extortion.wiki THE RANSOMWARE DOCUMENTARY ARCHIVE
Menu

242 negotiations · 332 notes · snapshots Jul 06, 2026 / Jun 26, 2026

lockbit3.0 — Chat: *************C28148

Date not recorded

From extortion.wiki, the ransomware negotiation research archive

A validated static rendering of 99 messages in source-array order. Transcript text is preserved without editorial additions.

Actor
lockbit3.0
Record date
Date not recorded
Messages
99
Participants
LockBit 3.0, Victim

Preserved messages

Actor / other Victim

Select a message number for a stable citation link. Text remains selectable; hard-wrapped source lines are joined for reading, intentional blank-line paragraph breaks remain, and written URLs remain inert.

  1. Message 001 From Victim Victim Date

    [Chat started]

  2. Message 002 From Victim Victim Date

    I found your note on my machines what do I do now?

  3. Message 003 From LockBit 3.0 Actor / other Date

    hi

  4. Message 004 From LockBit 3.0 Actor / other Date

    do you need decrypt?

  5. Message 005 From LockBit 3.0 Actor / other Date

    we have attacked your corporate network all your 4 TRUST domains

  6. Message 006 From LockBit 3.0 Actor / other Date

    and also all your servers are encrypted inside ESXI

  7. Message 007 From LockBit 3.0 Actor / other Date

    we also stole 250 GB of your data from all 4 of your networks, if our negotiations are unsuccessful, you will face high fines for GDRP

  8. Message 008 From LockBit 3.0 Actor / other Date

    everything is encrypted inside the virtualization of your servers, too, in order to restore all servers, this can be done with our decryptor

  9. Message 009 From Victim Victim Date

    How much is it going to cost us?

  10. Message 010 From LockBit 3.0 Actor / other Date

    price for decrypt, delete your data on our servers,conducting an audit of your cybersecurity company and how we infiltrated you will cost = 4 500 000 USD in BTC

  11. Message 011 From LockBit 3.0 Actor / other Date

    are you interested in the list of files that we stole from you?

  12. Message 012 From Victim Victim Date

    I am interested. Can you provide the list of files taken?

  13. Message 013 From LockBit 3.0 Actor / other Date

    10 min

  14. Message 014 From LockBit 3.0 Actor / other Date

    http://lockbitfile2tcudkcqqt2ve6btssyvqwlizbpv5vz337lslmhff2uad.onion/r/2oqRhBeCMe#lNxFt9KkQR6blBzgFQ0GUUxKSbQo6SQJf8xN8yYHqps=

  15. Message 015 From LockBit 3.0 Actor / other Date

    listing here

  16. Message 016 From Victim Victim Date

    I downloaded the list. If I give you a few file names can you provide those files to show you still have them?

  17. Message 017 From LockBit 3.0 Actor / other Date

    yes give me name files

  18. Message 018 From Victim Victim Date

    Can you provide "cable specifications sheets-ctsp-sm8.pdf" and "tbs-sysmap 8 12 2010.pdf"?

  19. Message 019 From LockBit 3.0 Actor / other Date

    yes

  20. Message 020 From LockBit 3.0 Actor / other Date

    wait

  21. Message 021 From LockBit 3.0 Actor / other Date

    File: [Cable Specification Sheets - CTSP-SM8.pdf]

  22. Message 022 From LockBit 3.0 Actor / other Date

    File: [TBS-Sysmap 8 12 2010.pdf]

  23. Message 023 From Victim Victim Date

    The second file just sends me to another lockbit page and doesn't load anything?

  24. Message 024 From LockBit 3.0 Actor / other Date

    now I'm moving through the file sharing service

  25. Message 025 From LockBit 3.0 Actor / other Date

    http://lockbitfilzhrvt6eya2lvnp7te4iifzmwybendqclgujqbzu3k4gaid.onion/r/ra7EVq5naF#1VV81qZWUW7DRFlvRRQAjhWZJJiBp/Bsfxuc+90gRR4=

  26. Message 026 From Victim Victim Date

    Can i give you files to prove you can decrypt them?

  27. Message 027 From LockBit 3.0 Actor / other Date

    Yes. You can make a test decryption by uploading the file to our portal.

  28. Message 028 From LockBit 3.0 Actor / other Date

    I am notifying you that in a month your decryptor will be deleted forever automatically. and you won't be able to restore your systems.

  29. Message 029 From Victim Victim Date

    ok sorry had issues grabbing file. I am testing the decryption link on the chat.

  30. Message 030 From LockBit 3.0 Actor / other Date

    ok

  31. Message 031 From LockBit 3.0 Actor / other Date

    you can take any small file from your PC and do the test yourself

  32. Message 032 From LockBit 3.0 Actor / other Date

    so that you do not delay the negotiations and there is no action from you, then within 48 hours we will publish your company on our leaks website

  33. Message 033 From Victim Victim Date

    I have the file and testing today. I did find something odd though and wanted to get confirmation from you.

  34. Message 034 From Victim Victim Date

    We found another note on one of our servers claiming to be lockbit2 and has a completely different link. Do I have to go to that link to?

  35. Message 035 From LockBit 3.0 Actor / other Date

    we have encrypted you with several types of our software

  36. Message 036 From LockBit 3.0 Actor / other Date

    lockbit 2.0 (red), lockbit black, lockbit esxi version

  37. Message 037 From Victim Victim Date

    Is the same decryptor used or will we get multiple decryptors?

  38. Message 038 From LockBit 3.0 Actor / other Date

    get your own decriptors for each version, they are convenient for us and you will not have any problems

  39. Message 039 From LockBit 3.0 Actor / other Date

    you can test from the version you found to make a test

  40. Message 040 From Victim Victim Date

    Ok, i grabbed a file that is too big anyways I need to grab a smaller file. I will grab a file from the lockbit 2.0 one.

  41. Message 041 From LockBit 3.0 Actor / other Date

    yes good

  42. Message 042 From LockBit 3.0 Actor / other Date

    any updates?

  43. Message 043 From Victim Victim Date

    I got the file and testing decryption soon.

  44. Message 044 From Victim Victim Date

    I received a message the file cannot be decrypted?

  45. Message 045 From LockBit 3.0 Actor / other Date

    send me the file here

  46. Message 046 From Victim Victim Date

    File: [insink.txt.lockbit]

  47. Message 047 From LockBit 3.0 Actor / other Date

    File: [insink.txt]

  48. Message 048 From LockBit 3.0 Actor / other Date

    test is working! when will you make the payment?

  49. Message 049 From LockBit 3.0 Actor / other Date

    any updates?

  50. Message 050 From Victim Victim Date

    $4.5 million is a lot of money.

  51. Message 051 From LockBit 3.0 Actor / other Date

    the price is from your income of your all companies! you're not a small company

  52. Message 052 From LockBit 3.0 Actor / other Date

    why are you delaying the negotiations? are you waiting for publicity about your companies? or until the time of the decrypt runs out and he retires?

  53. Message 053 From Victim Victim Date

    We are not delaying. I am willing to negotiate the price but $4.5 million is too much.

  54. Message 054 From LockBit 3.0 Actor / other Date

    I am waiting for a serious offer from you closer to our price (I am ready to discuss a discount)

  55. Message 055 From Victim Victim Date

    What discount are you will to give?

  56. Message 056 From LockBit 3.0 Actor / other Date

    30%

  57. Message 057 From LockBit 3.0 Actor / other Date

    payment for 72 hours discount will be valid

  58. Message 058 From LockBit 3.0 Actor / other Date

    will you have enough time?

  59. Message 059 From LockBit 3.0 Actor / other Date

    have you discussed our offer with the boss?

  60. Message 060 From LockBit 3.0 Actor / other Date

    any updates?

  61. Message 061 From LockBit 3.0 Actor / other Date

    your time is running out soon (discount), as well as you will lose the chance to return everything and get big fines for GTRD

  62. Message 062 From Victim Victim Date

    Sorry was trying to access the page and it wouldn't load. So i tried the other links and it gave me a blank chat.

  63. Message 063 From Victim Victim Date

    I sent everything across, my boss needs more time he had to get a board meeting together. Even with the discount $3mil is a lot of money we can't get that together quickly

  64. Message 064 From LockBit 3.0 Actor / other Date

    you can write to any chat to us

  65. Message 065 From LockBit 3.0 Actor / other Date

    How much time do you need?

  66. Message 066 From Victim Victim Date

    Ok, I didn't know that. Thanks.

  67. Message 067 From Victim Victim Date

    We have the board meeting tomorrow afternoon. Could you give us another 48 hours. I would have a better understanding of the amount we can have together.

  68. Message 068 From LockBit 3.0 Actor / other Date

    yes, we are making concessions to you on time!

  69. Message 069 From Victim Victim Date

    Thank you! I will keep you updated.

  70. Message 070 From LockBit 3.0 Actor / other Date

    we wait you

  71. Message 071 From LockBit 3.0 Actor / other Date

    how did the board of directors' negotiations go? the time you asked for will soon be over

  72. Message 072 From Victim Victim Date

    We are still here. The board is behind us it is more about collection of funds.

  73. Message 073 From LockBit 3.0 Actor / other Date

    how much time do you need?

  74. Message 074 From Victim Victim Date

    I am not sure. Just a slow process. Our insurance only covered so much. We have to make up the difference. I will get a better time frame for you. Trying to figure it out ourselves

  75. Message 075 From LockBit 3.0 Actor / other Date

    will we be able to fix the amount in bitcoins with you now? due to the high volatility of cryptocurrencies, it is better to fix immediately (for 48 hours)

  76. Message 076 From Victim Victim Date

    Sorry, I don't understand

  77. Message 077 From LockBit 3.0 Actor / other Date

    you will transfer the amount in bitcoins, the amount equivalent to the one we agreed with you, the price of cryptocurrencies often changes and we need to fix the amount that you have to transfer to us

  78. Message 078 From LockBit 3.0 Actor / other Date

    138.5 BTC you need a transaction to us WALLETS

  79. Message 079 From LockBit 3.0 Actor / other Date

    do we fix this amount for 48 hours?

  80. Message 080 From Victim Victim Date

    I understand. So instead of usd comparison we would do 138.5 btc. We are working to get that amount of cash to purchase the btc. insurance only covered a small percentage so we have to come up with the rest.

  81. Message 081 From LockBit 3.0 Actor / other Date

    hurry up, we made concessions to you and gave you a discount from our first price

  82. Message 082 From LockBit 3.0 Actor / other Date

    do you have time in our time (48 hours)?

  83. Message 083 From LockBit 3.0 Actor / other Date

    you here?

  84. Message 084 From Victim Victim Date

    I am still hear just trying to work on getting it together. It's a lot of money to pull together and it is taking time.

  85. Message 085 From LockBit 3.0 Actor / other Date

    how much time do you need? we will issue a post about you in the near future! don't try to leave for the weekend!

  86. Message 086 From Victim Victim Date

    didn't leave its not easy to get 3 mil when insurance doesn't help. We are working on the loans but it will be at least Monday.

  87. Message 087 From LockBit 3.0 Actor / other Date

    ok we wait you

  88. Message 088 From LockBit 3.0 Actor / other Date

    any updates?

  89. Message 089 From LockBit 3.0 Actor / other Date

    what news do you have?

  90. Message 090 From LockBit 3.0 Actor / other Date

    ok, since you don't tell us anything, it was decided to create a blog with your companies in our blog in 3-4 hours. we will publish documents and correspondence with you (with a payment timer)

  91. Message 091 From LockBit 3.0 Actor / other Date

    File: [lyonhealy.com-full-listing.rar]

  92. Message 092 From LockBit 3.0 Actor / other Date

    I'm sorry I messed up the chat, it's not for you!

  93. Message 093 From LockBit 3.0 Actor / other Date

    we have issued a block, with a timer and proof that we were in your network! 48 hours to get in touch

  94. Message 094 From LockBit 3.0 Actor / other Date

    http://lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion/post/np4U8qdHNfB9QQT363ebf44bea050

  95. Message 095 From LockBit 3.0 Actor / other Date

    the private link is valid for 48 hours, then you will be in our blog, will we delay the payment?

  96. Message 096 From LockBit 3.0 Actor / other Date

    why are you here?

  97. Message 097 From LockBit 3.0 Actor / other Date

    will you be silent as well? are we publishing all your data?

  98. Message 098 From LockBit 3.0 Actor / other Date

    we will also publish this correspondence with you

  99. Message 099 From LockBit 3.0 Actor / other Date

    attached our chat! it will be at the expiration of the timer!