drako.it
Speaking with LOCKBIT
Victim #279
You can attach a few files for test decryption by packing them into an archive with zip, rar, tar, 7zip, 7z, tar.gz extensions of no more than 10 megabytes using the attach button directly in the chat. If your archive weighs more than 10 megabytes, please use our file sharing service. http://lockbitfss2w7co3ij6am6wox4xcurtgwukunx3yubcoe5cbxiqakxqd.onion http://lockbitfsvf75glg226he5inkfgtuoakt4vgfhd7nfgghx5kwz5zo3ad.onion http://lockbitfskq2fxclyfrop5yizyxpzu65w7pphsgthawcyb4gd27x62id.onion For security reasons we do not click on other links you send in chat. Please wait for a reply, sometimes it takes several hours due to possible time zone differences.
Mon Apr 28 2025 10:21:12 GMT+0000 (Coordinated Universal Time)
Victim #279
i wont to pay
Mon Apr 28 2025 10:22:37 GMT+0000 (Coordinated Universal Time)
Victim #279
ADTISZRLVUMXDJ34RCBZFNO6BNKLEYKYS5FZPNNXK4S2RSHOENUA
Mon Apr 28 2025 10:24:31 GMT+0000 (Coordinated Universal Time)
Victim #279
i want to pay
Mon Apr 28 2025 10:26:38 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Hello. Thank you for joining the chat. Currently, we are preparing the list of data we took from your network. For now you have to know that dealing with us is the best possible way to settle this quick and cheap. Keep in touch and be patient with us. We will reach out to you soon. Do you have a permission to conduct a negotiation on behalf of your organization? Once we get a response you will be provided with all the details.
Mon Apr 28 2025 13:03:45 GMT+0000 (Coordinated Universal Time)
Victim #279
I don't know what kind of negotiation you want to do, but we are a small company and I am the owner. I need to resolve as soon as possible, let me know how to proceed
Mon Apr 28 2025 13:29:09 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Roughly 400 GB of files were taken from your network prior to encryption, including emails, important documents, company source code, databases, nextcloud data. The attached list was limited to depth 5 of the file tree.
Mon Apr 28 2025 13:49:29 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Download link http://lockbitfskq2fxclyfrop5yizyxpzu65w7pphsgthawcyb4gd27x62id.onion/r/wpBr5st2Gj#8RDtjfm594SrhVKDXnzxHLgoTXpjdiWENNtYl143vTc=
Mon Apr 28 2025 13:51:09 GMT+0000 (Coordinated Universal Time)
LOCKBIT
You can pick 2-3 random files up to 10mb size from the list and we will upload them to this chat as a proof of possession. To prove that we can properly decrypt your data you can upload 2-3 encrypted files up to 10mb size to our chat and we will upload decrypted copies back.
Mon Apr 28 2025 13:51:32 GMT+0000 (Coordinated Universal Time)
Victim #279
How can we proceed
Mon Apr 28 2025 13:52:08 GMT+0000 (Coordinated Universal Time)
LOCKBIT
We accept bitcoins. €90k if you make payment within 48 hours, after that the price is €130k. This includes 1) decryptor; 2) deletion of stolen data; 3) security suggestions to prevent this from ever happening again; 4) Guarantee to never be attacked again
Mon Apr 28 2025 13:58:39 GMT+0000 (Coordinated Universal Time)
Victim #279
maybe you didn't understand: we are a small company and we don't have all that money. we can pay 500/1000 euros, certainly not 90000 euros
Mon Apr 28 2025 14:02:53 GMT+0000 (Coordinated Universal Time)
LOCKBIT
The price is established based on the company's finances, we are aware of the equity in your banks accounts, your revenue and net profits. 1k is not even considerable.
Mon Apr 28 2025 14:09:46 GMT+0000 (Coordinated Universal Time)
Victim #279
I don't know what you think you know, but we don't have that money. Paying 90,000 euros would mean going into debt and closing the company, does that seem feasible to you. We can get to 2,000 euros
Mon Apr 28 2025 14:12:02 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Will your own bank statement change your mind? I can get it for you
Mon Apr 28 2025 14:28:10 GMT+0000 (Coordinated Universal Time)
Victim #279
please go ahead
Mon Apr 28 2025 14:29:21 GMT+0000 (Coordinated Universal Time)
Victim #279
Hello?
Mon Apr 28 2025 15:12:48 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Apologies for the delay. Here is one of your bank statements for "UNICREDIT" bank, showing 403k euros in your bank account http://lockbitfss2w7co3ij6am6wox4xcurtgwukunx3yubcoe5cbxiqakxqd.onion/r/E15Fmjf_Yq#lU18hK2ZA4Cwz4a1fYGtOQZhyz/vYuHZJeJ8MDfp1tc=
Mon Apr 28 2025 15:51:11 GMT+0000 (Coordinated Universal Time)
Victim #279
empty pdf
Mon Apr 28 2025 15:57:02 GMT+0000 (Coordinated Universal Time)
LOCKBIT
I apologize, there seems to be a temporary issue with the file hoster. I will fix it and get back to you as soon as possible.
Mon Apr 28 2025 16:06:34 GMT+0000 (Coordinated Universal Time)
LOCKBIT
The issue is temporary, I will upload it later when the service is back. I can quote you the numbers in the meantime. For the period of 31.01.2025 to 31.03.2025 the outgoing wires were 1.256.670,35, Incoming 1.484.294,70, starting bank balance 175k, ending bank balance 403k.
Mon Apr 28 2025 16:21:30 GMT+0000 (Coordinated Universal Time)
LOCKBIT
It might be appropriate to explain to you, if you do not know how LockBit works, that this pdf along with everything else in the 400GB of stolen data, will be published to the lockbit blog for anyone to download, shall we not reach an agreement.
Mon Apr 28 2025 16:23:31 GMT+0000 (Coordinated Universal Time)
Victim #279
Let's be realistic. You are asking for 90K, but the company account balance is about 20K after taxes, salaries and expenses. You have access, so you can verify this yourself. 2K represents 10% of what we currently have. We are trying to cooperate in a reasonable way, but we simply cannot pay what we don't have. Let's find a realistic solution that works for both sides.
Mon Apr 28 2025 16:25:11 GMT+0000 (Coordinated Universal Time)
LOCKBIT
2k? I will not reply further to such ridiculousness. I'm sure you will come around with a much better offer in the following days.
Mon Apr 28 2025 16:32:46 GMT+0000 (Coordinated Universal Time)
Victim #279
Mon Apr 28 2025 16:33:38 GMT+0000 (Coordinated Universal Time)
LOCKBIT
What is this?
Mon Apr 28 2025 16:34:24 GMT+0000 (Coordinated Universal Time)
Victim #279
screenshot of account
Mon Apr 28 2025 16:35:00 GMT+0000 (Coordinated Universal Time)
Victim #279
Please let us know if you are willing to find a realistic agreement. Additionally, we noticed that not only files but also some servers have been compromised. How can you guarantee that the situation will be fully normalized after payment?
Mon Apr 28 2025 19:44:50 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Some servers? All servers! And all backups have been safely deleted and made unrecoverable. As experts in our field, our goal is to help you restore full business productivity, immediately upon fair compensation for our services. If you are unsure about the decryption process, refer to the initial message you got when you started this chat. You can test the recovery process by decrypting a sample of encrypted files. You have yet to make any real offer. We are listening.
Tue Apr 29 2025 07:11:28 GMT+0000 (Coordinated Universal Time)
LOCKBIT
Tue Apr 29 2025 07:20:24 GMT+0000 (Coordinated Universal Time)
LOCKBIT
As promised, your bank statement we discussed about.
Tue Apr 29 2025 07:20:44 GMT+0000 (Coordinated Universal Time)
Victim #279
We have been transparent with you regarding our situation. We cannot afford your request, the best we can do right now is muster 5k, which is 25% of our total asset. And that is already a problem for us, as we have people to pay.
Tue Apr 29 2025 07:21:00 GMT+0000 (Coordinated Universal Time)
LOCKBIT
We are patient and reasonable, however we warned you about such insulting offers. Let's see if 24 hours of silence will help you get serious.
Tue Apr 29 2025 07:35:02 GMT+0000 (Coordinated Universal Time)
Victim #279
Tue Apr 29 2025 07:49:32 GMT+0000 (Coordinated Universal Time)
End of chat