extortion.wiki THE RANSOMWARE DOCUMENTARY ARCHIVE
Menu

242 negotiations · 332 notes · snapshots Jul 06, 2026 / Jun 26, 2026

lockbit3.0 — Chat: *************DFC2C5

Date not recorded

From extortion.wiki, the ransomware negotiation research archive

A validated static rendering of 73 messages in source-array order. Transcript text is preserved without editorial additions.

Actor
lockbit3.0
Record date
Date not recorded
Messages
73
Participants
LockBit 3.0, Victim

Preserved messages

Actor / other Victim

Select a message number for a stable citation link. Text remains selectable; hard-wrapped source lines are joined for reading, intentional blank-line paragraph breaks remain, and written URLs remain inert.

  1. Message 001 From Victim Victim Date

    [Chat started]

  2. Message 002 From Victim Victim Date

    Hello

  3. Message 003 From Victim Victim Date

    we ahve seen a note on our systems asking to contact you

  4. Message 004 From Victim Victim Date

    how does this work?

  5. Message 005 From Victim Victim Date

    we are destroyed

  6. Message 006 From Victim Victim Date

    hello?

  7. Message 007 From LockBit 3.0 Actor / other Date

    hi

  8. Message 008 From LockBit 3.0 Actor / other Date

    to decrypt the data and avoid publication you need to pay us. we haven't published your name on our blog yet

  9. Message 009 From Victim Victim Date

    we think your page is not working properly, we tried 2 first links and it got stuck on the logo and 3 items flipping around all time after some 5 minutes loading

  10. Message 010 From Victim Victim Date

    is there some other way we canc omunicate?

  11. Message 011 From LockBit 3.0 Actor / other Date

    use mirrors, we under ddos

  12. Message 012 From Victim Victim Date

    and also, which data do you mean? can we know which data did you get from us?

  13. Message 013 From LockBit 3.0 Actor / other Date

    You can reach us at any of these links using a Tor browser: http://lockbitsupa7e3b4pkn4mgkgojrl5iqgx24clbzc4xm7i6jeetsia3qd.onion http://lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion http://lockbitsupn2h6be2cnqpvncyhj4rgmnwn44633hnzzmtxdvjoqlp7yd.onion http://lockbitsupo7vv5vcl3jxpsdviopwvasljqcstym6efhh6oze7c6xjad.onion http://lockbitsupq3g62dni2f36snrdb4n5qzqvovbtkt5xffw3draxk6gwqd.onion http://lockbitsupqfyacidr6upt6nhhyipujvaablubuevxj6xy3frthvr3yd.onion http://lockbitsupt7nr3fa6e7xyb73lk6bw6rcneqhoyblniiabj4uwvzapqd.onion http://lockbitsupuhswh4izvoucoxsbnotkmgq6durg7kficg6u33zfvq3oyd.onion http://lockbitsupxcjntihbmat4rrh7ktowips2qzywh6zer5r3xafhviyhqd.onion

  14. Message 014 From Victim Victim Date

    now it looks like http://lockbitsupdwon76nzykzblcplixwts4n4zoecugz2bxabtapqvmzqqd.onion/ its working

  15. Message 015 From Victim Victim Date

    thanks god

  16. Message 016 From Victim Victim Date

    well, tell me, what data do you mean?

  17. Message 017 From LockBit 3.0 Actor / other Date

    data from your network

  18. Message 018 From Victim Victim Date

    we have 150 computers

  19. Message 019 From Victim Victim Date

    which data? so I can tell the bosses

  20. Message 020 From LockBit 3.0 Actor / other Date

    we will give you this information after you pay the ransom

  21. Message 021 From Victim Victim Date

    we dont know how all this thing works yet, our tech group is scheduled to come early tomorrow

  22. Message 022 From Victim Victim Date

    if you tell us which data you got, we can say this on our meeting with our managers

  23. Message 023 From Victim Victim Date

    understand our position, our ability to pay will depend on what our IT staff says tomorrow and which folders/files we risk being published

  24. Message 024 From Victim Victim Date

    we are an small company which is already struggling to stand by, this has greatly affected our ability to give service to our customers

  25. Message 025 From LockBit 3.0 Actor / other Date

    we will soon send you a tree of stolen data

  26. Message 026 From Victim Victim Date

    ok

  27. Message 027 From LockBit 3.0 Actor / other Date

    https://temp.sh/vpCYM/vit%20list.txt

  28. Message 028 From LockBit 3.0 Actor / other Date

    130k files, 122gb

  29. Message 029 From Victim Victim Date

    Ok, I will check with the team and get back to you

  30. Message 030 From Victim Victim Date

    how much money is this all going to cost us?

  31. Message 031 From Victim Victim Date

    can we see those files?

  32. Message 032 From Victim Victim Date

    \VITALITYHP\Vitality Health Plan\2019 Marketing Materials\Business Card [.] Biz Card Back.pdf Biz Card Front2-01.png [..] Biz Card Back2-01.png [redacted].pdf

  33. Message 033 From Victim Victim Date

    Vitality_[redacted].pdf Vitality_[redacted].pdf Vitality_[redacted].pdf Vitality_[redacted].pdf Vitality_[redacted].pdf Vitality_[redacted].pdf Vitality_[redacted].pdf Vitality_[redacted].pdf Vitality_[redacted].pdf Vitality_[redacted].pdf Vitality_[redacted].pdf Vitality_[redacted].pdf Vitality_[redacted].pdf

  34. Message 034 From Victim Victim Date

    some of them, just to see that you really have the files

  35. Message 035 From LockBit 3.0 Actor / other Date

    We'll send you the files in a moment

  36. Message 036 From LockBit 3.0 Actor / other Date

    The price of decrypt and delete data 1.000.000$. we accept payment in BTC

  37. Message 037 From LockBit 3.0 Actor / other Date

    https://temp.sh/TSyij/files.zip

  38. Message 038 From Victim Victim Date

    1 million is absolutely out of range

  39. Message 039 From Victim Victim Date

    however, thanks for all the informationa nd files, we will have a meeting on monday morning and tell you something

  40. Message 040 From LockBit 3.0 Actor / other Date

    We studied your revenue data. we found information that the revenue is about $100 million. in addition, your site translates to the site of a large california company with $1 billion in revenue. based on this, the requested amount is quite real. pay and no one will ever know about the attack. we will return all your files and tell you about the attack, and delete your data from our servers forever. if you delay and do not negotiate actively, we will publish a post about you on our blog.

  41. Message 041 From LockBit 3.0 Actor / other Date

    https://www.bleepingcomputer.com/news/security/lockbit-victim-estimates-cost-of-ransomware-attack-to-be-42-million/

  42. Message 042 From LockBit 3.0 Actor / other Date

    One company refused to pay the ransom. and suffered a lot. there is a lot of information about us on the internet. here is an example

  43. Message 043 From Victim Victim Date

    our revenue isnt even close to $100 million, $1 mimllion is too much

  44. Message 044 From Victim Victim Date

    bosses are willing to pay a much smaller sum

  45. Message 045 From Victim Victim Date

    given that we have backups and the data you took is not sensitve at all

  46. Message 046 From Victim Victim Date

    we know who you are, and we know you are at least reliable

  47. Message 047 From Victim Victim Date

    bosses said they can pay $100k without need for additional requests/meetings, think about it

  48. Message 048 From LockBit 3.0 Actor / other Date

    No, it's not enough!

  49. Message 049 From Victim Victim Date

    we have finance dept, with its own CEO and he is not willing to give more than that.

  50. Message 050 From LockBit 3.0 Actor / other Date

    we have your sensitive data, marketing data, financial data, passports, iti, transactions, and so on. so think about the damage that publishing data can do to you. think about the damage you will get.

  51. Message 051 From Victim Victim Date

    we can negotiate, but anything above that is going to require a lot of paperwork, meetings, approvals and so on

  52. Message 052 From Victim Victim Date

    yes, we know, thats why we are here trying to find a solution

  53. Message 053 From LockBit 3.0 Actor / other Date

    if you are not ready to pay more than 100k, you can leave the chat room and wait for the publication of your data

  54. Message 054 From Victim Victim Date

    100k is what we can pay now, 1 million we can never pay

  55. Message 055 From Victim Victim Date

    anything between, will take time

  56. Message 056 From LockBit 3.0 Actor / other Date

    for now, you have time to find money. but time will not last indefinitely. we need a deadline. if you drive unproductive talks, or don't come in for a chat, we will publish a post about your company on our blog. so far, we haven't done that

  57. Message 057 From LockBit 3.0 Actor / other Date

    We know exactly who you are. don't start talking about limiting finances and so on. we know who you are and how much you can pay. so we will stand our ground and take tough measures in case of disobedience

  58. Message 058 From Victim Victim Date

    you dont know who I am, otherwise you would not be here

  59. Message 059 From Victim Victim Date

    tell your boss I dont throw him to the dogs because I respect him, his brother and what they say

  60. Message 060 From Victim Victim Date

    I mean the real boss, not lockbitsupp

  61. Message 061 From Victim Victim Date

    good luck

  62. Message 062 From LockBit 3.0 Actor / other Date

    Put aside unnecessary talk. negotiate constructively.

  63. Message 063 From Victim Victim Date

    just tell your boss and his brother that I appreciate them, thats all

  64. Message 064 From Victim Victim Date

    tell lockbitsupp to send it to the real owners

  65. Message 065 From LockBit 3.0 Actor / other Date

    that doesn't make sense. why are you coming in here?

  66. Message 066 From Victim Victim Date

    your feud with the cats should be coming to an end, at least on the public domain

  67. Message 067 From Victim Victim Date

    what is the point of giving away so much information in front of everyone who wants to read xss?

  68. Message 068 From Victim Victim Date

    its good for none of you and very valuable for FEDs and their cheap dogs, researchers

  69. Message 069 From LockBit 3.0 Actor / other Date

    If you're not interested, leave the chat room and don't come in.

  70. Message 070 From Victim Victim Date

    nice honeypot that you locked

  71. Message 071 From Victim Victim Date

    well, not even locked beacuse you just ran your locker and left, backups where there and esxi too

  72. Message 072 From Victim Victim Date

    I will take your advice to not come back, take care my friend.

  73. Message 073 From LockBit 3.0 Actor / other Date

    bye