Victim #212

tian-i.com.tw

Speaking with LOCKBIT

Victim #212

You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat. If your archive weighs more than 10 megabytes, please use our file sharing service. http://lockbitfss2w7co3ij6am6wox4xcurtgwukunx3yubcoe5cbxiqakxqd.onion http://lockbitfsvf75glg226he5inkfgtuoakt4vgfhd7nfgghx5kwz5zo3ad.onion http://lockbitfskq2fxclyfrop5yizyxpzu65w7pphsgthawcyb4gd27x62id.onion For security reasons we do not click on other links you send in chat. Please wait for a reply, sometimes it takes several hours due to possible time zone differences.

Mon Mar 24 2025 15:30:18 GMT+0000 (Coordinated Universal Time)

Victim #212

hello how much

Thu Mar 27 2025 02:42:20 GMT+0000 (Coordinated Universal Time)

LOCKBIT

Hi, 20k$ in bitcoin

Thu Mar 27 2025 06:03:44 GMT+0000 (Coordinated Universal Time)

Victim #212

can you test for me?

Thu Mar 27 2025 06:21:55 GMT+0000 (Coordinated Universal Time)

Victim #212


Attachment: vmware-39.log.rar

Thu Mar 27 2025 07:42:17 GMT+0000 (Coordinated Universal Time)

Victim #212


Attachment: RunMe使用說明書.pdf.rar

Thu Mar 27 2025 08:29:09 GMT+0000 (Coordinated Universal Time)

LOCKBIT


Attachment: RunMe使用說明書.pdf.zip

Thu Mar 27 2025 08:37:53 GMT+0000 (Coordinated Universal Time)

Victim #212

and other one?

Thu Mar 27 2025 08:38:16 GMT+0000 (Coordinated Universal Time)

LOCKBIT

vmware-39.log.rar This file is encrypted with a different ID

Thu Mar 27 2025 08:40:20 GMT+0000 (Coordinated Universal Time)

Victim #212

i know , you cant decrypt?

Thu Mar 27 2025 08:40:57 GMT+0000 (Coordinated Universal Time)

Victim #212

i want to know, can you decrypt my network?

Thu Mar 27 2025 08:42:08 GMT+0000 (Coordinated Universal Time)

Victim #212

its a different id but you should be able to test it for me?

Thu Mar 27 2025 08:44:21 GMT+0000 (Coordinated Universal Time)

Victim #212

and , is your offer to decrypt our entire network?

Thu Mar 27 2025 08:51:42 GMT+0000 (Coordinated Universal Time)

LOCKBIT

To decrypt a file encrypted with a different identifier, you must enter the chat with this identifier

Thu Mar 27 2025 08:56:03 GMT+0000 (Coordinated Universal Time)

Victim #212

and , is your offer to decrypt our entire network?

Thu Mar 27 2025 08:56:49 GMT+0000 (Coordinated Universal Time)

LOCKBIT

Yes

Thu Mar 27 2025 08:57:36 GMT+0000 (Coordinated Universal Time)

Victim #212

Do these different ids belong to you?

Thu Mar 27 2025 08:57:50 GMT+0000 (Coordinated Universal Time)

LOCKBIT

Yes

Thu Mar 27 2025 10:37:30 GMT+0000 (Coordinated Universal Time)

Victim #212

hello, Hello, I am a technician, I would like to ask you if you need to log in to the corresponding ID chat room?

Sat Apr 05 2025 13:10:55 GMT+0000 (Coordinated Universal Time)

Victim #212

If I need to decrypt A computer, I need to use the README in A computer and log in the chat room to find you according to the ID number in it. You can't use anything else, right

Sat Apr 05 2025 13:12:32 GMT+0000 (Coordinated Universal Time)

LOCKBIT

you made a test decrypt, after payment you can return all esxi and files.

Sat Apr 05 2025 13:23:47 GMT+0000 (Coordinated Universal Time)

Victim #212

i want to know how to use tools, and Does the decryption program have to be used on esxi systems? Or just any linux system?

Sat Apr 05 2025 13:24:59 GMT+0000 (Coordinated Universal Time)

LOCKBIT

yes esxi and win

Sat Apr 05 2025 13:26:26 GMT+0000 (Coordinated Universal Time)

Victim #212

I mean, is your decryption process complicated? Because of this I need to report to my administrator, we need to make a technical report for him to see ,esxi decryptor must run under esxi system, or can it be decrypted under any linux system, if I upload the encrypted VMDK file to a linux system for decryption, can the decryption program decrypt normally? Not an esxi system

Sat Apr 05 2025 13:32:04 GMT+0000 (Coordinated Universal Time)

LOCKBIT

Procedure for decrypting ESXi: - log in to vCenter - enable ssh access to ESXi - upload decryptor to ESXi via WinSCP or FileZilla; navigate to /tmp folder - login to ssh with root privileges - set permissions to run the decryptor with the command - chmod 777 decrypt - launch decryptor ./decrypt - follow the first method of decrypting by viewing the log file: tail -f /tmp/decrypt.llg, wait for the message at the end of the log - Your system is decrypted - the second way is to check the presence on the disk file decrypt.pid command ls, which protects the decryptor from the restart - the third way - ps | grep decrypt, as soon as decrypt.pid will be removed from the disk, or decrypt will disappear from the running processes, decrypt is complete - check the decrypt.llg log file and see the message at the end that the system was successfully decrypted "Your system is decrypted" - turn on virtual machines in ESXi You cannot run multiple copies of a decryptor at the same time. After launching, the decryptor deletes the executable file and is demonetized, so that you cannot run the decryptor again and damage the files, this is normal. If you have more than one ESXi host then you should not run the decryptor on all hosts simultaneously, make the decryption alternately, in the case of simultaneous operation of two decryptors may corrupt files and not be able to decrypt If any files in another folder stay crypted, please use this command with path Example: ./decrypt -i /tmp/files1/

Sat Apr 05 2025 13:32:29 GMT+0000 (Coordinated Universal Time)

LOCKBIT

you can use linux system

Sat Apr 05 2025 13:33:39 GMT+0000 (Coordinated Universal Time)

Victim #212

If we have purchased your decryptor, when you are online we have an inquiry about decryption technology, can you help? Please understand me, because I have to write a report to the boss, they will decide whether to buy or not

Sat Apr 05 2025 13:38:38 GMT+0000 (Coordinated Universal Time)

LOCKBIT

of course we stay online and are ready to help you with a technical issue

Sat Apr 05 2025 13:41:46 GMT+0000 (Coordinated Universal Time)

LOCKBIT

you won't have a problem, it's very simple. For win you only need to run exe decryptor, same with Linux

Sat Apr 05 2025 13:43:15 GMT+0000 (Coordinated Universal Time)

Victim #212

Promise not to take money to close the window,?

Sat Apr 05 2025 13:45:53 GMT+0000 (Coordinated Universal Time)

LOCKBIT

https://www.youtube.com/watch?v=KLg-T8r-dGw

Sat Apr 05 2025 13:48:05 GMT+0000 (Coordinated Universal Time)

LOCKBIT

We have 5 years of work and a reputation, we are not a scam

Sat Apr 05 2025 13:49:21 GMT+0000 (Coordinated Universal Time)

Victim #212

I'll put that in my work report

Sat Apr 05 2025 13:49:56 GMT+0000 (Coordinated Universal Time)

LOCKBIT

after payment you will receive a decryptor and tech support if needed. And we won't bother you again

Sat Apr 05 2025 13:51:23 GMT+0000 (Coordinated Universal Time)

LOCKBIT

whether you pay or not, I don't care. I love my job and have money

Sat Apr 05 2025 13:53:36 GMT+0000 (Coordinated Universal Time)

LOCKBIT

we have rules, we can't make the price lower, made minimum price for you

Sat Apr 05 2025 14:02:16 GMT+0000 (Coordinated Universal Time)

Victim #212

i and my partner will reply you soon

Sat Apr 05 2025 14:08:24 GMT+0000 (Coordinated Universal Time)

Victim #212

I want to ask, we have several different windows encryption ID is not the same, use the same decryptor, or different ID decryptor?

Sat Apr 05 2025 14:20:05 GMT+0000 (Coordinated Universal Time)

LOCKBIT

write the extensions after payment, my boss will prepare a decryptor for them

Sat Apr 05 2025 14:24:34 GMT+0000 (Coordinated Universal Time)

Victim #212

How long can I get the decryptor after payment? Do you need me to provide anything

Sat Apr 05 2025 15:47:03 GMT+0000 (Coordinated Universal Time)

LOCKBIT

only provide extensions,after payment within 24 hours, usually faster. we'll wait for the boss, he'll send you the decryptor here

Sat Apr 05 2025 16:07:53 GMT+0000 (Coordinated Universal Time)

Victim #212


Attachment: enceyptfile and readme.rar

Sat Apr 05 2025 16:12:54 GMT+0000 (Coordinated Universal Time)

LOCKBIT

+

Sat Apr 05 2025 16:20:31 GMT+0000 (Coordinated Universal Time)

Victim #212

hi, did you delet my NAS files ?>

Mon Apr 07 2025 11:33:30 GMT+0000 (Coordinated Universal Time)

LOCKBIT

no

Mon Apr 07 2025 15:50:49 GMT+0000 (Coordinated Universal Time)

End of chat