lockbit3.0 — Chat: *************EDEF83
Date not recordedFrom extortion.wiki, the ransomware negotiation research archive
A validated static rendering of 43 messages in source-array order. Transcript text is preserved without editorial additions.
- Actor
- lockbit3.0
- Record date
- Date not recorded
- Messages
- 43
- Participants
- LockBit 3.0, Victim
Preserved messages
Actor / other Victim
Select a message number for a stable citation link. Text remains selectable; hard-wrapped source lines are joined for reading, intentional blank-line paragraph breaks remain, and written URLs remain inert.
-
Message 001 From Victim Victim Date [Chat started]
-
Message 002 From Victim Victim Date Hi.
-
Message 003 From Victim Victim Date Hello, I'm wondering if anyone is available to assist? Thanks.
-
Message 004 From LockBit 3.0 Actor / other Date Hello
-
Message 005 From LockBit 3.0 Actor / other Date How I can help you?
-
Message 006 From Victim Victim Date Hi, my company's computer network was affected by a virus. There was a note that instructed we reach out to you. I was asked by my employer to find out from you if you have taken any data from our systems? And anything you can share about next steps would be helpful. Thank you.
-
Message 007 From LockBit 3.0 Actor / other Date You pay - we decrypt your network.
-
Message 008 From Victim Victim Date "Your data are stolen and encrypted" -- is this not the case?
-
Message 009 From LockBit 3.0 Actor / other Date You pay - we decrypt your network and delete your data.
-
Message 010 From Victim Victim Date Do you have a list of the data?
-
Message 011 From LockBit 3.0 Actor / other Date You will receive a complete list of the stolen data only after you pay the ransom.
-
Message 012 From LockBit 3.0 Actor / other Date File: [07-15-22 master control - brands 1099.pdf]
-
Message 013 From LockBit 3.0 Actor / other Date File: [10-30-22 stat summary - gbi svc 1099.pdf]
-
Message 014 From LockBit 3.0 Actor / other Date File: [12-30-22c checks - jj.pdf]
-
Message 015 From LockBit 3.0 Actor / other Date File: [2021 K-1 - JWNII Living Tr - Nicklaus DC Invest.pdf]
-
Message 016 From LockBit 3.0 Actor / other Date File: [Jim Schnare with Passport.jpg]
-
Message 017 From Victim Victim Date Ok, thank you. What/how do we pay you?
-
Message 018 From LockBit 3.0 Actor / other Date $7,000,000 in bitcoin, or $6,900,000 in monero
-
Message 019 From Victim Victim Date You're asking for 7 million dollars for this?
-
Message 020 From LockBit 3.0 Actor / other Date You are a very famous brand, it is a very good price not to ruin the reputation of the Golden Bear, why your director at 82 years old hundreds of millions of dollars? he will not have time to spend them the rest of his life anyway, so 7 million dollars is a very fair price so that no one will ever know about our attack.
-
Message 021 From Victim Victim Date Good morning. I have passed on your messages to my bosses. They will be discussing with the board this weekend or early next weekend. I will get back to you then. Thanks.
-
Message 022 From LockBit 3.0 Actor / other Date Ok.
-
Message 023 From Victim Victim Date Hello. It looks like my bosses have some meetings scheduled for today to discuss this. They are asking how many files you took from our systems?
-
Message 024 From LockBit 3.0 Actor / other Date You will receive a complete list of the stolen data only after you pay the ransom.
-
Message 025 From Victim Victim Date Do you have the total size you can share with me? I'd like to give my bosses some information that may be helpful in making their decision. Thanks.
-
Message 026 From LockBit 3.0 Actor / other Date More than 200 gigabytes of data.
-
Message 027 From Victim Victim Date Good morning. My bosses have meetings with partners this morning. Once I have some information, I will let you know. Thanks.
-
Message 028 From LockBit 3.0 Actor / other Date Ok.
-
Message 029 From Victim Victim Date Hello, sorry for the delay. I've been following up with my bosses for some updated information. At this point, I've been told that we don't have anywhere close to 7 million dollars. My bosses are asking what you will do with the data after we pay? Thanks.
-
Message 030 From LockBit 3.0 Actor / other Date Advise your bosses not to be greedy, we know you have money, we own your documents, the richest people on the planet play in your clubs and nothing is more important than your reputation. In case you can overcome the greed of your bosses we will permanently delete all the stolen information and this chat room, no one will ever know about our attack on your company.
-
Message 031 From LockBit 3.0 Actor / other Date You need pay.
-
Message 032 From Victim Victim Date Hello. Sorry for the delay. I have been talking to my bosses to get to a resolution.
-
Message 033 From Victim Victim Date My bosses wants me to communicate some things to you sir. Your ask for 7 million is much too high and we cannot pay this. Most of the reputation damage is already done to us just by the fact that you came into our network and took our data. The non-publication of the data is a very small part of the total damage. Our lawyers have forced us to notify our employees and customers of the breach and we already lost some business relationships as a result. We also do not have the funds to support the asking price anyway because we are spending a lot of money recovering from the breach.
-
Message 034 From Victim Victim Date To honor our stakeholders, we are willing to pay you something — not 7 mil. Can you please consider a lower amount. Thanks.
-
Message 035 From LockBit 3.0 Actor / other Date Make your offer.
-
Message 036 From Victim Victim Date I have a meeting in 1 hour with my bosses and lawyers and will get back to you right after.
-
Message 037 From Victim Victim Date My bosses said a reporter reached out and told them that our data is already published?
-
Message 038 From LockBit 3.0 Actor / other Date http://lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion/post/sS6QQig1vV0mZa2T63e0f561ef4dc
-
Message 039 From LockBit 3.0 Actor / other Date At the moment only your company name is published, but very soon all of your information will be published if you do not pay, you have little time left. Only 48 hours to pay.
-
Message 040 From Victim Victim Date Ah ok. Only 48 hours? I thought it said Feb 21?
-
Message 041 From LockBit 3.0 Actor / other Date [Chat started] 17.01.2023 16:11:13 UTC
-
Message 042 From LockBit 3.0 Actor / other Date I just want to let you know that the data is ready to be published and the decryptor is ready to be deleted. You have had plenty of time to make your decision, your time is up.
-
Message 043 From LockBit 3.0 Actor / other Date Do you have any offer for me?