lockbit3.0 — Chat: *************FFFFFF
Date not recordedFrom extortion.wiki, the ransomware negotiation research archive
A validated static rendering of 70 messages in source-array order. Transcript text is preserved without editorial additions.
- Actor
- lockbit3.0
- Record date
- Date not recorded
- Messages
- 70
- Participants
- LockBit 3.0, Victim
Preserved messages
Actor / other Victim
Select a message number for a stable citation link. Text remains selectable; hard-wrapped source lines are joined for reading, intentional blank-line paragraph breaks remain, and written URLs remain inert.
-
Message 001 From Victim Victim Date [Chat started]
-
Message 002 From LockBit 3.0 Actor / other Date hi. to decrypt the data and avoid publication you need to pay us. we haven't published your name on our blog yet
-
Message 003 From LockBit 3.0 Actor / other Date soon we will send you a tree of stolen data
-
Message 004 From Victim Victim Date We found your telling us to come here. What is going on?
-
Message 005 From LockBit 3.0 Actor / other Date need to pay
-
Message 006 From LockBit 3.0 Actor / other Date http://lockbitfilzhrvt6eya2lvnp7te4iifzmwybendqclgujqbzu3k4gaid.onion/r/EmcJ0p6nJv#59UjkgcJ3APksKHGhDXjpNhhXTNkiMXxsVAGPmV7DOA=
-
Message 007 From Victim Victim Date Thank you for the list. You said we need to pay, how much is that?
-
Message 008 From LockBit 3.0 Actor / other Date 250000$
-
Message 009 From LockBit 3.0 Actor / other Date after payment, we will delete your data and provide a decryptor
-
Message 010 From Victim Victim Date The list is with leadership for review. Is this the full list of all data taken?
-
Message 011 From LockBit 3.0 Actor / other Date yes
-
Message 012 From LockBit 3.0 Actor / other Date time to pay now
-
Message 013 From Victim Victim Date Thank you for answering our questions. The leadership is reviewing the file list. No one was here over the weekend to get this done. Thank you for your patience.
-
Message 014 From LockBit 3.0 Actor / other Date OK
-
Message 015 From Victim Victim Date the list is rather large! How much data in all did you take? It seems like alot!
-
Message 016 From LockBit 3.0 Actor / other Date all the data we took is on this list. when you pay, we will permanently delete it, and decrypt all your systems. the sooner you pay, the sooner it will be over and you will go back to your old life
-
Message 017 From Victim Victim Date How do we know you have this data?
-
Message 018 From LockBit 3.0 Actor / other Date select some files from the tree, and we will send them
-
Message 019 From Victim Victim Date OK. I will get with my leadership so they can choose what files to send.
-
Message 020 From LockBit 3.0 Actor / other Date hurry
-
Message 021 From Victim Victim Date It's a long list. How much data is this?! We are hopeful to have the file names for you today or tomorrow morning.
-
Message 022 From LockBit 3.0 Actor / other Date ok
-
Message 023 From Victim Victim Date Here is the list of files. NEWBRIDGE\2021 DMHAS license\licenses expansion\attachmentsCO - Parsippany.pdf \ NEWBRIDGE\HR\HR FORMS\Job Posting & Change FormsCHANGE OF STATUS Checklist 1.14.2020.docx \ NEWBRIDGE\HR\Job Announcements\2022Clinician Sparta-FT internal- 9.2.22.docx \ NEWBRIDGE\HR\HR FORMS\AccommodationsAccommodation REQUEST - Employee.docx \ NEWBRIDGE\2021 DMHAS license\continuation letter 1.26.21New Bridge Services Inc. 1-26-21 Continuation Letter (003).docx
-
Message 024 From LockBit 3.0 Actor / other Date ok, wait
-
Message 025 From LockBit 3.0 Actor / other Date http://lockbitfile2tcudkcqqt2ve6btssyvqwlizbpv5vz337lslmhff2uad.onion/r/tASrJy1eXM#9fOlbyIxE9fmiNNfZSDfX9PJ19RHcrlhxrJ9/99f7Bg=
-
Message 026 From LockBit 3.0 Actor / other Date password qtuhK4vpjG^fgM5ZRm$psn5mO
-
Message 027 From Victim Victim Date Thank you for the files. I will give them to my leadership to review.
-
Message 028 From LockBit 3.0 Actor / other Date OK
-
Message 029 From Victim Victim Date what is the next step in this process?
-
Message 030 From LockBit 3.0 Actor / other Date You pay
-
Message 031 From Victim Victim Date How do we know you can fix our systems?
-
Message 032 From LockBit 3.0 Actor / other Date You have the opportunity to make test decryptions
-
Message 033 From LockBit 3.0 Actor / other Date After payment, we will provide you with a decryptor for the entire network, identify vulnerabilities and delete your data
-
Message 034 From Victim Victim Date How do we make test decryptions?
-
Message 035 From LockBit 3.0 Actor / other Date There is a mention on your page, upload a small encrypted file
-
Message 036 From LockBit 3.0 Actor / other Date Please perform the actions faster.Otherwise, we will change the negotiator, and make mentions of your company on the blog.
-
Message 037 From LockBit 3.0 Actor / other Date I know that your goal is to drag out negotiations as long as possible so that we get nervous and agree to a smaller amount. by asking dumb questions you are playing against yourself and risk getting blogged. the test decryptor window is to the left of the chat.
-
Message 038 From Victim Victim Date We are not trying to drag anything out. We have never dealt with anything like this before and I wanted to be sure. I will get my leadership team to give me some files.
-
Message 039 From LockBit 3.0 Actor / other Date you can say what you want, but we have a lot of experience and we understand everything. each machine has its own ID. for a successful transcription you need to take the file from your PC, with the ID you are logged into the chat! or go to the chat with the ID of the PC from which you take the file for test decryption
-
Message 040 From Victim Victim Date The decrypted file that you sent us looks corrupt. Can we send you another one.
-
Message 041 From LockBit 3.0 Actor / other Date You can follow the link to the chat from any PC, take the file from this PC and use the test decryption
-
Message 042 From Victim Victim Date We tried to do it on another PC. Your decrypt tester is not letting us upload any more files.
-
Message 043 From LockBit 3.0 Actor / other Date send the file, we will decrypt it for you. it should not be an important file, a picture or pdf
-
Message 044 From Victim Victim Date https://anonfiles.com/6cC1jbX1y7/LcfUDlk_dB6AsqMxo
-
Message 045 From Victim Victim Date We've tried to attach more files in the chat but it wont work. Does this work for you?
-
Message 046 From LockBit 3.0 Actor / other Date ok, wait
-
Message 047 From LockBit 3.0 Actor / other Date File: [inetres.adm.7z]
-
Message 048 From Victim Victim Date Thank you for the file. I gave it to my leadership to review.
-
Message 049 From LockBit 3.0 Actor / other Date hurry up! very slow
-
Message 050 From Victim Victim Date My leadership said that they don't know what that file was that you sent and they wanted to send another one.
-
Message 051 From LockBit 3.0 Actor / other Date You sent us the file yourself. Okay. Send us another file
-
Message 052 From LockBit 3.0 Actor / other Date You will do the test yourself faster if you perform the action correctly.Your visiting this chat room once a day does not contribute to the solution.
-
Message 053 From Victim Victim Date Ok. We will find one and get back to you ASAP.
-
Message 054 From LockBit 3.0 Actor / other Date hurry up
-
Message 055 From Victim Victim Date Since all the names were changed on our files it is taking a long time making the appropriate selection.
-
Message 056 From LockBit 3.0 Actor / other Date It takes a maximum of 1 hour.We are well aware that you are a representative of the recovery company and want to earn yourself.But in fact you are damaging your clients and yourself as a negotiator
-
Message 057 From LockBit 3.0 Actor / other Date http://lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion/post/MM3CQtzq3b0kInv663edf735a5c73
-
Message 058 From LockBit 3.0 Actor / other Date You have time to think about whether to drag out the negotiations further, or pay up and close the matter quietly.
-
Message 059 From Victim Victim Date I'm not part of a recovery company. We are trying to work with you. Once you publish our data there will be no point in talking with you. I will check with my team on the status of getting more sample files.
-
Message 060 From LockBit 3.0 Actor / other Date don't care! you won't scare us with this. you've been taking too long, whoever you are. your name will be published first, and then only your details. if you don't pay, others will pay. our patience is over
-
Message 061 From Victim Victim Date https://anonfiles.com/V2Ad7eYfy1/6X0RFtq_dB6AsqMxo
-
Message 062 From LockBit 3.0 Actor / other Date ok, wait
-
Message 063 From LockBit 3.0 Actor / other Date File: [Quality Management Coordinator 12.1.2017.pdf.7z]
-
Message 064 From LockBit 3.0 Actor / other Date when will you pay?!
-
Message 065 From Victim Victim Date My leadership is going to meet to discuss this.
-
Message 066 From LockBit 3.0 Actor / other Date Hurry up
-
Message 067 From Victim Victim Date The leadership meeting has been delayed due to something beyond our control. Thank you for your continued patience with us.
-
Message 068 From LockBit 3.0 Actor / other Date If you hope that by delaying negotiations you will lower the price, you are mistaken
-
Message 069 From Victim Victim Date I am not trying to delay negotiations. I have not heard back from the board yet.
-
Message 070 From LockBit 3.0 Actor / other Date it's time to pay