cf-t.com
Speaking with LOCKBIT
Victim #162
You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat. If your archive weighs more than 10 megabytes, please use our file sharing service. http://lockbitfss2w7co3ij6am6wox4xcurtgwukunx3yubcoe5cbxiqakxqd.onion http://lockbitfsvf75glg226he5inkfgtuoakt4vgfhd7nfgghx5kwz5zo3ad.onion http://lockbitfskq2fxclyfrop5yizyxpzu65w7pphsgthawcyb4gd27x62id.onion For security reasons we do not click on other links you send in chat. Please wait for a reply, sometimes it takes several hours due to possible time zone differences.
Fri Feb 14 2025 18:56:35 GMT+0000 (Coordinated Universal Time)
Victim #162
Hi, what did you do to us?
Fri Feb 14 2025 18:57:54 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Hello, please first validate that you are from the company by providing any identifying information from your local area network (hostnames, IP addresses, etc) and please also confirm that
Sat Feb 15 2025 12:17:27 GMT+0000 (Coordinated Universal Time)
LOCKBIT
you can negotiate on behalf of the company
Sat Feb 15 2025 12:18:09 GMT+0000 (Coordinated Universal Time)
LOCKBIT
After confirmation, the matter will be explained
Sat Feb 15 2025 12:19:08 GMT+0000 (Coordinated Universal Time)
Victim #162
CF-HOST01 and yes, I can negotiate for us
Sat Feb 15 2025 17:39:10 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Ok, confirmed. Your Hyper-V host machine (CF-HOST01) was fully encrypted (each VM was encrypted from start to finish and the entire machine was encrypted) and also a windows machine running on bare metal that was domain joined was also encrypted.
Sat Feb 15 2025 17:41:05 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Veeam cloud backups were deleted and any NAS backups were encrypted.
Sat Feb 15 2025 17:41:24 GMT+0000 (Coordinated Universal Time)
LOCKBIT
As you know, your host machine hosts Magento and SAP servers and your web server integrates with these servers. You can either find backups for your virtual machines or build those servers from scratch if you do not want to cooperate with us.
Sat Feb 15 2025 17:43:22 GMT+0000 (Coordinated Universal Time)
LOCKBIT
I must add, if you cooperate with us those servers will get back up and running and your web server will integrate just as before.
Sat Feb 15 2025 17:45:03 GMT+0000 (Coordinated Universal Time)
LOCKBIT
No data was downloaded from your network.
Sat Feb 15 2025 17:45:52 GMT+0000 (Coordinated Universal Time)
LOCKBIT
The price for the decryptor is 210,000 USD
Sat Feb 15 2025 17:46:41 GMT+0000 (Coordinated Universal Time)
Victim #162
How do we know we can trust you on this and you will unencrypt everything?
Sun Feb 16 2025 01:03:53 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Give me test files for free test
Sun Feb 16 2025 07:53:06 GMT+0000 (Coordinated Universal Time)
Victim #162
http://temp.sh/DrRcI/Samples.zip
Sun Feb 16 2025 21:42:39 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Mon Feb 17 2025 10:26:16 GMT+0000 (Coordinated Universal Time)
Victim #162
We will check this out and verify
Tue Feb 18 2025 03:29:45 GMT+0000 (Coordinated Universal Time)
Victim #162
The guy who would verify is out today but should be back tomorrow. Will send an update when I get to talk to them and have them validate.
Wed Feb 19 2025 21:27:35 GMT+0000 (Coordinated Universal Time)
Victim #162
They look good. What do we do now?
Thu Feb 20 2025 21:35:04 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Pay
Fri Feb 21 2025 08:03:43 GMT+0000 (Coordinated Universal Time)
LOCKBIT
210,000 USD
Fri Feb 21 2025 08:03:51 GMT+0000 (Coordinated Universal Time)
Victim #162
How? Would we mail you a check? Wire Transfer? I just dont understand any of this.
Fri Feb 21 2025 17:16:25 GMT+0000 (Coordinated Universal Time)
LOCKBIT
crypto
Fri Feb 21 2025 22:06:39 GMT+0000 (Coordinated Universal Time)
LOCKBIT
bitcoin
Fri Feb 21 2025 22:06:41 GMT+0000 (Coordinated Universal Time)
LOCKBIT
monero
Fri Feb 21 2025 22:06:43 GMT+0000 (Coordinated Universal Time)
LOCKBIT
buy crypto
Fri Feb 21 2025 22:06:50 GMT+0000 (Coordinated Universal Time)
Victim #162
That's a lot of money Where would we send this bitcoin to?
Fri Feb 21 2025 22:28:28 GMT+0000 (Coordinated Universal Time)
LOCKBIT
on my btc wallet, I will give you it, when you have bitcoin
Sat Feb 22 2025 09:48:20 GMT+0000 (Coordinated Universal Time)
LOCKBIT
if it's a lot of money, I can increase price to 500,000 usd
Sat Feb 22 2025 09:49:21 GMT+0000 (Coordinated Universal Time)
Victim #162
We will have to figure out the process. Do we get them from the bank?
Sat Feb 22 2025 19:54:54 GMT+0000 (Coordinated Universal Time)
LOCKBIT
bestchange.com
Sat Feb 22 2025 21:34:02 GMT+0000 (Coordinated Universal Time)
LOCKBIT
any way
Sat Feb 22 2025 21:34:05 GMT+0000 (Coordinated Universal Time)
LOCKBIT
you can take cash and buy crypto
Sat Feb 22 2025 21:34:14 GMT+0000 (Coordinated Universal Time)
LOCKBIT
you can buy crypto via bank
Sat Feb 22 2025 21:34:23 GMT+0000 (Coordinated Universal Time)
Victim #162
Ok, we will discuss with our bank when they open next.
Sun Feb 23 2025 21:19:41 GMT+0000 (Coordinated Universal Time)
End of chat