Victim #246

kematen.at

Speaking with LOCKBIT

Victim #246

You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat. If your archive weighs more than 10 megabytes, please use our file sharing service. http://lockbitfss2w7co3ij6am6wox4xcurtgwukunx3yubcoe5cbxiqakxqd.onion http://lockbitfsvf75glg226he5inkfgtuoakt4vgfhd7nfgghx5kwz5zo3ad.onion http://lockbitfskq2fxclyfrop5yizyxpzu65w7pphsgthawcyb4gd27x62id.onion For security reasons we do not click on other links you send in chat. Please wait for a reply, sometimes it takes several hours due to possible time zone differences.

Wed Apr 09 2025 13:56:40 GMT+0000 (Coordinated Universal Time)

Victim #246

hello, you have encrypted our mits.tirol domain , can you let us know the btc ammount please

Wed Apr 09 2025 13:58:18 GMT+0000 (Coordinated Universal Time)

LOCKBIT

20k usd

Wed Apr 09 2025 23:06:15 GMT+0000 (Coordinated Universal Time)

Victim #246

thank you for this , i hope this is negoiable , please can you also give me a screenshot or filetree of the tranfert data from our servers so i can convince my manager to pay the BTC

Thu Apr 10 2025 04:30:03 GMT+0000 (Coordinated Universal Time)

Victim #246

can you please give an update on my request

Fri Apr 11 2025 05:05:49 GMT+0000 (Coordinated Universal Time)

LOCKBIT

http://temp.sh/hYAwJ/tree_KEMATEN.txt

Fri Apr 11 2025 09:00:04 GMT+0000 (Coordinated Universal Time)

Victim #246

thank you for the list , i will go back to management and come to you

Fri Apr 11 2025 11:03:00 GMT+0000 (Coordinated Universal Time)

Victim #246

KEMATEN\IT\IT\HOWto\__Arbeitsberichte\Markus\2023\Arbeitsbereicht-Dr.Trieb-Grafikkarte.rtf KEMATEN\IT\Wartungskunden\Tirol\20079_Hotel_Sportlers\IT\Netzwerktest.png KEMATEN\IT\IT\Bilder\2021\2021.05.22 - Brom”bel Herstellung\20210522_193652 - Kopie.jpg

Fri Apr 11 2025 11:32:02 GMT+0000 (Coordinated Universal Time)

Victim #246

can you please send me these 3 files as proof you have our data so i can take this forward

Fri Apr 11 2025 11:33:42 GMT+0000 (Coordinated Universal Time)

LOCKBIT

wait

Fri Apr 11 2025 17:22:58 GMT+0000 (Coordinated Universal Time)

LOCKBIT

http://temp.sh/XgfVc/files_KEMATEN.zip

Sat Apr 12 2025 19:35:33 GMT+0000 (Coordinated Universal Time)

Victim #246

thank you please keep this channel open

Sun Apr 13 2025 07:36:23 GMT+0000 (Coordinated Universal Time)

Victim #246

the files are correct , let me know what i need to do to pay the 20k usd, what will happen if i pay the ammount please explain

Sun Apr 13 2025 09:00:22 GMT+0000 (Coordinated Universal Time)

LOCKBIT

decryptor + data deletion

Sun Apr 13 2025 13:15:14 GMT+0000 (Coordinated Universal Time)

Victim #246

data deletion please

Sun Apr 13 2025 17:03:52 GMT+0000 (Coordinated Universal Time)

Victim #246

can you also let us know how did you entered the network , very important for us thank you

Sun Apr 13 2025 17:09:53 GMT+0000 (Coordinated Universal Time)

Victim #246

please give me an update

Mon Apr 14 2025 11:03:17 GMT+0000 (Coordinated Universal Time)

LOCKBIT

yes we can

Mon Apr 14 2025 13:41:23 GMT+0000 (Coordinated Universal Time)

Victim #246

ok what is the next step ?

Mon Apr 14 2025 13:52:20 GMT+0000 (Coordinated Universal Time)

LOCKBIT

pay

Mon Apr 14 2025 18:17:46 GMT+0000 (Coordinated Universal Time)

Victim #246

what is the btc adres

Mon Apr 14 2025 19:49:56 GMT+0000 (Coordinated Universal Time)

LOCKBIT

bc1qp3cl68v8nstaxpqgjaq50rxmvrzen7lwva0wsl 0.25 BTC

Mon Apr 14 2025 19:56:15 GMT+0000 (Coordinated Universal Time)

Victim #246

we have forseen 0.23 is that ok please ? once we pay you will share the enterin point and delete the data

Tue Apr 15 2025 05:54:07 GMT+0000 (Coordinated Universal Time)

Victim #246

hi , we will transfert 0.25 btc to the account , management wants to know if all questions below will be ok ? - we will receive a deletion protocol - the assurance that Lockbit (including its affiliates) will not attack MITS a second time - MITS will not be published on their blog - we will receive information on how they got into the IT system

Tue Apr 15 2025 11:54:40 GMT+0000 (Coordinated Universal Time)

LOCKBIT

yes

Tue Apr 15 2025 12:50:32 GMT+0000 (Coordinated Universal Time)

Victim #246

money is being transfert will send you proof once i have it

Tue Apr 15 2025 13:19:25 GMT+0000 (Coordinated Universal Time)

LOCKBIT

ok, we wait

Tue Apr 15 2025 14:17:15 GMT+0000 (Coordinated Universal Time)

Victim #246

Adresse bc1qp3cl68v8nstaxpqgjaq50rxmvrzen7lwva0wslNative SegWit Mehr Legen Sie Ihr privates Label fest Übersicht BTC Saldo 0,25 BTC ( $20,86K ) USDT-Saldo 0 USDT Inscription-Token-Beteiligungen 0 Token($0) Transaktionsinfo Gesamtzahl der Transaktionen 1 ⛽️ Transaktionsgebühren 0 BTC Gesamte UTXO-Bestände 1 Erste empfangene Transaktion UTXO 15.04.2025, 19:42:18

Wed Apr 16 2025 05:51:33 GMT+0000 (Coordinated Universal Time)

Victim #246

please let me know if you have received it and please as agreed answer my questions

Wed Apr 16 2025 08:39:11 GMT+0000 (Coordinated Universal Time)

LOCKBIT

Hello, wait please. Your decryptor in way

Wed Apr 16 2025 09:52:43 GMT+0000 (Coordinated Universal Time)

Victim #246

hello , we do not need the decryptor only following

Wed Apr 16 2025 09:53:24 GMT+0000 (Coordinated Universal Time)

Victim #246

- we will receive a deletion protocol - the assurance that Lockbit (including its affiliates) will not attack MITS a second time - MITS will not be published on their blog - we will receive information on how they got into the IT system

Wed Apr 16 2025 09:55:01 GMT+0000 (Coordinated Universal Time)

Victim #246

hello , did you received the btc ?

Wed Apr 16 2025 13:32:32 GMT+0000 (Coordinated Universal Time)

LOCKBIT

Yes, wait for the answer to your request. We will prepare everything and send it to you shortly

Wed Apr 16 2025 13:33:49 GMT+0000 (Coordinated Universal Time)

Victim #246

thank you very much

Wed Apr 16 2025 13:38:18 GMT+0000 (Coordinated Universal Time)

LOCKBIT

1. http://lockbitfskq2fxclyfrop5yizyxpzu65w7pphsgthawcyb4gd27x62id.onion/r/SP02sm1Lwu#lEu610vzOxNs+RtCptJsb54EyCBeOfPLJfDfPBV1d3U= 2-3. We guarantee that we will not blog you or attack you again. 4. We got into your network through a vulnerability in your FortiVPN. We recommend that you keep up to date with the updates of the products you use.

Wed Apr 16 2025 19:16:06 GMT+0000 (Coordinated Universal Time)

End of chat