Victim #167

jgssg.com.tw

Speaking with LOCKBIT

Victim #167

You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat. If your archive weighs more than 10 megabytes, please use our file sharing service. http://lockbitfss2w7co3ij6am6wox4xcurtgwukunx3yubcoe5cbxiqakxqd.onion http://lockbitfsvf75glg226he5inkfgtuoakt4vgfhd7nfgghx5kwz5zo3ad.onion http://lockbitfskq2fxclyfrop5yizyxpzu65w7pphsgthawcyb4gd27x62id.onion For security reasons we do not click on other links you send in chat. Please wait for a reply, sometimes it takes several hours due to possible time zone differences.

Tue Feb 18 2025 08:00:34 GMT+0000 (Coordinated Universal Time)

Victim #167

hello

Tue Feb 18 2025 08:01:49 GMT+0000 (Coordinated Universal Time)

LOCKBIT

hi

Tue Feb 18 2025 08:27:42 GMT+0000 (Coordinated Universal Time)

Victim #167

i am administrator , this company

Tue Feb 18 2025 09:29:27 GMT+0000 (Coordinated Universal Time)

LOCKBIT

talk to you about the amount ?

Tue Feb 18 2025 09:36:26 GMT+0000 (Coordinated Universal Time)

Victim #167

my partner told me ,you said 25K

Tue Feb 18 2025 09:37:50 GMT+0000 (Coordinated Universal Time)

LOCKBIT

yes

Tue Feb 18 2025 09:38:09 GMT+0000 (Coordinated Universal Time)

LOCKBIT

5k impossible

Tue Feb 18 2025 09:38:39 GMT+0000 (Coordinated Universal Time)

Victim #167

oh, what is your lower price

Tue Feb 18 2025 09:47:30 GMT+0000 (Coordinated Universal Time)

LOCKBIT

maybe

Tue Feb 18 2025 09:48:08 GMT+0000 (Coordinated Universal Time)

LOCKBIT

15k will be if you pay immediately

Tue Feb 18 2025 09:49:02 GMT+0000 (Coordinated Universal Time)

LOCKBIT

20k if we continue the talk slow

Tue Feb 18 2025 09:50:52 GMT+0000 (Coordinated Universal Time)

LOCKBIT

15k is the last price, we won't agree lower

Tue Feb 18 2025 09:51:35 GMT+0000 (Coordinated Universal Time)

Victim #167

oh, i need reply my boss,

Tue Feb 18 2025 09:57:24 GMT+0000 (Coordinated Universal Time)

Victim #167

How did you attack us

Tue Feb 18 2025 09:58:32 GMT+0000 (Coordinated Universal Time)

Victim #167

hi, Brother, let's make a long story short, you want to deal quickly, no problem, but this price, our boss still think a little expensive, 8K, how about it

Tue Feb 18 2025 10:04:41 GMT+0000 (Coordinated Universal Time)

LOCKBIT

15k$ last price, we don't need payment below

Tue Feb 18 2025 10:27:35 GMT+0000 (Coordinated Universal Time)

Victim #167

bro, 10K, pay now

Tue Feb 18 2025 10:35:48 GMT+0000 (Coordinated Universal Time)

Victim #167

I also want to reach an agreement with you as soon as possible, because our company still knows this matter to the big boss, only some middle-level leaders have known this matter, we still have to find ways to cover up these losses, too much money can not be paid from the company. If the biggest boss knew about it, a lot of people would be punished

Tue Feb 18 2025 10:42:45 GMT+0000 (Coordinated Universal Time)

Victim #167

did you understand me?

Tue Feb 18 2025 10:44:23 GMT+0000 (Coordinated Universal Time)

LOCKBIT

then I can up the price to 50k so that it found out the big boss, if I have nothing to talk about with you

Tue Feb 18 2025 10:48:13 GMT+0000 (Coordinated Universal Time)

LOCKBIT

I know your company revenue, and I ask for a small amount

Tue Feb 18 2025 10:49:44 GMT+0000 (Coordinated Universal Time)

LOCKBIT

don't bargain with me, it will only get worse

Tue Feb 18 2025 10:50:35 GMT+0000 (Coordinated Universal Time)

Victim #167

not any, more discount?

Tue Feb 18 2025 10:52:15 GMT+0000 (Coordinated Universal Time)

LOCKBIT

15k less doesn't interest me

Tue Feb 18 2025 10:52:17 GMT+0000 (Coordinated Universal Time)

LOCKBIT

you already have a 50% discount

Tue Feb 18 2025 10:53:33 GMT+0000 (Coordinated Universal Time)

LOCKBIT

you don't want to get fired for doing a bad job.

Tue Feb 18 2025 10:55:14 GMT+0000 (Coordinated Universal Time)

Victim #167

yes,

Tue Feb 18 2025 10:56:23 GMT+0000 (Coordinated Universal Time)

Victim #167

There is too much money that we cannot access and that we, as workers, cannot pay for ourselves

Tue Feb 18 2025 10:59:09 GMT+0000 (Coordinated Universal Time)

LOCKBIT

ok, good luck

Tue Feb 18 2025 10:59:58 GMT+0000 (Coordinated Universal Time)

Victim #167

I mean, too much money, we don't have a good reason to lend it out, we have to come up with a good reason,

Tue Feb 18 2025 11:01:08 GMT+0000 (Coordinated Universal Time)

LOCKBIT

you have time, I'm not in a hurry

Tue Feb 18 2025 11:02:20 GMT+0000 (Coordinated Universal Time)

Victim #167

i still want to know how How did you attack our company? By what means

Tue Feb 18 2025 11:03:47 GMT+0000 (Coordinated Universal Time)

LOCKBIT

you will know out after payment

Tue Feb 18 2025 11:05:49 GMT+0000 (Coordinated Universal Time)

Victim #167

13K? okay?

Tue Feb 18 2025 11:06:12 GMT+0000 (Coordinated Universal Time)

Victim #167

If you can, I will prepare the money for you,

Tue Feb 18 2025 11:08:14 GMT+0000 (Coordinated Universal Time)

LOCKBIT

oh, i can't

Tue Feb 18 2025 11:08:26 GMT+0000 (Coordinated Universal Time)

Victim #167

allright, told me how to pay u? with BTC or USDT?

Tue Feb 18 2025 11:09:15 GMT+0000 (Coordinated Universal Time)

LOCKBIT

btc only

Tue Feb 18 2025 11:09:33 GMT+0000 (Coordinated Universal Time)

Victim #167

I will find a professional and pay you

Tue Feb 18 2025 11:10:22 GMT+0000 (Coordinated Universal Time)

LOCKBIT

ok

Tue Feb 18 2025 11:13:20 GMT+0000 (Coordinated Universal Time)

Victim #167

send me your wallte

Tue Feb 18 2025 11:13:20 GMT+0000 (Coordinated Universal Time)

LOCKBIT

1KNAZRC9ogEEE9doTggQomaswUGygaNDhS

Tue Feb 18 2025 11:14:37 GMT+0000 (Coordinated Universal Time)

Victim #167

if i pay you you can send me 2 decryptor esxi and windows?

Tue Feb 18 2025 11:15:44 GMT+0000 (Coordinated Universal Time)

Victim #167

and told me Where are the loopholes?

Tue Feb 18 2025 11:17:25 GMT+0000 (Coordinated Universal Time)

LOCKBIT

yes, 2 decryptor for esxi and win

Tue Feb 18 2025 11:21:51 GMT+0000 (Coordinated Universal Time)

LOCKBIT

alexk Bb123456

Tue Feb 18 2025 11:25:35 GMT+0000 (Coordinated Universal Time)

LOCKBIT

nice pwd

Tue Feb 18 2025 11:25:45 GMT+0000 (Coordinated Universal Time)

Victim #167

what mean?

Tue Feb 18 2025 11:26:17 GMT+0000 (Coordinated Universal Time)

LOCKBIT

weak passwords

Tue Feb 18 2025 11:30:45 GMT+0000 (Coordinated Universal Time)

LOCKBIT

everywhere

Tue Feb 18 2025 11:30:59 GMT+0000 (Coordinated Universal Time)

Victim #167

hi pls comfirm 0.1567?

Tue Feb 18 2025 11:31:16 GMT+0000 (Coordinated Universal Time)

LOCKBIT

right

Tue Feb 18 2025 11:32:31 GMT+0000 (Coordinated Universal Time)

Victim #167

Where are the loopholes? how did you find our server? We want to fix the leak

Tue Feb 18 2025 11:32:36 GMT+0000 (Coordinated Universal Time)

LOCKBIT

traffic one of the managers, I don't remember the first access pc

Tue Feb 18 2025 11:35:45 GMT+0000 (Coordinated Universal Time)

LOCKBIT

remove the admin from the domain and make passwords better

Tue Feb 18 2025 11:36:13 GMT+0000 (Coordinated Universal Time)

LOCKBIT

and this will not happen again

Tue Feb 18 2025 11:36:45 GMT+0000 (Coordinated Universal Time)

Victim #167

thx

Tue Feb 18 2025 11:37:05 GMT+0000 (Coordinated Universal Time)

LOCKBIT

one nas is not enough for backups it is very unreliable

Tue Feb 18 2025 11:39:24 GMT+0000 (Coordinated Universal Time)

Victim #167

what is your good Suggestion

Tue Feb 18 2025 11:40:18 GMT+0000 (Coordinated Universal Time)

LOCKBIT

at least hyper backup for nas to nas

Tue Feb 18 2025 11:40:23 GMT+0000 (Coordinated Universal Time)

LOCKBIT

2 nas backup we do not go to it from the domain

Tue Feb 18 2025 11:41:21 GMT+0000 (Coordinated Universal Time)

LOCKBIT

if you don't want to spend a lot of money on security

Tue Feb 18 2025 11:42:12 GMT+0000 (Coordinated Universal Time)

LOCKBIT

everything in the domain is not safe

Tue Feb 18 2025 11:43:09 GMT+0000 (Coordinated Universal Time)

Victim #167

i aread remember , and market

Tue Feb 18 2025 11:43:09 GMT+0000 (Coordinated Universal Time)

LOCKBIT

ok, waiting for transaction

Tue Feb 18 2025 11:45:18 GMT+0000 (Coordinated Universal Time)

Victim #167

wait pls, and how long time i can get decryptor when i pay you success

Tue Feb 18 2025 11:46:50 GMT+0000 (Coordinated Universal Time)

Victim #167

pls look out your wallet

Tue Feb 18 2025 11:52:09 GMT+0000 (Coordinated Universal Time)

LOCKBIT

After payment I will request it to tech support, he is now online, but he may go away and then it will waiting from an hour to 24 hours

Tue Feb 18 2025 11:52:22 GMT+0000 (Coordinated Universal Time)

LOCKBIT

btc received

Tue Feb 18 2025 11:55:28 GMT+0000 (Coordinated Universal Time)

Victim #167

okay can you clearn other chat history ,

Tue Feb 18 2025 11:56:37 GMT+0000 (Coordinated Universal Time)

Victim #167

We've already broken the rules and paid you the money, but we don't want our big boss to know, pls clearn other chat rom history

Tue Feb 18 2025 11:57:43 GMT+0000 (Coordinated Universal Time)

LOCKBIT

okay can you clearn other chat history , - yes, also made a request

Tue Feb 18 2025 12:02:37 GMT+0000 (Coordinated Universal Time)

LOCKBIT

this one is the same ?

Tue Feb 18 2025 12:03:06 GMT+0000 (Coordinated Universal Time)

LOCKBIT

I can't clear it, only delete it

Tue Feb 18 2025 12:03:30 GMT+0000 (Coordinated Universal Time)

Victim #167

pls clearn other chat room about our company ,without this chat rom

Tue Feb 18 2025 12:03:52 GMT+0000 (Coordinated Universal Time)

LOCKBIT

ok

Tue Feb 18 2025 12:05:42 GMT+0000 (Coordinated Universal Time)

Victim #167

Because I was worried that my boss would find out that we had misused company funds, pls under stand me

Tue Feb 18 2025 12:05:44 GMT+0000 (Coordinated Universal Time)

LOCKBIT

no problem

Tue Feb 18 2025 12:05:59 GMT+0000 (Coordinated Universal Time)

LOCKBIT

let's wait for tech support and he will do everything

Tue Feb 18 2025 12:07:08 GMT+0000 (Coordinated Universal Time)

Victim #167

do if fast, pls , and Please delete all chat messages about price, this room

Tue Feb 18 2025 12:07:42 GMT+0000 (Coordinated Universal Time)

Victim #167

We are still trying to figure out how to make up for this money, the company's money was embezzled by us, so we don't want the boss to know about it

Tue Feb 18 2025 12:08:46 GMT+0000 (Coordinated Universal Time)

LOCKBIT

I understand, when we come in, problems are inevitable)

Tue Feb 18 2025 12:15:21 GMT+0000 (Coordinated Universal Time)

Victim #167

i don't want to get fired for doing a bad job.

Tue Feb 18 2025 12:22:03 GMT+0000 (Coordinated Universal Time)

LOCKBIT

this will be a good lesson so that it doesn't happen again

Tue Feb 18 2025 12:22:54 GMT+0000 (Coordinated Universal Time)

Victim #167

allright, The money has been paid to you. Could you please give me a detailed security report

Tue Feb 18 2025 12:42:17 GMT+0000 (Coordinated Universal Time)

Victim #167

Did you take our data,

Tue Feb 18 2025 12:50:10 GMT+0000 (Coordinated Universal Time)

LOCKBIT

I wrote safety tips above

Tue Feb 18 2025 12:56:00 GMT+0000 (Coordinated Universal Time)

LOCKBIT

we're waiting for tech support to get the decryptor and remove the chat.

Tue Feb 18 2025 12:56:31 GMT+0000 (Coordinated Universal Time)

Victim #167

thx

Tue Feb 18 2025 12:56:51 GMT+0000 (Coordinated Universal Time)

Victim #167

did you take out our files?

Tue Feb 18 2025 13:16:30 GMT+0000 (Coordinated Universal Time)

LOCKBIT

no

Tue Feb 18 2025 13:17:56 GMT+0000 (Coordinated Universal Time)

LOCKBIT

there is nothing interesting there)

Tue Feb 18 2025 13:18:25 GMT+0000 (Coordinated Universal Time)

LOCKBIT

check another chat

Tue Feb 18 2025 13:19:14 GMT+0000 (Coordinated Universal Time)

LOCKBIT

del ?

Tue Feb 18 2025 13:19:19 GMT+0000 (Coordinated Universal Time)

Victim #167

iam not in other chat rom it is close?

Tue Feb 18 2025 13:20:09 GMT+0000 (Coordinated Universal Time)

Victim #167

yes allright

Tue Feb 18 2025 13:21:18 GMT+0000 (Coordinated Universal Time)

LOCKBIT

good

Tue Feb 18 2025 13:21:31 GMT+0000 (Coordinated Universal Time)

Victim #167

Please delete the message in this chat room, but do not close it, because I do not have the decryptor yet

Tue Feb 18 2025 13:23:48 GMT+0000 (Coordinated Universal Time)

Victim #167

Let's start a new conversation ,Because I think I still need your help with some technical problems

Tue Feb 18 2025 13:25:18 GMT+0000 (Coordinated Universal Time)

LOCKBIT

create a new chat and i can delete this one

Tue Feb 18 2025 13:32:46 GMT+0000 (Coordinated Universal Time)

Victim #167

now not any other chat room , i have 1id from windows, and 1 id form esxi

Tue Feb 18 2025 13:33:50 GMT+0000 (Coordinated Universal Time)

LOCKBIT

I can't clear the chat, only delete it

Tue Feb 18 2025 13:35:13 GMT+0000 (Coordinated Universal Time)

Victim #167

okay, when i decrypt succuss , you can delet

Tue Feb 18 2025 13:36:03 GMT+0000 (Coordinated Universal Time)

Victim #167

may i ask your support , came back?

Tue Feb 18 2025 13:37:13 GMT+0000 (Coordinated Universal Time)

LOCKBIT

we didn't make it in time, he walked away

Tue Feb 18 2025 13:42:46 GMT+0000 (Coordinated Universal Time)

LOCKBIT

dont worry

Tue Feb 18 2025 13:42:57 GMT+0000 (Coordinated Universal Time)

LOCKBIT

he'll be back

Tue Feb 18 2025 13:43:30 GMT+0000 (Coordinated Universal Time)

Victim #167

okay

Tue Feb 18 2025 13:43:49 GMT+0000 (Coordinated Universal Time)

Victim #167

What do I need to provide for you to build the decryptor

Tue Feb 18 2025 13:52:57 GMT+0000 (Coordinated Universal Time)

LOCKBIT

give me all text from readme files

Tue Feb 18 2025 13:57:13 GMT+0000 (Coordinated Universal Time)

LOCKBIT

windows and esxi

Tue Feb 18 2025 13:57:21 GMT+0000 (Coordinated Universal Time)

Victim #167

all? window readme/

Tue Feb 18 2025 13:57:45 GMT+0000 (Coordinated Universal Time)

Victim #167

Or just any windows read me?

Tue Feb 18 2025 13:58:52 GMT+0000 (Coordinated Universal Time)

Victim #167


Attachment: win and esxi.rar

Tue Feb 18 2025 14:00:41 GMT+0000 (Coordinated Universal Time)

LOCKBIT

ok, this maybe needed

Tue Feb 18 2025 14:02:18 GMT+0000 (Coordinated Universal Time)

Victim #167

I found a random readme for windows and readme inside esxi

Tue Feb 18 2025 14:02:42 GMT+0000 (Coordinated Universal Time)

LOCKBIT

right

Tue Feb 18 2025 14:03:15 GMT+0000 (Coordinated Universal Time)

Victim #167

wait you good news

Tue Feb 18 2025 14:03:52 GMT+0000 (Coordinated Universal Time)

LOCKBIT

tech support will come, he is the boss,will send the decryptor here and write everything

Tue Feb 18 2025 14:07:57 GMT+0000 (Coordinated Universal Time)

LOCKBIT

don't worry, you have to wait for it

Tue Feb 18 2025 14:08:28 GMT+0000 (Coordinated Universal Time)

LOCKBIT

Procedure for decrypting ESXi: - log in to vCenter - enable ssh access to ESXi - upload decryptor to ESXi via WinSCP or FileZilla; navigate to /tmp folder - login to ssh with root privileges - set permissions to run the decryptor with the command - chmod 777 decrypt - launch decryptor ./decrypt - follow the first method of decrypting by viewing the log file: tail -f /tmp/decrypt.llg, wait for the message at the end of the log - Your system is decrypted - the second way is to check the presence on the disk file decrypt.pid command ls, which protects the decryptor from the restart - the third way - ps | grep decrypt, as soon as decrypt.pid will be removed from the disk, or decrypt will disappear from the running processes, decrypt is complete - check the decrypt.llg log file and see the message at the end that the system was successfully decrypted "Your system is decrypted" - turn on virtual machines in ESXi You cannot run multiple copies of a decryptor at the same time. After launching, the decryptor deletes the executable file and is demonetized, so that you cannot run the decryptor again and damage the files, this is normal. If you have more than one ESXi host then you should not run the decryptor on all hosts simultaneously, make the decryption alternately, in the case of simultaneous operation of two decryptors may corrupt files and not be able to decrypt If any files in another folder stay crypted, please use this command with path Example: ./decrypt -i /tmp/files1/

Tue Feb 18 2025 14:09:59 GMT+0000 (Coordinated Universal Time)

LOCKBIT

I'll go, be here tomorrow, hope by this time all solved

Tue Feb 18 2025 14:13:20 GMT+0000 (Coordinated Universal Time)

Victim #167

if you go left, other support can see the message? and send decryptor? or need wait for you came back

Tue Feb 18 2025 14:27:17 GMT+0000 (Coordinated Universal Time)

LOCKBIT

i sent a request, he write to you without me

Tue Feb 18 2025 14:28:30 GMT+0000 (Coordinated Universal Time)

LOCKBIT

I think he will be here soon

Tue Feb 18 2025 14:28:51 GMT+0000 (Coordinated Universal Time)

LOCKBIT

wait for him

Tue Feb 18 2025 14:29:22 GMT+0000 (Coordinated Universal Time)

Victim #167

okay

Tue Feb 18 2025 14:29:41 GMT+0000 (Coordinated Universal Time)

Victim #167

hello ?

Tue Feb 18 2025 16:04:09 GMT+0000 (Coordinated Universal Time)

Victim #167

here?

Tue Feb 18 2025 17:59:31 GMT+0000 (Coordinated Universal Time)

Victim #167


Attachment: win and esxi.rar

Tue Feb 18 2025 18:00:28 GMT+0000 (Coordinated Universal Time)

LOCKBIT

windows decryptor

Tue Feb 18 2025 20:41:57 GMT+0000 (Coordinated Universal Time)

LOCKBIT


Attachment: LBB_decryptor_631B165109D16138.zip

Tue Feb 18 2025 20:42:02 GMT+0000 (Coordinated Universal Time)

LOCKBIT

esxi decryptor

Tue Feb 18 2025 20:42:52 GMT+0000 (Coordinated Universal Time)

LOCKBIT


Attachment: decrypt_ESXI_X64.7z

Tue Feb 18 2025 20:42:55 GMT+0000 (Coordinated Universal Time)

Victim #167

close the room if i have any thing i will find you by other chat rooms

Tue Feb 18 2025 21:24:21 GMT+0000 (Coordinated Universal Time)

LOCKBIT

ok, good luck

Wed Feb 19 2025 01:43:44 GMT+0000 (Coordinated Universal Time)

Victim #167

thx

Wed Feb 19 2025 01:43:56 GMT+0000 (Coordinated Universal Time)

End of chat