lockbit3.0 — Chat: *************7E0E3E
Date not recordedFrom extortion.wiki, the ransomware negotiation research archive
A validated static rendering of 94 messages in source-array order. Transcript text is preserved without editorial additions.
- Actor
- lockbit3.0
- Record date
- Date not recorded
- Messages
- 94
- Participants
- LockBit 3.0, Victim
Preserved messages
Actor / other Victim
Select a message number for a stable citation link. Text remains selectable; hard-wrapped source lines are joined for reading, intentional blank-line paragraph breaks remain, and written URLs remain inert.
-
Message 001 From Victim Victim Date [Chat started]
-
Message 002 From Victim Victim Date hello?
-
Message 003 From LockBit 3.0 Actor / other Date Hello
-
Message 004 From LockBit 3.0 Actor / other Date if you want decrypt, you'd better start a dialogue
-
Message 005 From Victim Victim Date OK. I read you took files and that you have a decryptor to decrypt files. What are these files and how do I know you can decrypt the files you left?
-
Message 006 From LockBit 3.0 Actor / other Date Send me some encrypted files, I will decrypt them for free.
-
Message 007 From LockBit 3.0 Actor / other Date I see you're not in rush having business with us. I don't think it's in your interest to be penalized for that.
-
Message 008 From LockBit 3.0 Actor / other Date If you keep quiet I will start to leak your data
-
Message 009 From Victim Victim Date It take time to collect files wait please
-
Message 010 From Victim Victim Date File: [Laval encrypted files.zip]
-
Message 011 From Victim Victim Date File: [Sayabec encrypted files.zip]
-
Message 012 From Victim Victim Date Can you show me the files you took and what your demands are?
-
Message 013 From Victim Victim Date I uploaded some test files
-
Message 014 From LockBit 3.0 Actor / other Date wait for test decrypt
-
Message 015 From LockBit 3.0 Actor / other Date i'll provide you some proofs of stolen data soon
-
Message 016 From LockBit 3.0 Actor / other Date vm files are not allowed for test decrypt, just not important files like.log file
-
Message 017 From LockBit 3.0 Actor / other Date while i'm preparing proof for you let's talk about business
-
Message 018 From LockBit 3.0 Actor / other Date you need to pay 8 million doolars to get decription software and deleating stolen data
-
Message 019 From Victim Victim Date That is a lot of money, so we need to see what data you took to assess what the business is able to discuss.
-
Message 020 From Victim Victim Date all files I gave you are low value. I would not send you anything important but we do want to ensure VM files would be able to decrypt
-
Message 021 From LockBit 3.0 Actor / other Date it's a good price for your company
-
Message 022 From Victim Victim Date We can certainly discuss what is a good price and how we can be assured of agreement.
-
Message 023 From LockBit 3.0 Actor / other Date decryption software works with all files but we have rules and for trial decrypt vm files are not allowed
-
Message 024 From LockBit 3.0 Actor / other Date of course
-
Message 025 From LockBit 3.0 Actor / other Date I'll come back later with proofs
-
Message 026 From LockBit 3.0 Actor / other Date .vmx impossible free decrypt
-
Message 027 From LockBit 3.0 Actor / other Date File: [decrypted_key.rar]
-
Message 028 From Victim Victim Date vmx is a config file. Why is that not decryptable?
-
Message 029 From Victim Victim Date take a partial screenshot so we know your decryptor works.
-
Message 030 From LockBit 3.0 Actor / other Date File: [1.png]
-
Message 031 From LockBit 3.0 Actor / other Date File: [3.png]
-
Message 032 From LockBit 3.0 Actor / other Date File: [5.png]
-
Message 033 From LockBit 3.0 Actor / other Date File: [4.png]
-
Message 034 From LockBit 3.0 Actor / other Date File: [2.png]
-
Message 035 From Victim Victim Date can I get a list of the files taken rathrer than a few files?
-
Message 036 From LockBit 3.0 Actor / other Date File: [1.7z]
-
Message 037 From LockBit 3.0 Actor / other Date File: [1.7z]
-
Message 038 From Victim Victim Date ty will review
-
Message 039 From LockBit 3.0 Actor / other Date get a move on, 3 days already gone and i don't see your offers
-
Message 040 From Victim Victim Date is this a partial list? did you mean to send 1.7z and 2.7z?
-
Message 041 From LockBit 3.0 Actor / other Date no
-
Message 042 From LockBit 3.0 Actor / other Date check this list and lets talk about business
-
Message 043 From LockBit 3.0 Actor / other Date Your time is almost up.
-
Message 044 From Victim Victim Date show me these files Employee Roster HYZ 10312018.xls, Devis Entretien Ménager Uniboard-Unires Val-d'or 2023.docx, Employee Total Hours Report HY1 Salary 10312018.xls, PAYROLL9122015.xls, Mont-Laurier vs LaBaie HDF.xls, Panneaux de paille.xls,
-
Message 045 From Victim Victim Date please bear with us time-wise. We are trying to deal with this as quickly as possible. Thank you.
-
Message 046 From LockBit 3.0 Actor / other Date choose 3 of thees files
-
Message 047 From LockBit 3.0 Actor / other Date File: [files (1).7z]
-
Message 048 From LockBit 3.0 Actor / other Date here you go
-
Message 049 From Victim Victim Date ty
-
Message 050 From LockBit 3.0 Actor / other Date Stop stalling, I want to see numbers from you, otherwise I am preparing a press release.
-
Message 051 From LockBit 3.0 Actor / other Date you have 6 hours to give me answer
-
Message 052 From Victim Victim Date We would like to reach an agreement however we are not sure how you reached that price you are asking for? Can you offer a price that we can digest and agree?
-
Message 053 From LockBit 3.0 Actor / other Date Before encrypting any network we do deeply study them. We know how much you can pay.
-
Message 054 From Victim Victim Date How do you know how much debt we carry? None of the information you may have seen would include that. Is there any flexibility on the price?
-
Message 055 From LockBit 3.0 Actor / other Date I don't really want to keep this conversation What do you want? Give me your offer
-
Message 056 From Victim Victim Date I have no interest in insulting you with an offer because your starting amount is significant than what we have liquidity to allocate to this without debtors locking us out.
-
Message 057 From LockBit 3.0 Actor / other Date I still want to see your offer. Well maybe we need to prepare a blog post for you and close this chat. I can't decide
-
Message 058 From Victim Victim Date but why did you post us?
-
Message 059 From Victim Victim Date can you remove our post?
-
Message 060 From Victim Victim Date our board has agreed to offer 500k to close this incident. Do we have a deal?
-
Message 061 From LockBit 3.0 Actor / other Date Because it semms you don't want to make a deal and waisting time
-
Message 062 From LockBit 3.0 Actor / other Date the blog private now, i just want you know that i'm not joking with you
-
Message 063 From LockBit 3.0 Actor / other Date The amount is nothing for such a company. You have a time until tomorrow to make a real offer. Otherwise I will put a blog to a public page.
-
Message 064 From Victim Victim Date we know that.
-
Message 065 From Victim Victim Date but you see? I told you that you do not understand our situation so why even ask for an offer?
-
Message 066 From Victim Victim Date Look I just need to tell my management something. Are you able to provide a more reasonable price or not? the fact you already published means the company needs to take calls from the media.
-
Message 067 From LockBit 3.0 Actor / other Date What was you doing last week? You just wasting my time. You see my price
-
Message 068 From Victim Victim Date you are asking for a large amount and this requires high level of approvals. We cannot move so quickly. I know you want to get paid quickly but if I decided to ghost you we would not have been here.
-
Message 069 From LockBit 3.0 Actor / other Date today i will public your blog, tomorrow i will start to upload your data for public access.
-
Message 070 From Victim Victim Date I just want to confirm for my management, you are not interested in discussing your demands? correct?
-
Message 071 From LockBit 3.0 Actor / other Date i'm not interested in 500k$
-
Message 072 From Victim Victim Date Is there a middle ground we can reach agreement on?
-
Message 073 From LockBit 3.0 Actor / other Date i dont want to answer questions, a want to see real offer. show me what you got
-
Message 074 From LockBit 3.0 Actor / other Date btw discount possible just if you pay on this week
-
Message 075 From Victim Victim Date I understand, but I am sure you know how boards work, they want to approve a specific amount not some imaginary number. If you can advise what is a realistic number for a deal I am happy to present it.
-
Message 076 From LockBit 3.0 Actor / other Date 8m $ is very realistic number for your company. i can give you discount 10% just if you pay this week. This is a good result of your work.
-
Message 077 From LockBit 3.0 Actor / other Date any update?
-
Message 078 From Victim Victim Date I hope to hear from management very soon
-
Message 079 From LockBit 3.0 Actor / other Date hurry up
-
Message 080 From Victim Victim Date Just completed a board discussion and the board is willing to settle this at 1.5m $ this is a big increase as you can see from our former amount but we hope you can see how serious we are to address the situation in an amicable fashion.
-
Message 081 From LockBit 3.0 Actor / other Date I can't access that amount
-
Message 082 From LockBit 3.0 Actor / other Date I see you're not impressed an effect of our blog post. Tomorrow the blog will be available again with. I don't care if it will not increase the offer but at least next time the recovery company will make things faster
-
Message 083 From Victim Victim Date I am awaiting our management executive to confirm what is possible in terms of an amount for this case. You have to understand we are looking at data and cost of the incident to us. I will likely respond to you tomorrow. If you publish us again, it will have no more impact that your publication already did.
-
Message 084 From Victim Victim Date We scheduled an afternoon board meeting as I am at my limit from a $ perspective. I will be in touch tomorrow afternoon/evening time frame.
-
Message 085 From LockBit 3.0 Actor / other Date so what?
-
Message 086 From Victim Victim Date we are just finishing the meeting where the Board approved 3.0m $ and we see you posted our company again
-
Message 087 From LockBit 3.0 Actor / other Date are you ready to pay right now?
-
Message 088 From Victim Victim Date Absolutely not. You posted us when I explained to you that we might increase our number. Remove the fucking post and I will try to save this on Monday but I am literally not promising anything. It is your choice.
-
Message 089 From LockBit 3.0 Actor / other Date first of all it's your words
-
Message 090 From LockBit 3.0 Actor / other Date "If you publish us again, it will have no more impact that your publication already did. "
-
Message 091 From LockBit 3.0 Actor / other Date second thing ufter using "fucking" your price is 5 million and it's your last price
-
Message 092 From LockBit 3.0 Actor / other Date I warned you several times, you thing that you can do what you want. probably no.
-
Message 093 From Victim Victim Date you have the power. I told you what I said, I stand behind my statements. Your call.
-
Message 094 From LockBit 3.0 Actor / other Date you know the price, work on it.