Victim #236

yuanpu.com

Speaking with LOCKBIT

Victim #236

You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat. If your archive weighs more than 10 megabytes, please use our file sharing service. http://lockbitfss2w7co3ij6am6wox4xcurtgwukunx3yubcoe5cbxiqakxqd.onion http://lockbitfsvf75glg226he5inkfgtuoakt4vgfhd7nfgghx5kwz5zo3ad.onion http://lockbitfskq2fxclyfrop5yizyxpzu65w7pphsgthawcyb4gd27x62id.onion For security reasons we do not click on other links you send in chat. Please wait for a reply, sometimes it takes several hours due to possible time zone differences.

Mon Mar 31 2025 05:01:07 GMT+0000 (Coordinated Universal Time)

Victim #236

How much does it cost to decrypt it?

Mon Mar 31 2025 05:02:50 GMT+0000 (Coordinated Universal Time)

Victim #236

~~~ You have been attacked by LockBit 4.0 - the fastest, most stable and immortal ransomware since 2019 ~~~~ >>>>> You must pay us. Tor Browser Links BLOG where the stolen infortmation will be published: ( often times to protect our web sites from ddos attacks we include ACCESS KEY - ADTISZRLVUMXDJ34RCBZFNO6BNKLEYKYS5FZPNNXK4S2RSHOENUA ) http://lockbit3753ekiocyo5epmpy6klmejchjtzddoekjlnt6mu3qh4de2id.onion/ http://lockbit3g3ohd3katajf6zaehxz4h4cnhmz5t735zpltywhwpc6oy3id.onion/ http://lockbit3olp7oetlc4tl5zydnoluphh7fvdt5oa6arcp2757r7xkutid.onion/ http://lockbit435xk3ki62yun7z5nhwz6jyjdp2c64j5vge536if2eny3gtid.onion/ http://lockbit4lahhluquhoka3t4spqym2m3dhe66d6lr337glmnlgg2nndad.onion/ http://lockbit6knrauo3qafoksvl742vieqbujxw7rd6ofzdtapjb4rrawqad.onion/ http://lockbit7ouvrsdgtojeoj5hvu6bljqtghitekwpdy3b6y62ixtsu5jqd.onion/ >>>>> What is the guarantee that we won't scam you? We are the oldest extortion gang on the planet and nothing is more important to us than our reputation. We are not a politically motivated group and want nothing but financial rewards for our work. If we defraud even one client, other clients will not pay us. In 5 years, not a single client has been left dissatisfied after making a deal with us. If you pay the ransom, we will fulfill all the terms we agreed upon during the negotiation process. Treat this situation simply as a paid training session for your system administrators, because it was the misconfiguration of your corporate network that allowed us to attack you. Our pentesting services should be paid for the same way you pay your system administrators' salaries. You can get more information about us on Elon Musk's Twitter at https://twitter.com/hashtag/lockbit?f=live. >>>>> Warning! Do not delete or modify encrypted files, it will lead to irreversible problems with decryption of files! >>>>> Don't go to the police or the FBI for help and don't tell anyone that we attacked you. They will forbid you from paying the ransom and will not help you in any way, you will be left with encrypted files and your business will die. >>>>> When buying bitcoin, do not tell anyone the true purpose of the purchase. Some brokers, especially in the US, do not allow you to buy bitcoin to pay ransom. Communicate any other reason for the purchase, such as: personal investment in cryptocurrency, bitcoin as a gift, paying to buy assets for your business using bitcoin, cryptocurrency payment for consulting services, cryptocurrency payment for any other services, cryptocurrency donations, cryptocurrency donations for Donald Trump to win the election, buying bitcoin to participate in ICO and buy other cryptocurrencies, buying cryptocurrencies to leave an inheritance for your children, or any other purpose for buying cryptocurrency. Also you can use adequate cryptocurrency brokers who do not ask questions for what you buy cryptocurrency. >>>>> After buying cryptocurrency from a broker, store the cryptocurrency on a cold wallet, such as https://electrum.org/ or any other cold cryptocurrency wallet, more details on https://bitcoin.org By paying the ransom from your personal cold cryptocurrency wallet, you will avoid any problems from regulators, police and brokers. >>>>> Don't be afraid of any legal consequences, you were very scared, that's why you followed all our instructions, it's not your fault if you are very scared. Not a single company that paid us has had issues. Any excuses are just for insurance company to not pay on their obligation. >>>>> You need to contact us via TOR darknet sites with your personal ID Download and install Tor Browser https://www.torproject.org/ Write to the chat room and wait for an answer, we'll guarantee a response from us. If you need a unique ID for correspondence with us that no one will know about, ask it in the chat, we will generate a secret chat for you and give you ID via private one-time memos service, no one can find out this ID but you. Sometimes you will have to wait some time for our reply, this is because we have a lot of work and we attack hundreds of companies around the world. Tor Browser personal link for CHAT available only to you: ( often times to protect our web sites from ddos attacks we include ACCESS KEY - ADTISZRLVUMXDJ34RCBZFNO6BNKLEYKYS5FZPNNXK4S2RSHOENUA ) http://e4hwk3w4ztqfkyo6l36ss3tfj4bw2jw4ytkmomkx2ugwjgrs4w3lriid.onion Tor Browser Links for CHAT ( often times to protect our web sites from ddos attacks we include ACCESS KEY - ADTISZRLVUMXDJ34RCBZFNO6BNKLEYKYS5FZPNNXK4S2RSHOENUA ) http://lockbitsprnigidq6imswpysqjg3sewkeagtfbamlybwm7fnonglhlyd.onion http://lockbitspqldd3mm223vmzcvwntd7honhhan3ke72vpnrxexlrsu5ryd.onion http://lockbitsppsg2kfcafzzdettjbgc4tx2cl6tfm4v4py6xtndbhnnhsid.onion http://lockbitsppra2sj6gkfrgtavqds7rcnvhaxdio7jvu2xrozdr2ld3ead.onion http://lockbitspomtxfihje6wepecgif7vuqci6zyl7qgenne5b6lxngf4yqd.onion >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> >>>>> Your personal identifier to communicate with us ID: D4FF894EA0D9F91A40275D72A52D5318 <<<<< >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> >>>>> Want a lamborghini, a ferrari and lots of titty girls? Sign up and start your pentester billionaire journey in 5 minutes with us. ( often times to protect our web sites from ddos attacks we include ACCESS KEY - ADTISZRLVUMXDJ34RCBZFNO6BNKLEYKYS5FZPNNXK4S2RSHOENUA ) http://lockbitapyx2kr5b7ma7qn6ziwqgbrij2czhcbojuxmgnwpkgv2yx2yd.onion http://lockbitapyum2wks2lbcnrovcgxj7ne3ua7hhcmshh3s3ajtpookohqd.onion http://lockbitapp24bvbi43n3qmtfcasf2veaeagjxatgbwtxnsh5w32mljad.onion http://lockbitapo3wkqddx2ka7t45hejurybzzjpos4cpeliudgv35kkizrid.onion http://lockbitapiahy43zttdhslabjvx4q6k24xx7r33qtcvwqehmnnqxy3yd.onion Version: LockBitGreen4.0-rc-577

Mon Mar 31 2025 05:05:00 GMT+0000 (Coordinated Universal Time)

Victim #236

[email protected]

Mon Mar 31 2025 05:06:48 GMT+0000 (Coordinated Universal Time)

Victim #236

hi

Mon Mar 31 2025 07:39:29 GMT+0000 (Coordinated Universal Time)

LOCKBIT

Hello

Mon Mar 31 2025 09:15:02 GMT+0000 (Coordinated Universal Time)

LOCKBIT

0.2 BTC

Mon Mar 31 2025 09:15:50 GMT+0000 (Coordinated Universal Time)

Victim #236

只有一个文件服务器感染,而且我们有历史备份,这个价格是不可接受的。0.02BTC是我们能接受的价格,我们只是一个很小的旅游服务公司支付能力很有限。

Tue Apr 01 2025 02:34:45 GMT+0000 (Coordinated Universal Time)

LOCKBIT

Can make discount 0.15 BTC

Tue Apr 01 2025 04:53:04 GMT+0000 (Coordinated Universal Time)

Victim #236

这是不可能的!如果确定是要这个价格那不用回复了。我们接受1个月的数据损失。老板那边指给了不超过2000美金的权限。我们公司很小甚至都没有IT人员

Tue Apr 01 2025 07:43:12 GMT+0000 (Coordinated Universal Time)

LOCKBIT

5000$

Tue Apr 01 2025 08:25:06 GMT+0000 (Coordinated Universal Time)

LOCKBIT

This last price

Tue Apr 01 2025 08:25:28 GMT+0000 (Coordinated Universal Time)

Victim #236

我领导说 这个最多3000美金如果能接受就今天进行交易,如果不行就进行备份恢复我们接受1个月的数据丢失

Tue Apr 01 2025 08:54:02 GMT+0000 (Coordinated Universal Time)

LOCKBIT

3500 not for me not for you

Tue Apr 01 2025 09:21:39 GMT+0000 (Coordinated Universal Time)

LOCKBIT

This big discount , you need pay today

Tue Apr 01 2025 09:22:07 GMT+0000 (Coordinated Universal Time)

LOCKBIT

bc1q2wn37aax40gm0qc34j7qff5acq8k8wgwscv85c

Tue Apr 01 2025 09:22:23 GMT+0000 (Coordinated Universal Time)

LOCKBIT

BTC

Tue Apr 01 2025 09:23:58 GMT+0000 (Coordinated Universal Time)

Victim #236

我也希望能解密,因为这样我的工作量会少很多。但是老板说最多3000 这个是今天能达成的交易

Tue Apr 01 2025 09:24:56 GMT+0000 (Coordinated Universal Time)

LOCKBIT

OK

Tue Apr 01 2025 09:26:35 GMT+0000 (Coordinated Universal Time)

LOCKBIT

We wait your payment today! BTC - bc1q2wn37aax40gm0qc34j7qff5acq8k8wgwscv85c

Tue Apr 01 2025 09:27:24 GMT+0000 (Coordinated Universal Time)

Victim #236

你同意3000达成交易对吗?如果确定我会跟老板汇报。另外准备BTC这个我们需要找到一个渠道进行购买,需要时间今天不一定能完成交易。因为我们18:00下班。明天完成交易应该没问题,要知道在中国购买btc不容易

Tue Apr 01 2025 09:29:38 GMT+0000 (Coordinated Universal Time)

Victim #236

另外我需要知道支付BTC后你讲如何给我解密的工具?是发送到我个人邮箱吗?

Tue Apr 01 2025 09:30:42 GMT+0000 (Coordinated Universal Time)

LOCKBIT

We wait your payment. I send your decryption tool and instruction here

Tue Apr 01 2025 09:32:01 GMT+0000 (Coordinated Universal Time)

Victim #236

一共是BTC0.0357 你确认一下 没问题我去汇报

Tue Apr 01 2025 09:40:30 GMT+0000 (Coordinated Universal Time)

Victim #236

在吗

Tue Apr 01 2025 09:51:51 GMT+0000 (Coordinated Universal Time)

LOCKBIT

0.0036 BTC

Tue Apr 01 2025 11:17:13 GMT+0000 (Coordinated Universal Time)

Victim #236

一言为定 你们会遵守承诺对吧

Tue Apr 01 2025 11:58:01 GMT+0000 (Coordinated Universal Time)

LOCKBIT

Yes, after payment i send decryption tool and instruction

Tue Apr 01 2025 12:34:31 GMT+0000 (Coordinated Universal Time)

Victim #236

如何保证?

Wed Apr 02 2025 00:55:32 GMT+0000 (Coordinated Universal Time)

LOCKBIT

We are the number 1 team in the world! We are waiting for your payment today

Wed Apr 02 2025 03:39:08 GMT+0000 (Coordinated Universal Time)

Victim #236

好的,再次确认支付你说的金额0.0036 BTC就会给我们解密密钥对吗?

Wed Apr 02 2025 09:55:10 GMT+0000 (Coordinated Universal Time)

LOCKBIT

Yes, we confirm. After payment you will receive a decryption tool and instructions

Wed Apr 02 2025 10:03:03 GMT+0000 (Coordinated Universal Time)

Victim #236

ok 现在安排支付 请一定遵守承诺,大概30分钟左右应该能完成

Wed Apr 02 2025 10:03:57 GMT+0000 (Coordinated Universal Time)

Victim #236

麻烦再次确认支付地址:BTC - bc1q2wn37aax40gm0qc34j7qff5acq8k8wgwscv85c

Wed Apr 02 2025 10:05:26 GMT+0000 (Coordinated Universal Time)

Victim #236

[email protected] [email protected] 请把解密工具发送到这两个邮箱

Wed Apr 02 2025 10:06:31 GMT+0000 (Coordinated Universal Time)

LOCKBIT

Yes BTC - bc1q2wn37aax40gm0qc34j7qff5acq8k8wgwscv85c

Wed Apr 02 2025 10:07:16 GMT+0000 (Coordinated Universal Time)

LOCKBIT

I send decryption tool here and to your email

Wed Apr 02 2025 10:08:48 GMT+0000 (Coordinated Universal Time)

LOCKBIT

We have received payment. Please wait.

Wed Apr 02 2025 10:14:55 GMT+0000 (Coordinated Universal Time)

Victim #236

好的

Wed Apr 02 2025 10:15:45 GMT+0000 (Coordinated Universal Time)

LOCKBIT

You send 0.0036

Wed Apr 02 2025 10:22:14 GMT+0000 (Coordinated Universal Time)

LOCKBIT

This 300$

Wed Apr 02 2025 10:22:32 GMT+0000 (Coordinated Universal Time)

LOCKBIT

You need send 0.036 !

Wed Apr 02 2025 10:22:58 GMT+0000 (Coordinated Universal Time)

LOCKBIT

You play with us ?

Wed Apr 02 2025 10:23:12 GMT+0000 (Coordinated Universal Time)

LOCKBIT

You need send more 0.032 !

Wed Apr 02 2025 10:24:47 GMT+0000 (Coordinated Universal Time)

Victim #236

我再次确认了金额的。你看看记录,这个我以为你给我很大的优惠呢?我现在让财务再付付差额0.0324

Wed Apr 02 2025 10:25:27 GMT+0000 (Coordinated Universal Time)

LOCKBIT

We agreed on $3000! Dont play with us

Wed Apr 02 2025 10:26:30 GMT+0000 (Coordinated Universal Time)

Victim #236

ok 我需要在支付0.0324 对吗?

Wed Apr 02 2025 10:30:01 GMT+0000 (Coordinated Universal Time)

LOCKBIT

Yes

Wed Apr 02 2025 10:30:54 GMT+0000 (Coordinated Universal Time)

Victim #236

需要大概半小时才能完成

Wed Apr 02 2025 10:38:19 GMT+0000 (Coordinated Universal Time)

Victim #236

大概十分钟左右完成

Wed Apr 02 2025 12:15:56 GMT+0000 (Coordinated Universal Time)

Victim #236

你还在吗

Wed Apr 02 2025 12:17:09 GMT+0000 (Coordinated Universal Time)

LOCKBIT

OK

Wed Apr 02 2025 12:17:37 GMT+0000 (Coordinated Universal Time)

Victim #236

现在开始操作转账再付差额0.0324

Wed Apr 02 2025 12:23:45 GMT+0000 (Coordinated Universal Time)

Victim #236

今天无法完成交易 需要24小时也就是明天的这个时候承诺收到

Wed Apr 02 2025 12:27:26 GMT+0000 (Coordinated Universal Time)

LOCKBIT

Ok , we wait payment tomorrow

Wed Apr 02 2025 12:29:54 GMT+0000 (Coordinated Universal Time)

Victim #236

ok

Wed Apr 02 2025 12:30:30 GMT+0000 (Coordinated Universal Time)

LOCKBIT

Hi

Thu Apr 03 2025 04:19:36 GMT+0000 (Coordinated Universal Time)

Victim #236

ok现在付款 你在吗 付款后你回发我解密工具对吗

Thu Apr 03 2025 12:29:53 GMT+0000 (Coordinated Universal Time)

Victim #236

还在吗?

Thu Apr 03 2025 12:35:41 GMT+0000 (Coordinated Universal Time)

Victim #236

我离开一个半小时然后回来

Thu Apr 03 2025 12:39:48 GMT+0000 (Coordinated Universal Time)

LOCKBIT

Iam here

Thu Apr 03 2025 13:10:42 GMT+0000 (Coordinated Universal Time)

LOCKBIT

After payment you will receive a decryption tool and instructions. Do not waste time

Thu Apr 03 2025 13:12:31 GMT+0000 (Coordinated Universal Time)

Victim #236

OK现在开始支付

Thu Apr 03 2025 14:17:52 GMT+0000 (Coordinated Universal Time)

Victim #236

你检查一下应该收到了

Thu Apr 03 2025 14:27:39 GMT+0000 (Coordinated Universal Time)

Victim #236

完成支付了 请把加密工具发送到[email protected][email protected]

Thu Apr 03 2025 14:34:02 GMT+0000 (Coordinated Universal Time)

LOCKBIT

We have received it. We will send you the decryption tool and instructions soon.

Thu Apr 03 2025 14:44:52 GMT+0000 (Coordinated Universal Time)

Victim #236

谢谢 大概多久会收到工具

Thu Apr 03 2025 14:45:28 GMT+0000 (Coordinated Universal Time)

LOCKBIT

We will try today. Or tomorrow during the day for sure. Don't worry.

Thu Apr 03 2025 14:49:34 GMT+0000 (Coordinated Universal Time)

Victim #236

ok

Thu Apr 03 2025 14:51:57 GMT+0000 (Coordinated Universal Time)

LOCKBIT


Attachment: LBG_decryptor_D4FF894EA0D9F91A.zip

Thu Apr 03 2025 16:39:54 GMT+0000 (Coordinated Universal Time)

Victim #236

使用说明有吗?

Fri Apr 04 2025 00:54:10 GMT+0000 (Coordinated Universal Time)

Victim #236

这个行业挺好 怎么加入你们?

Fri Apr 04 2025 02:46:55 GMT+0000 (Coordinated Universal Time)

LOCKBIT

What are you asking about?

Fri Apr 04 2025 04:53:11 GMT+0000 (Coordinated Universal Time)

Victim #236

我意思是想做你们这个行业是否机会?

Fri Apr 04 2025 05:59:27 GMT+0000 (Coordinated Universal Time)

LOCKBIT

You can download decryption tool here

Fri Apr 04 2025 11:12:11 GMT+0000 (Coordinated Universal Time)

End of chat