YUKITA.com
Speaking with LOCKBIT
Victim #192
You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat. If your archive weighs more than 10 megabytes, please use our file sharing service. http://lockbitfss2w7co3ij6am6wox4xcurtgwukunx3yubcoe5cbxiqakxqd.onion http://lockbitfsvf75glg226he5inkfgtuoakt4vgfhd7nfgghx5kwz5zo3ad.onion http://lockbitfskq2fxclyfrop5yizyxpzu65w7pphsgthawcyb4gd27x62id.onion For security reasons we do not click on other links you send in chat. Please wait for a reply, sometimes it takes several hours due to possible time zone differences.
Tue Mar 11 2025 03:15:18 GMT+0000 (Coordinated Universal Time)
Victim #192
hi,how much?
Tue Mar 11 2025 03:18:05 GMT+0000 (Coordinated Universal Time)
Victim #192
http://lockbitfskq2fxclyfrop5yizyxpzu65w7pphsgthawcyb4gd27x62id.onion/r/R5koM7v74e#ppTe+oZp0sjRZcdREWW5P4Bi5XtM/05wU7Jd4tuNUec=
Tue Mar 11 2025 03:19:45 GMT+0000 (Coordinated Universal Time)
Victim #192
test the file please
Tue Mar 11 2025 03:32:53 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Hello
Tue Mar 11 2025 04:12:32 GMT+0000 (Coordinated Universal Time)
LOCKBIT
wait
Tue Mar 11 2025 04:12:39 GMT+0000 (Coordinated Universal Time)
Victim #192
hi,how much?
Tue Mar 11 2025 07:35:29 GMT+0000 (Coordinated Universal Time)
LOCKBIT
0.25 BTC all network. Wait we prepare test for you
Tue Mar 11 2025 09:53:38 GMT+0000 (Coordinated Universal Time)
Victim #192
test please
Wed Mar 12 2025 08:15:14 GMT+0000 (Coordinated Universal Time)
LOCKBIT
please wait
Wed Mar 12 2025 10:08:00 GMT+0000 (Coordinated Universal Time)
Victim #192
so, how about the test file?
Fri Mar 14 2025 02:19:16 GMT+0000 (Coordinated Universal Time)
LOCKBIT
in 15 min
Fri Mar 14 2025 08:19:16 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Fri Mar 14 2025 08:43:24 GMT+0000 (Coordinated Universal Time)
Victim #192
Hi there. I got a question here wish you would answer truthfully
Fri Mar 14 2025 15:03:54 GMT+0000 (Coordinated Universal Time)
Victim #192
You mentioned 0.25 coins for 'all network' before. In fact, we have 3 branch sites taken down, with multiple networks, in one shot. I would like to know if this 'all network' includes all 3 sites and their local networks? Or the 0.25 btc ransom will only decrypt networks with this chatroom ID, that I will have to pay another 0.25 or even more for other branch offices?
Fri Mar 14 2025 15:11:10 GMT+0000 (Coordinated Universal Time)
LOCKBIT
0.25 BTC all network and all branch
Fri Mar 14 2025 15:36:24 GMT+0000 (Coordinated Universal Time)
LOCKBIT
We will give you a decryption tool it is one for all ID
Fri Mar 14 2025 15:39:05 GMT+0000 (Coordinated Universal Time)
Victim #192
understood. we're already preparing the coins and surely you know how difficult it is in our region. any chance of a cheaper price?
Fri Mar 14 2025 15:42:27 GMT+0000 (Coordinated Universal Time)
LOCKBIT
we can give you discount 10%
Fri Mar 14 2025 16:28:19 GMT+0000 (Coordinated Universal Time)
Victim #192
well fair enough i guess. We will inform you as soon as coins are prepared. I don't see a receiver address in the readme.txt. so i guess you will provide it later?
Sat Mar 15 2025 11:21:39 GMT+0000 (Coordinated Universal Time)
LOCKBIT
I give you BTC address here. When will you be ready to send?
Sat Mar 15 2025 11:33:31 GMT+0000 (Coordinated Universal Time)
Victim #192
I would say in 2-3 days. we're trying to sort out how exchange this amount of currency into btc under heavy regulation. it is weekend here so everything is slow.
Sat Mar 15 2025 11:35:19 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Ok, we are expecting your payment on Monday.
Sat Mar 15 2025 11:38:21 GMT+0000 (Coordinated Universal Time)
Victim #192
OK. i have informed others.
Sat Mar 15 2025 11:41:00 GMT+0000 (Coordinated Universal Time)
Victim #192
btw, any chance of getting a one-time, unique chatroom link + ID for this chat? the readme.txt was exposed to a 3rd party and I clearly know someone else is logging on and off this chatroom occasionally.
Sat Mar 15 2025 11:42:20 GMT+0000 (Coordinated Universal Time)
Victim #192
the pdf.7z you sent before should not be given by another company. but they had the readme before so they do have the chat accesskey and ID
Sat Mar 15 2025 11:45:13 GMT+0000 (Coordinated Universal Time)
LOCKBIT
This is a secret chat that only you can see. A third party also comes in but they have a different chat. This chat is only available to you.
Sat Mar 15 2025 11:46:29 GMT+0000 (Coordinated Universal Time)
Victim #192
yea i know that. but in fact only intervened this chat yesterday. the "test please" and "how much" part wasnt replied by me. I guess you can tell by the difference in communication style. Someone got into this chat before us and tried to sell us the decryptor lol
Sat Mar 15 2025 11:49:27 GMT+0000 (Coordinated Universal Time)
Victim #192
we had trouble in finding methods of paying btc so we did not reply anything but just watched the chat. Then my team asked me to inquire about the 3 branch and network things etc.
Sat Mar 15 2025 11:50:37 GMT+0000 (Coordinated Universal Time)
Victim #192
This is a hard lesson tho. My colleagues showed the readmetxt to a 3rd party company. I was not there when the incident happened so everything came up a bit late. That's why i asked if we could have a new unique chatroom address+ID, and delete all other links in the readme.txt so nobody will see these messages again.
Sat Mar 15 2025 11:52:32 GMT+0000 (Coordinated Universal Time)
LOCKBIT
In this chat no one sees these messages except me and you. I can make another separate chat if you want, but I will delete all chats after payment.
Sat Mar 15 2025 11:54:49 GMT+0000 (Coordinated Universal Time)
Victim #192
just letting you know that someone else used the same TOR link, same Key and same ID to communicate with you first. It was not me. They showed the decrypted pds file to us right after you sent it in the chat.
Sat Mar 15 2025 11:57:31 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Download link http://lockbitfss2w7co3ij6am6wox4xcurtgwukunx3yubcoe5cbxiqakxqd.onion/r/aN3KetrSoq#N01VKsXg6G8/BwJUM7k9mBd7soZCgx3HCpDshCxZ75w=
Sat Mar 15 2025 11:58:58 GMT+0000 (Coordinated Universal Time)
Victim #192
oops a messge i sent was missing? i said it's fine if you don't create a new chat and delete old links for us. Its just an issue between us and the 3rd party company anyway. We're still preparing and trying to make the payment happen on monday.
Sat Mar 15 2025 11:59:06 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Deletion link http://lockbitfss2w7co3ij6am6wox4xcurtgwukunx3yubcoe5cbxiqakxqd.onion/delete/aN3KetrSoq/fVPesQow9zAF9KHbWW5JPxUjkQVHGKWM
Sat Mar 15 2025 11:59:43 GMT+0000 (Coordinated Universal Time)
LOCKBIT
This new link for new secret chat
Sat Mar 15 2025 12:00:21 GMT+0000 (Coordinated Universal Time)
Victim #192
and also ,this link:http://lockbitspyakyequybgwgwauhzqxx7ba2gh3lmlj3zyeuaknrexdzfid.onion it was not us too :( we watched the chat but never replied. it was the 3rd party company tried to get the test file
Sat Mar 15 2025 12:00:58 GMT+0000 (Coordinated Universal Time)
LOCKBIT
I give you new link for new chat
Sat Mar 15 2025 12:01:47 GMT+0000 (Coordinated Universal Time)
Victim #192
yea i'm logging into it. i've deleted the link already
Sat Mar 15 2025 12:02:04 GMT+0000 (Coordinated Universal Time)
LOCKBIT
ok
Sat Mar 15 2025 12:02:24 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Don't worry, after payment you will receive a decryptor tool and instructions
Sat Mar 15 2025 12:03:00 GMT+0000 (Coordinated Universal Time)
LOCKBIT
We expect payment from you today.
Tue Mar 25 2025 08:27:07 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Okay. We also downloaded some documents from your computers, now we will publish them in the public domain. And we will start writing to your clients that your data was stolen and they will be published.
Wed Mar 26 2025 07:41:27 GMT+0000 (Coordinated Universal Time)
End of chat