, only the boss can help you
Thu Feb 13 2025 13:56:05 GMT+0000 (Coordinated Universal Time)
LOCKBIT
you can write him directly
Thu Feb 13 2025 13:56:36 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Thu Feb 13 2025 14:24:57 GMT+0000 (Coordinated Universal Time)
Victim #158
bro, i am believe ,dont test again, thx, and i am find way pay u
Thu Feb 13 2025 14:26:48 GMT+0000 (Coordinated Universal Time)
LOCKBIT
waiting for 15k
Thu Feb 13 2025 14:27:36 GMT+0000 (Coordinated Universal Time)
Victim #158
Now I try to transfer 500USD to you first. When you receive it, please tell me, because it is the first time for us to use this kind of payment to be careful of problems in the payment process, OK?
Thu Feb 13 2025 14:28:31 GMT+0000 (Coordinated Universal Time)
LOCKBIT
ok
Thu Feb 13 2025 14:28:54 GMT+0000 (Coordinated Universal Time)
Victim #158
let me try pls wait,Please calculate how much BTC is 500USD
Thu Feb 13 2025 14:30:48 GMT+0000 (Coordinated Universal Time)
Victim #158
can you receive USdt?
Thu Feb 13 2025 14:31:56 GMT+0000 (Coordinated Universal Time)
LOCKBIT
0.005214
Thu Feb 13 2025 14:32:42 GMT+0000 (Coordinated Universal Time)
Victim #158
wait pls let me try
Thu Feb 13 2025 14:33:00 GMT+0000 (Coordinated Universal Time)
Victim #158
okay pay you in process, when you receive let me know, Then I will pay the rest of the money, please understand me, I have not used this payment method
Thu Feb 13 2025 14:34:32 GMT+0000 (Coordinated Universal Time)
LOCKBIT
+ 500$
Thu Feb 13 2025 14:37:46 GMT+0000 (Coordinated Universal Time)
Victim #158
did you receive 500USD Right ?
Thu Feb 13 2025 14:38:23 GMT+0000 (Coordinated Universal Time)
LOCKBIT
yes, you can transfer everything
Thu Feb 13 2025 14:39:20 GMT+0000 (Coordinated Universal Time)
Victim #158
I will pay the rest of the money,
Thu Feb 13 2025 14:39:26 GMT+0000 (Coordinated Universal Time)
Victim #158
rest of the money, how many btc ?
Thu Feb 13 2025 14:55:42 GMT+0000 (Coordinated Universal Time)
LOCKBIT
only 500
Thu Feb 13 2025 14:59:11 GMT+0000 (Coordinated Universal Time)
LOCKBIT
0.1512
Thu Feb 13 2025 14:59:48 GMT+0000 (Coordinated Universal Time)
Victim #158
I mean, what's the remaining BTC,
Thu Feb 13 2025 15:00:04 GMT+0000 (Coordinated Universal Time)
LOCKBIT
0.1512
Thu Feb 13 2025 15:00:20 GMT+0000 (Coordinated Universal Time)
Victim #158
pls wait ,bro, I'm not familiar with this, so please bear with us while we work on it
Thu Feb 13 2025 15:01:09 GMT+0000 (Coordinated Universal Time)
Victim #158
pay you in process, you will recevie in 20 min
Thu Feb 13 2025 15:18:01 GMT+0000 (Coordinated Universal Time)
LOCKBIT
ok
Thu Feb 13 2025 15:20:16 GMT+0000 (Coordinated Universal Time)
Victim #158
I'm not familiar with this, so I kept you waiting
Thu Feb 13 2025 15:20:42 GMT+0000 (Coordinated Universal Time)
LOCKBIT
allright
Thu Feb 13 2025 15:22:26 GMT+0000 (Coordinated Universal Time)
Victim #158
For the first transaction, did you receive the money? Why is it waiting for confirmation here, ?
Thu Feb 13 2025 15:24:00 GMT+0000 (Coordinated Universal Time)
LOCKBIT
depends on the transaction fee
Thu Feb 13 2025 15:25:07 GMT+0000 (Coordinated Universal Time)
Victim #158
I'll try to increase his service charge,
Thu Feb 13 2025 15:25:51 GMT+0000 (Coordinated Universal Time)
LOCKBIT
https://www.blockchain.com/explorer/addresses/btc/1LZCdUhTZexZoRdS55wTcK1tAZrs8p7384
Thu Feb 13 2025 15:27:22 GMT+0000 (Coordinated Universal Time)
Victim #158
pls check your wallet the secend
Thu Feb 13 2025 15:27:26 GMT+0000 (Coordinated Universal Time)
LOCKBIT
2 confirmations, 3 needed
Thu Feb 13 2025 15:27:46 GMT+0000 (Coordinated Universal Time)
Victim #158
so you see the money， but need to wait right？
Thu Feb 13 2025 15:28:38 GMT+0000 (Coordinated Universal Time)
Victim #158
I tried to add the Internet service fee
Thu Feb 13 2025 15:30:31 GMT+0000 (Coordinated Universal Time)
LOCKBIT
+
Thu Feb 13 2025 15:44:31 GMT+0000 (Coordinated Universal Time)
LOCKBIT
wait for decrypt
Thu Feb 13 2025 15:45:07 GMT+0000 (Coordinated Universal Time)
Victim #158
okay recevie all money？
Thu Feb 13 2025 15:47:14 GMT+0000 (Coordinated Universal Time)
LOCKBIT
yes fine
Thu Feb 13 2025 15:48:13 GMT+0000 (Coordinated Universal Time)
Victim #158
receive all money！ great， sorry， wait too long，
Thu Feb 13 2025 15:48:39 GMT+0000 (Coordinated Universal Time)
LOCKBIT
allright, I wrote the boss, he was just here, but now he's silent)
Thu Feb 13 2025 15:55:42 GMT+0000 (Coordinated Universal Time)
Victim #158
okay wait you good news
Thu Feb 13 2025 15:56:25 GMT+0000 (Coordinated Universal Time)
LOCKBIT
thank you. I hope everything goes well with the decryptor.
Thu Feb 13 2025 16:27:56 GMT+0000 (Coordinated Universal Time)
Victim #158
make the decryptor complete？
Thu Feb 13 2025 16:29:59 GMT+0000 (Coordinated Universal Time)
LOCKBIT
the boss appears and disappears,he did you a 2 test decrypt and disappeared) don't worry
Thu Feb 13 2025 16:30:06 GMT+0000 (Coordinated Universal Time)
Victim #158
okay iam wait
Thu Feb 13 2025 16:31:01 GMT+0000 (Coordinated Universal Time)
LOCKBIT
the boss will drop the decryptor here in chat, you will see
Thu Feb 13 2025 16:31:33 GMT+0000 (Coordinated Universal Time)
Victim #158
okay ，if i decrypt have problems ，can i write you?
Thu Feb 13 2025 16:32:37 GMT+0000 (Coordinated Universal Time)
LOCKBIT
yes write here
Thu Feb 13 2025 16:33:01 GMT+0000 (Coordinated Universal Time)
Victim #158
i want ask you bro, the windows,decryptor and esxi same as 1 ?
Thu Feb 13 2025 16:35:29 GMT+0000 (Coordinated Universal Time)
LOCKBIT
yes right
Thu Feb 13 2025 16:36:20 GMT+0000 (Coordinated Universal Time)
LOCKBIT
esxi and win
Thu Feb 13 2025 16:36:29 GMT+0000 (Coordinated Universal Time)
Victim #158
or two decryptor? how to use in esxi ,or i need copy wmdk, on windows, run the decryptor?
Thu Feb 13 2025 16:36:34 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Procedure for decrypting ESXi: - log in to vCenter - enable ssh access to ESXi - upload decryptor to ESXi via WinSCP or FileZilla; navigate to /tmp folder - login to ssh with root privileges - set permissions to run the decryptor with the command - chmod 777 decrypt - launch decryptor ./decrypt - follow the first method of decrypting by viewing the log file: tail -f /tmp/decrypt.llg, wait for the message at the end of the log - Your system is decrypted - the second way is to check the presence on the disk file decrypt.pid command ls, which protects the decryptor from the restart - the third way - ps | grep decrypt, as soon as decrypt.pid will be removed from the disk, or decrypt will disappear from the running processes, decrypt is complete - check the decrypt.llg log file and see the message at the end that the system was successfully decrypted "Your system is decrypted" - turn on virtual machines in ESXi You cannot run multiple copies of a decryptor at the same time. After launching, the decryptor deletes the executable file and is demonetized, so that you cannot run the decryptor again and damage the files, this is normal. If you have more than one ESXi host then you should not run the decryptor on all hosts simultaneously, make the decryption alternately, in the case of simultaneous operation of two decryptors may corrupt files and not be able to decrypt If any files in another folder stay crypted, please use this command with path Example: ./decrypt -i /tmp/files1/
Thu Feb 13 2025 16:37:13 GMT+0000 (Coordinated Universal Time)
Victim #158
the windows, decryptor it is exe right? i need Double-click to run it
Thu Feb 13 2025 16:39:54 GMT+0000 (Coordinated Universal Time)
LOCKBIT
yes right, win exe just run
Thu Feb 13 2025 16:42:51 GMT+0000 (Coordinated Universal Time)
Victim #158
great ,have good day, bro ,
Thu Feb 13 2025 16:43:42 GMT+0000 (Coordinated Universal Time)
LOCKBIT
+
Thu Feb 13 2025 16:57:50 GMT+0000 (Coordinated Universal Time)
LOCKBIT
I'm working on new targets.)
Thu Feb 13 2025 16:58:33 GMT+0000 (Coordinated Universal Time)
LOCKBIT
over china i know you hate them
Thu Feb 13 2025 16:59:32 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Thu Feb 13 2025 18:57:30 GMT+0000 (Coordinated Universal Time)
LOCKBIT
esxi decryptor
Thu Feb 13 2025 18:57:53 GMT+0000 (Coordinated Universal Time)
LOCKBIT
give me windows readme file
Thu Feb 13 2025 18:58:00 GMT+0000 (Coordinated Universal Time)
LOCKBIT
I will give you windows decryptor
Thu Feb 13 2025 18:58:08 GMT+0000 (Coordinated Universal Time)
Victim #158
wait pls
Thu Feb 13 2025 18:58:32 GMT+0000 (Coordinated Universal Time)
Victim #158
Thu Feb 13 2025 18:58:53 GMT+0000 (Coordinated Universal Time)
LOCKBIT
not test files
Thu Feb 13 2025 19:00:05 GMT+0000 (Coordinated Universal Time)
LOCKBIT
readme file with decryption ID
Thu Feb 13 2025 19:00:08 GMT+0000 (Coordinated Universal Time)
Victim #158
ok
Thu Feb 13 2025 19:00:18 GMT+0000 (Coordinated Universal Time)
Victim #158
F7350D3F63AAC64934DE9C4FE522A829 F7350D3F63AAC6495F59137DA6F97D89
Thu Feb 13 2025 19:01:54 GMT+0000 (Coordinated Universal Time)
LOCKBIT
it's esxi ID
Thu Feb 13 2025 19:03:37 GMT+0000 (Coordinated Universal Time)
LOCKBIT
take readme file from windows
Thu Feb 13 2025 19:03:47 GMT+0000 (Coordinated Universal Time)
Victim #158
i dont know ， now it is work off
Thu Feb 13 2025 19:04:18 GMT+0000 (Coordinated Universal Time)
LOCKBIT
I will wait win ID
Thu Feb 13 2025 19:04:32 GMT+0000 (Coordinated Universal Time)
Victim #158
pls wait i call my partner
Thu Feb 13 2025 19:05:30 GMT+0000 (Coordinated Universal Time)
Victim #158
2B5CB845041910C8A5A5A6A6A6A6A6A6
Thu Feb 13 2025 19:13:15 GMT+0000 (Coordinated Universal Time)
Victim #158
Thu Feb 13 2025 19:13:52 GMT+0000 (Coordinated Universal Time)
Victim #158
I would like to ask you, if I copy the encrypted files and wmdk files in esxi to the win system, can I run the Windows decryption tool to decrypt them?
Thu Feb 13 2025 19:21:13 GMT+0000 (Coordinated Universal Time)
Victim #158
Their ids are not the same, which is not allowed, right?
Thu Feb 13 2025 19:22:27 GMT+0000 (Coordinated Universal Time)
LOCKBIT
yes
Thu Feb 13 2025 19:22:58 GMT+0000 (Coordinated Universal Time)
LOCKBIT
win - win esxi -esxi
Thu Feb 13 2025 19:23:04 GMT+0000 (Coordinated Universal Time)
LOCKBIT
wait win decryptor
Thu Feb 13 2025 19:23:10 GMT+0000 (Coordinated Universal Time)
Victim #158
This is very troublesome and I'm afraid I won't be able to use the decryptor inside esxi
Thu Feb 13 2025 19:24:11 GMT+0000 (Coordinated Universal Time)
LOCKBIT
no worrie
Thu Feb 13 2025 19:24:28 GMT+0000 (Coordinated Universal Time)
LOCKBIT
locker was used inside esxi
Thu Feb 13 2025 19:24:34 GMT+0000 (Coordinated Universal Time)
Victim #158
locker？
Thu Feb 13 2025 19:31:13 GMT+0000 (Coordinated Universal Time)
Victim #158
Thu Feb 13 2025 19:35:32 GMT+0000 (Coordinated Universal Time)
Victim #158
this is windwos read methis is windwos read me
Thu Feb 13 2025 19:37:05 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Thu Feb 13 2025 19:37:31 GMT+0000 (Coordinated Universal Time)
Victim #158
okay ithink i will write you again, thx
Thu Feb 13 2025 19:47:24 GMT+0000 (Coordinated Universal Time)
Victim #158
hello， can you close this window？ Because, our virtual machine was taken by several companies for repairs, and I was worried that they would download the decryptor through here and then leak our data， if i have problems ， i can use other chat window，
Fri Feb 14 2025 10:46:24 GMT+0000 (Coordinated Universal Time)
Victim #158
CAN YO DO IT? IF i hava question i can find you in windows ID chat rom
Fri Feb 14 2025 10:51:07 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Should I delete this chat?
Fri Feb 14 2025 13:55:08 GMT+0000 (Coordinated Universal Time)
Victim #158
all ， hello， can you close this window？ Because, our virtual machine was taken by several companies for repairs, and I was worried that they would download the decryptor through here and then leak our data， if i have problems ， i can use other chat window，
Fri Feb 14 2025 13:55:38 GMT+0000 (Coordinated Universal Time)
End of chat