kematen.at
Speaking with LOCKBIT
Victim #246
You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat. If your archive weighs more than 10 megabytes, please use our file sharing service. http://lockbitfss2w7co3ij6am6wox4xcurtgwukunx3yubcoe5cbxiqakxqd.onion http://lockbitfsvf75glg226he5inkfgtuoakt4vgfhd7nfgghx5kwz5zo3ad.onion http://lockbitfskq2fxclyfrop5yizyxpzu65w7pphsgthawcyb4gd27x62id.onion For security reasons we do not click on other links you send in chat. Please wait for a reply, sometimes it takes several hours due to possible time zone differences.
Wed Apr 09 2025 13:56:40 GMT+0000 (Coordinated Universal Time)
Victim #246
hello, you have encrypted our mits.tirol domain , can you let us know the btc ammount please
Wed Apr 09 2025 13:58:18 GMT+0000 (Coordinated Universal Time)
LOCKBIT
20k usd
Wed Apr 09 2025 23:06:15 GMT+0000 (Coordinated Universal Time)
Victim #246
thank you for this , i hope this is negoiable , please can you also give me a screenshot or filetree of the tranfert data from our servers so i can convince my manager to pay the BTC
Thu Apr 10 2025 04:30:03 GMT+0000 (Coordinated Universal Time)
Victim #246
can you please give an update on my request
Fri Apr 11 2025 05:05:49 GMT+0000 (Coordinated Universal Time)
LOCKBIT
http://temp.sh/hYAwJ/tree_KEMATEN.txt
Fri Apr 11 2025 09:00:04 GMT+0000 (Coordinated Universal Time)
Victim #246
thank you for the list , i will go back to management and come to you
Fri Apr 11 2025 11:03:00 GMT+0000 (Coordinated Universal Time)
Victim #246
KEMATEN\IT\IT\HOWto\__Arbeitsberichte\Markus\2023\Arbeitsbereicht-Dr.Trieb-Grafikkarte.rtf KEMATEN\IT\Wartungskunden\Tirol\20079_Hotel_Sportlers\IT\Netzwerktest.png KEMATEN\IT\IT\Bilder\2021\2021.05.22 - Brom”bel Herstellung\20210522_193652 - Kopie.jpg
Fri Apr 11 2025 11:32:02 GMT+0000 (Coordinated Universal Time)
Victim #246
can you please send me these 3 files as proof you have our data so i can take this forward
Fri Apr 11 2025 11:33:42 GMT+0000 (Coordinated Universal Time)
LOCKBIT
wait
Fri Apr 11 2025 17:22:58 GMT+0000 (Coordinated Universal Time)
LOCKBIT
http://temp.sh/XgfVc/files_KEMATEN.zip
Sat Apr 12 2025 19:35:33 GMT+0000 (Coordinated Universal Time)
Victim #246
thank you please keep this channel open
Sun Apr 13 2025 07:36:23 GMT+0000 (Coordinated Universal Time)
Victim #246
the files are correct , let me know what i need to do to pay the 20k usd, what will happen if i pay the ammount please explain
Sun Apr 13 2025 09:00:22 GMT+0000 (Coordinated Universal Time)
LOCKBIT
decryptor + data deletion
Sun Apr 13 2025 13:15:14 GMT+0000 (Coordinated Universal Time)
Victim #246
data deletion please
Sun Apr 13 2025 17:03:52 GMT+0000 (Coordinated Universal Time)
Victim #246
can you also let us know how did you entered the network , very important for us thank you
Sun Apr 13 2025 17:09:53 GMT+0000 (Coordinated Universal Time)
Victim #246
please give me an update
Mon Apr 14 2025 11:03:17 GMT+0000 (Coordinated Universal Time)
LOCKBIT
yes we can
Mon Apr 14 2025 13:41:23 GMT+0000 (Coordinated Universal Time)
Victim #246
ok what is the next step ?
Mon Apr 14 2025 13:52:20 GMT+0000 (Coordinated Universal Time)
LOCKBIT
pay
Mon Apr 14 2025 18:17:46 GMT+0000 (Coordinated Universal Time)
Victim #246
what is the btc adres
Mon Apr 14 2025 19:49:56 GMT+0000 (Coordinated Universal Time)
LOCKBIT
bc1qp3cl68v8nstaxpqgjaq50rxmvrzen7lwva0wsl 0.25 BTC
Mon Apr 14 2025 19:56:15 GMT+0000 (Coordinated Universal Time)
Victim #246
we have forseen 0.23 is that ok please ? once we pay you will share the enterin point and delete the data
Tue Apr 15 2025 05:54:07 GMT+0000 (Coordinated Universal Time)
Victim #246
hi , we will transfert 0.25 btc to the account , management wants to know if all questions below will be ok ? - we will receive a deletion protocol - the assurance that Lockbit (including its affiliates) will not attack MITS a second time - MITS will not be published on their blog - we will receive information on how they got into the IT system
Tue Apr 15 2025 11:54:40 GMT+0000 (Coordinated Universal Time)
LOCKBIT
yes
Tue Apr 15 2025 12:50:32 GMT+0000 (Coordinated Universal Time)
Victim #246
money is being transfert will send you proof once i have it
Tue Apr 15 2025 13:19:25 GMT+0000 (Coordinated Universal Time)
LOCKBIT
ok, we wait
Tue Apr 15 2025 14:17:15 GMT+0000 (Coordinated Universal Time)
Victim #246
Adresse bc1qp3cl68v8nstaxpqgjaq50rxmvrzen7lwva0wslNative SegWit Mehr Legen Sie Ihr privates Label fest Übersicht BTC Saldo 0,25 BTC ( $20,86K ) USDT-Saldo 0 USDT Inscription-Token-Beteiligungen 0 Token($0) Transaktionsinfo Gesamtzahl der Transaktionen 1 ⛽️ Transaktionsgebühren 0 BTC Gesamte UTXO-Bestände 1 Erste empfangene Transaktion UTXO 15.04.2025, 19:42:18
Wed Apr 16 2025 05:51:33 GMT+0000 (Coordinated Universal Time)
Victim #246
please let me know if you have received it and please as agreed answer my questions
Wed Apr 16 2025 08:39:11 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Hello, wait please. Your decryptor in way
Wed Apr 16 2025 09:52:43 GMT+0000 (Coordinated Universal Time)
Victim #246
hello , we do not need the decryptor only following
Wed Apr 16 2025 09:53:24 GMT+0000 (Coordinated Universal Time)
Victim #246
- we will receive a deletion protocol - the assurance that Lockbit (including its affiliates) will not attack MITS a second time - MITS will not be published on their blog - we will receive information on how they got into the IT system
Wed Apr 16 2025 09:55:01 GMT+0000 (Coordinated Universal Time)
Victim #246
hello , did you received the btc ?
Wed Apr 16 2025 13:32:32 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Yes, wait for the answer to your request. We will prepare everything and send it to you shortly
Wed Apr 16 2025 13:33:49 GMT+0000 (Coordinated Universal Time)
Victim #246
thank you very much
Wed Apr 16 2025 13:38:18 GMT+0000 (Coordinated Universal Time)
LOCKBIT
1. http://lockbitfskq2fxclyfrop5yizyxpzu65w7pphsgthawcyb4gd27x62id.onion/r/SP02sm1Lwu#lEu610vzOxNs+RtCptJsb54EyCBeOfPLJfDfPBV1d3U= 2-3. We guarantee that we will not blog you or attack you again. 4. We got into your network through a vulnerability in your FortiVPN. We recommend that you keep up to date with the updates of the products you use.
Wed Apr 16 2025 19:16:06 GMT+0000 (Coordinated Universal Time)
End of chat