zc-oa.com
Speaking with LOCKBIT
Victim #213
You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat. If your archive weighs more than 10 megabytes, please use our file sharing service. http://lockbitfss2w7co3ij6am6wox4xcurtgwukunx3yubcoe5cbxiqakxqd.onion http://lockbitfsvf75glg226he5inkfgtuoakt4vgfhd7nfgghx5kwz5zo3ad.onion http://lockbitfskq2fxclyfrop5yizyxpzu65w7pphsgthawcyb4gd27x62id.onion For security reasons we do not click on other links you send in chat. Please wait for a reply, sometimes it takes several hours due to possible time zone differences.
Wed Mar 26 2025 01:07:49 GMT+0000 (Coordinated Universal Time)
Victim #213
Hi our server got attached by LockBit 4.0
Wed Mar 26 2025 01:10:24 GMT+0000 (Coordinated Universal Time)
Victim #213
735C3C1C815E3EFBA5E4B628C5E8200F This is the personal identifier provided
Wed Mar 26 2025 01:12:25 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Okay
Wed Mar 26 2025 04:16:23 GMT+0000 (Coordinated Universal Time)
LOCKBIT
this price is 8,000 USDT
Wed Mar 26 2025 04:19:09 GMT+0000 (Coordinated Universal Time)
LOCKBIT
if u pay it completed whithin 72 hours,u can get discount
Wed Mar 26 2025 04:26:11 GMT+0000 (Coordinated Universal Time)
LOCKBIT
only 6,000 USDT
Wed Mar 26 2025 04:26:27 GMT+0000 (Coordinated Universal Time)
LOCKBIT
We will never cheat our customers. Promise will definitely do it.
Wed Mar 26 2025 04:26:48 GMT+0000 (Coordinated Universal Time)
Victim #213
Are you able to help locate the system vulnerability, so they can protect themselves from further attacks
Wed Mar 26 2025 04:32:33 GMT+0000 (Coordinated Universal Time)
LOCKBIT
If you want to buy intrusion paths and protection suggestions. A USDT of 10,000 must be paid.
Wed Mar 26 2025 04:33:50 GMT+0000 (Coordinated Universal Time)
LOCKBIT
We will provide textual intrusion paths and defense advice for you.
Wed Mar 26 2025 04:34:51 GMT+0000 (Coordinated Universal Time)
Victim #213
Wed Mar 26 2025 05:46:33 GMT+0000 (Coordinated Universal Time)
LOCKBIT
just a moment. boss will decrypt test within 24 hours
Wed Mar 26 2025 05:48:19 GMT+0000 (Coordinated Universal Time)
Victim #213
So I have to wait for 24 hours?
Wed Mar 26 2025 06:02:19 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Sure,within 24h
Wed Mar 26 2025 06:03:16 GMT+0000 (Coordinated Universal Time)
Victim #213
ID: 735C3C1C815E3EFB489A941DA802E967 Here is the ID for this file, also help me ask if they can provide the secret key for this ID only, so we can test it on our side as well
Wed Mar 26 2025 06:10:58 GMT+0000 (Coordinated Universal Time)
LOCKBIT
??
Wed Mar 26 2025 06:13:57 GMT+0000 (Coordinated Universal Time)
LOCKBIT
u need use personal id access
Wed Mar 26 2025 06:14:19 GMT+0000 (Coordinated Universal Time)
Victim #213
Can you explain what you mean? I'm just passing on message
Wed Mar 26 2025 06:15:32 GMT+0000 (Coordinated Universal Time)
LOCKBIT
You don't need to tell me the decrypt id. We already know when you visit.
Wed Mar 26 2025 06:19:01 GMT+0000 (Coordinated Universal Time)
LOCKBIT
these two id from same company
Wed Mar 26 2025 06:22:02 GMT+0000 (Coordinated Universal Time)
Victim #213
ok, sounds good
Wed Mar 26 2025 06:23:02 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Wed Mar 26 2025 06:44:45 GMT+0000 (Coordinated Universal Time)
Victim #213
They validated the file and said it is correct. What's the best price you can do for decryption?
Wed Mar 26 2025 07:13:17 GMT+0000 (Coordinated Universal Time)
LOCKBIT
If you want to buy intrusion paths and protection suggestions. A USDT of 10,000 must be paid.
Wed Mar 26 2025 07:33:30 GMT+0000 (Coordinated Universal Time)
LOCKBIT
all data and intrusion paths
Wed Mar 26 2025 07:34:15 GMT+0000 (Coordinated Universal Time)
LOCKBIT
if u pay it completed whithin 72 hours,u can get discount. only 6,000 USDT,just decrypt program
Wed Mar 26 2025 07:40:12 GMT+0000 (Coordinated Universal Time)
Victim #213
Can you give a better price just for the decrypt program
Wed Mar 26 2025 20:32:10 GMT+0000 (Coordinated Universal Time)
LOCKBIT
No
Wed Mar 26 2025 22:00:44 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Our team celebrates the achievement of new milestones. Offering customers, your lowest decryption price is 4,000 USDT.
Fri Mar 28 2025 07:20:49 GMT+0000 (Coordinated Universal Time)
Victim #213
Thank you for your update. Unfortunately, the offered price is still way beyond our budget. We are currently facing severe financial difficulties, potentially approaching bankruptcy. Though I got so much pressure from my boss to get the files back, but we simply do not have the funds to meet the current decryption price. While our team is working on transcribing printed backups into digital format, the encrypted files remain extremely valuable to us. I would truly appreciate any further flexibility you can offer on the pricing.
Sat Mar 29 2025 03:40:48 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Have you given up?
Sat Mar 29 2025 10:17:47 GMT+0000 (Coordinated Universal Time)
Victim #213
What do you mean?
Sun Mar 30 2025 06:59:43 GMT+0000 (Coordinated Universal Time)
LOCKBIT
If you choose to give up paying the ransom, we will follow up.
Sun Mar 30 2025 07:02:58 GMT+0000 (Coordinated Universal Time)
LOCKBIT
We will conduct subsequent attacks, incidents and data disclosure.
Sun Mar 30 2025 07:03:43 GMT+0000 (Coordinated Universal Time)
Victim #213
I really need to get the files back, but your request is far beyond what the company are able to pay. As I told you, the company is on the edge of bankruptcy, and I have not been paid in over two months. I only make $300 a month, and if I could, I would spend my own money to help get a resolution. I am therefore asking for your understanding. Can you speak to your boss and possibly offer something more reasonable given our situation?
Sun Mar 30 2025 23:26:50 GMT+0000 (Coordinated Universal Time)
LOCKBIT
i don't care. u are lier
Mon Mar 31 2025 03:07:11 GMT+0000 (Coordinated Universal Time)
LOCKBIT
if u cant pay ransom. after 24 hours,price is recovery. the lowest price is 6,000 USDT
Mon Mar 31 2025 23:14:25 GMT+0000 (Coordinated Universal Time)
LOCKBIT
what's the result?
Wed Apr 02 2025 05:28:18 GMT+0000 (Coordinated Universal Time)
Victim #213
Mutual trust is important in this incident, the way you responded makes it difficult for us to trust you. Making us concern that even if we pay, future attacks might still happen. Regarding you demand, the requested price is far beyond our budget due to stated reasons. It appears you have a lot of power in deciding the price for ransom, so I hope we can come to a fair deal in these up coming days. By the way, you sounds educated, I assume this is just a side hustle for you. I'm curious what do you do other than this job and how did you get into this business.
Wed Apr 02 2025 23:20:35 GMT+0000 (Coordinated Universal Time)
LOCKBIT
We are a member of the world's largest ransomware alliance. You must doubt our integrity. After receiving the ransom, your data will be restored. We will not attack again. If you do not pay the ransom, we will launch a follow-up attack.
Fri Apr 04 2025 03:17:48 GMT+0000 (Coordinated Universal Time)
LOCKBIT
We follow the rules strictly, you can read our affiliate program. After reaching an agreement, we will give you everything.
Fri Apr 04 2025 03:21:31 GMT+0000 (Coordinated Universal Time)
LOCKBIT
We are very busy. If no transaction agreement is reached in the next few days, I will check and reply to your message once every 24 hours.
Fri Apr 04 2025 03:22:30 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Through our conversation, you should be a professional agent, perhaps a person in a cybersecurity profession. A professional businessman. First, we are honest. Second, our five tests need to be well paid. Third, our alliance has a strict plan, and credibility is important to us. Third, as a professional negotiator, you should know that lying cannot reduce the ransom price for you. This strategy is very poor. Fourth, we have the data of this target, and we know that these ransoms are not expensive for Chinese companies.
Fri Apr 04 2025 03:31:19 GMT+0000 (Coordinated Universal Time)
Victim #213
I'm not trying to deceive you but just passing on what they wanted me to say. I can tell you they still want the files back. I want this deal to happen just as you are. Since I'm earning commission fees from them, and you probably get some reward from closing a deal too.
Mon Apr 14 2025 23:29:54 GMT+0000 (Coordinated Universal Time)
LOCKBIT
All this is normal, a normal transaction. We are honest and we can ensure decryption after receiving the ransom. If the ransom is too low, we will not decrypt it.
Tue Apr 15 2025 08:00:15 GMT+0000 (Coordinated Universal Time)
LOCKBIT
We cannot break the price rules. Otherwise no one will give a reasonable ransom price. Our five tests require excellent rewards.
Tue Apr 15 2025 08:04:58 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Decryptor will delete at - 2025-05-03 14:41:10
Tue Apr 15 2025 08:14:32 GMT+0000 (Coordinated Universal Time)
Victim #213
What are you referring to with the term "five tests"?
Mon Apr 21 2025 19:42:46 GMT+0000 (Coordinated Universal Time)
Victim #213
I talked to them again, they offered 1000 USDT.
Mon Apr 21 2025 19:43:53 GMT+0000 (Coordinated Universal Time)
LOCKBIT
?
Mon Apr 21 2025 19:54:42 GMT+0000 (Coordinated Universal Time)
LOCKBIT
your lowest decryption price is 4,000 USDT.
Mon Apr 21 2025 19:58:41 GMT+0000 (Coordinated Universal Time)
LOCKBIT
If it is below this price, please do not contact me.
Mon Apr 21 2025 19:58:42 GMT+0000 (Coordinated Universal Time)
Victim #213
They offered 1,500 USDT, and was asking for concession from your side
Fri Apr 25 2025 23:43:35 GMT+0000 (Coordinated Universal Time)
LOCKBIT
2500 USDT. This is the lowest price. If you don’t agree, you will lose it forever. The decryption will be deleted soon. You must complete the payment as soon as possible.
Sat Apr 26 2025 04:01:42 GMT+0000 (Coordinated Universal Time)
LOCKBIT
It takes time to contact the boss, you must contact us before 2025-05-01 00:00:00.
Sat Apr 26 2025 04:02:20 GMT+0000 (Coordinated Universal Time)
End of chat