extortion.wiki THE RANSOMWARE DOCUMENTARY ARCHIVE
Menu

242 negotiations · 332 notes · snapshots Jul 06, 2026 / Jun 26, 2026

lockbit3.0 — Chat: *************888989

Date not recorded

From extortion.wiki, the ransomware negotiation research archive

A validated static rendering of 215 messages in source-array order. Transcript text is preserved without editorial additions.

Actor
lockbit3.0
Record date
Date not recorded
Messages
215
Participants
LockBit 3.0, Victim

Preserved messages

Actor / other Victim

Select a message number for a stable citation link. Text remains selectable; hard-wrapped source lines are joined for reading, intentional blank-line paragraph breaks remain, and written URLs remain inert.

  1. Message 001 From Victim Victim Date

    [Chat started]

  2. Message 002 From Victim Victim Date

    Hello. We received your note. Can you please tell us your demand and send us the file tree of data taken. Thank you.

  3. Message 003 From LockBit 3.0 Actor / other Date

    Hello. Tell me please your name?

  4. Message 004 From LockBit 3.0 Actor / other Date

    We provide a complete file tree only after payment of the redemption fee. Right now we can give you a partial list of no more than 10%

  5. Message 005 From Victim Victim Date

    I am the IT manager and the only one that can use TOR

  6. Message 006 From LockBit 3.0 Actor / other Date

    $6,000,000 is the price.

  7. Message 007 From Victim Victim Date

    Where did you come up with this number. I think you have us confused with a different firm.

  8. Message 008 From Victim Victim Date

    Our cash flow is under $200K and you are asking 30 times that. We are willing to settle with you but you have us confused with another company. We are willing to pay $50K

  9. Message 009 From Victim Victim Date

    Do we have a deal at $50K? Please send us your wallet address. Thank you.

  10. Message 010 From LockBit 3.0 Actor / other Date

    You can better.

  11. Message 011 From Victim Victim Date

    What are you asking for then?

  12. Message 012 From Victim Victim Date

    we would like to conclude our business with you as soon as possible

  13. Message 013 From LockBit 3.0 Actor / other Date

    I can give you decryptor in 1 click

  14. Message 014 From LockBit 3.0 Actor / other Date

    Simple sent to my wallet $6m usd

  15. Message 015 From Victim Victim Date

    You must have us confused with someone else. You are asking 30 times more than our cash flow. We need a far better number.

  16. Message 016 From LockBit 3.0 Actor / other Date

    You are bluffing

  17. Message 017 From LockBit 3.0 Actor / other Date

    Your financial documents that were stolen by us tell us that you have a lot more money than you claim, I think the IRS would love to see your documents.

  18. Message 018 From LockBit 3.0 Actor / other Date

    It will be better for you if you just pay and we leave our attack in secret.

  19. Message 019 From Victim Victim Date

    Send us the financial documents you are referring to as you are mistaken.

  20. Message 020 From Victim Victim Date

    We also received your message on our customer support page today. We told you we want to solve this quickly. You have mispriced us as we are a small financial organization. ZoomInfo shows you our size but that number on revenue is high as well.

  21. Message 021 From LockBit 3.0 Actor / other Date

    You can see all the documents in our brilliant blog, you can also see how greedy people can be and how much money they lose by refusing to pay a relatively small amount of their income

  22. Message 022 From LockBit 3.0 Actor / other Date

    http://lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion/post/dpGGTXwJUYMy8cTW63002f8b14b9c

  23. Message 023 From LockBit 3.0 Actor / other Date

    Example

  24. Message 024 From Victim Victim Date

    As we have said already - we are a small financial firm and your demand does not match our business or what we can pay. Give us a realistic amount and we can settle this quickly.

  25. Message 025 From LockBit 3.0 Actor / other Date

    Give us a realistic amount and we can settle this quickly.

  26. Message 026 From Victim Victim Date

    the onion link is not work for us

  27. Message 027 From LockBit 3.0 Actor / other Date

    try mirrors

  28. Message 028 From LockBit 3.0 Actor / other Date

    http://lockbitapt2yfbt7lchxejug47kmqvqqxvvjpqkmevv4l3azl3gy6pyd.onion/

  29. Message 029 From LockBit 3.0 Actor / other Date

    http://lockbitapt34kvrip6xojylohhxrwsvpzdffgs5z4pbbsywnzsbdguqd.onion/

  30. Message 030 From LockBit 3.0 Actor / other Date

    http://lockbitapt5x4zkjbcqmz6frdhecqqgadevyiwqxukksspnlidyvd7qd.onion/

  31. Message 031 From LockBit 3.0 Actor / other Date

    http://lockbitaptc2iq4atewz2ise62q63wfktyrl4qtwuk5qax262kgtzjqd.onion/

  32. Message 032 From Victim Victim Date

    You asked for a realistic amount. We gave you an amount. If you looked at zoominfo, you would realize we are mispriced. We are ready to transfer you $50K

  33. Message 033 From Victim Victim Date

    We are ready to solve this now.

  34. Message 034 From LockBit 3.0 Actor / other Date

    It's not enough.

  35. Message 035 From Victim Victim Date

    give me a number to work with then.

  36. Message 036 From LockBit 3.0 Actor / other Date

    $6m

  37. Message 037 From Victim Victim Date

    Do you understand me, obviously not. You are asking for 30 times Net Income. Our total revenue is below $10KK. Look at zoominfo.

  38. Message 038 From Victim Victim Date

    You have us confused with some other firm

  39. Message 039 From Victim Victim Date

    As I have told you, we are willing to settle as quickly as possible if you give us a realistic number

  40. Message 040 From LockBit 3.0 Actor / other Date

    tapcocu.org?

  41. Message 041 From Victim Victim Date

    Yes.

  42. Message 042 From LockBit 3.0 Actor / other Date

    $6m

  43. Message 043 From LockBit 3.0 Actor / other Date

    Total revenues $19,621,065 2019 Yearly growth 2.9% % of revenues n/a 20152016201720182019$13m$17m Total expenses $15,846,289 2019 Yearly growth 2.4% % of expenses n/a 20152016201720182019$11m$13m$15m Total assets $394,852,832 2019 Yearly growth 5.5% % of assets n/a 20152016201720182019$0.3b$0.4b$0.4b Num. employees 110 2019 Yearly growth 6.8%

  44. Message 044 From LockBit 3.0 Actor / other Date

    We started a DDoS attack on your site.

  45. Message 045 From LockBit 3.0 Actor / other Date

    As of now it is not possible to authorize on your site.

  46. Message 046 From Victim Victim Date

    Are you not understanding financials. Let me help you out

  47. Message 047 From Victim Victim Date

    You have 2019 numbers, not 2022. Also Revenues- Expenses with the numbers you have listed, which are not correct are only equate to under $1M. Are you telling me you normally ask a company to pay $6M on under $10M in revenue with Net Income a little over $200K. I have no idea how any company would pay you.

  48. Message 048 From LockBit 3.0 Actor / other Date

    Are you saying that the net profit per year is $200,000?

  49. Message 049 From Victim Victim Date

    After you take out all the EBITDA and expenses, yes. Look. we want to work with you but what you ask is impossible to give. Give me a workable number and we will come to terms

  50. Message 050 From LockBit 3.0 Actor / other Date

    I don't believe you make 200,000 a year, that's a lie.

  51. Message 051 From Victim Victim Date

    why does you site say socket connection issue

  52. Message 052 From LockBit 3.0 Actor / other Date

    its normal

  53. Message 053 From LockBit 3.0 Actor / other Date

    we in tor and under ddos 24\7\365

  54. Message 054 From Victim Victim Date

    you are under DDOS by who

  55. Message 055 From Victim Victim Date

    ok. know I understand why socket connection issue.

  56. Message 056 From LockBit 3.0 Actor / other Date

    we attack hundreds of companies like you, there are many who don't like us)

  57. Message 057 From Victim Victim Date

    i understand. well, we are not attacking you. We just want to get to a solution and move about business

  58. Message 058 From LockBit 3.0 Actor / other Date

    Ok no problem, transfer me 6 million and we'll make a deal right now, everyone will be happy.

  59. Message 059 From Victim Victim Date

    I am really trying to explain it. We do not have what you want. You are asking for 60% of revenue. You really extort companies for 60% of revenue. So you would charge a company that has $200Million of revenue $120Million ransom.

  60. Message 060 From LockBit 3.0 Actor / other Date

    Total assets $394,852,832

  61. Message 061 From Victim Victim Date

    You are working with bad information on us. so either reprice us and come to something reasonable or we are not going to have much to chat about

  62. Message 062 From Victim Victim Date

    That is not our money. I am sure you have a bank account somewhere. The bank cannot give your money to someone else

  63. Message 063 From LockBit 3.0 Actor / other Date

    What kind of reasonable price can we talk about if you lie to me in every word?

  64. Message 064 From Victim Victim Date

    Why would lie to you. I just want to get to a solution and then move to fixing our network.

  65. Message 065 From LockBit 3.0 Actor / other Date

    Since you are a credit organization because of our attack all your clients will stop trusting you, your business will be destroyed, this is what our pricing policy is related to, each company has an individual approach, you can never agree with me for 50 thousand dollars, if you have no more money do not write me anymore.

  66. Message 066 From Victim Victim Date

    If you give me something to work with, I can see what I can do here

  67. Message 067 From LockBit 3.0 Actor / other Date

    Ask something of the director of your credit organization, whether he wants to preserve the reputation of his company or whether he better start thinking about creating a new company.

  68. Message 068 From LockBit 3.0 Actor / other Date

    Thanks for the dialogue, I have 3 prostitutes coming to see me, I have to leave you. Have a good day.

  69. Message 069 From Victim Victim Date

    Well, enjoy then. When you return, can we get to a solution.

  70. Message 070 From Victim Victim Date

    We want to get to a deal as quickly as possible. After discussions with the board and reviewing our financials, we are looking to increase our offer to be between $250K to $400K. We want to settle today so hopefully you can understand our position and we can close this deal. For the amount within the range, we would like the decryption software, support for it, you said you had data of ours so we would like a listing of the documents and some type of deletion log to prove you no longer have it, explain how you got into our network, and to never attack us again. We look forward to your positive response.

  71. Message 071 From LockBit 3.0 Actor / other Date

    This is still not a sufficient amount, you are being brazen and clearly misleading me, but I take into account your step to meet and am also ready to give you a discount of up to $ 5.500.000.

  72. Message 072 From Victim Victim Date

    Not trying to be brazen nor misleading you. I am trying to provide the facts to you that your demand amount is not realistic for a company our size and if you would work with us, we would settle this todayh

  73. Message 073 From LockBit 3.0 Actor / other Date

    If you had stopped lying to me and wanted to save your business then you would have stopped the ddos attack and decrypted your network in 5 minutes.

  74. Message 074 From Victim Victim Date

    I want to decrypt our network as quickly as possible and want to do a deal. Your starting number is not manageable for a company of 100 employees. If your number would have been in the $250K to $400K range, we would have paid you right away.

  75. Message 075 From Victim Victim Date

    so let's talk about paying you right away. Can we get a reasonable number so you can go enjoy your weekend

  76. Message 076 From LockBit 3.0 Actor / other Date

    In connection with a ddos attack you try to change the source code of your website and the entire authorization page including post data, this will not help you, you open new vulnerabilities that will allow other hackers to easily download all the data from your website, thus you only make yourself worse, once your customers' data is published you can forget about your business, no one will ever trust you. Stop, don't make a stupid step, your assets are more than 300 million dollars, your director will not get poorer if he pays me 5.500.000. Do not be greedy, save your priceless reputation and business, in banking there is nothing more valuable than a reputation, your reputation you have earned over many years and lose in an instant.

  77. Message 077 From Victim Victim Date

    can you proivde the partial file tree while I caucus with my board members

  78. Message 078 From LockBit 3.0 Actor / other Date

    It will take some time, yes I can do it if you are willing to wait.

  79. Message 079 From Victim Victim Date

    As a credit union, we are a not for profit and the number your reference in not our money. We hold money for indivuduals in their accounts in their name. We cannot use this money.

  80. Message 080 From LockBit 3.0 Actor / other Date

    Then let this organization know that it's time to take your money, your time is up.

  81. Message 081 From LockBit 3.0 Actor / other Date

    The best I can do for you is 5 million

  82. Message 082 From LockBit 3.0 Actor / other Date

    Voice your decision, it's time to publish your data.

  83. Message 083 From Victim Victim Date

    I don't know what you mean by our time is up but we are negotiating in good faith. Our board is willing increase it's offer range to $650K - $750K which we can pay quickly. Publishing our data does no good. We are here trying to resolve this. You think we have more money than we have and we have asked you to consider we are a not for profit credit union and the assets you reference are not ours.

  84. Message 084 From LockBit 3.0 Actor / other Date

    Tell your board that the price will not go below 5 million, please give me their answer as soon as possible.

  85. Message 085 From LockBit 3.0 Actor / other Date

    I also negotiate in good faith, but I can't do it forever; my time is very expensive. When I see that negotiations are deadlocked and you do not hear me, there is no point in continuing negotiations. We are not in the Arab market to bargain here for 100-200 thousand dollars. You and I have serious businesses, we earn millions of dollars, the reputation of your business is priceless and can not be worth less than 5 million, if your leadership is adequate and understands that the business had to close, they will pay 5 million, if you are willing to close your business, enjoy your 5 million and do not pay me.

  86. Message 086 From Victim Victim Date

    We are under 100 person firm. The assets you reference are not ours. If you are financially motivated we have given you a reasonable offer and most victims on your blog have amounts fall smaller than the amount you want and are larger organizations.

  87. Message 087 From LockBit 3.0 Actor / other Date

    The amount of ransom is always individual and depends on different factors, annual income, profit, quality of network encryption, quantity of stolen data, quality of stolen data, availability of dirt, violations of the law and more. In my blog there is no credit organization that gives loans to people, what do you think is the reason for this?

  88. Message 088 From LockBit 3.0 Actor / other Date

    I'm going for a boat ride soon, if you want to close the deal right now let me know back soon. Thank you.

  89. Message 089 From Victim Victim Date

    We want a deal as well but remind you we only hold money and it's not ours to use under any circumstance by law. The money that is ours cannot be used for non-banking expenses by law and what is left over after that is very little. We simply don't have the amount of money you demand but have offerred you a tremendous amount of money. Take this deal and let's end this.

  90. Message 090 From LockBit 3.0 Actor / other Date

    I cannot accept your amount. I'm sorry.

  91. Message 091 From Victim Victim Date

    We are here when you want to do a deal. We have funds to pay just not in the range you are asking for.

  92. Message 092 From Victim Victim Date

    Hopefully then boat trip was relaxing on your end. We are ready to close the deal at 750k as we were successful in securing funds. Let's close the deal and both of us can enjoy the rest of the weekend. Thank you.

  93. Message 093 From LockBit 3.0 Actor / other Date

    The best I can do for you is 5 million

  94. Message 094 From Victim Victim Date

    You said you were going to send us the files tree. Can you please send the partial tree. Thank you.

  95. Message 095 From LockBit 3.0 Actor / other Date

    Yes I can

  96. Message 096 From LockBit 3.0 Actor / other Date

    File: [1.7z]

  97. Message 097 From LockBit 3.0 Actor / other Date

    File: [2.7z]

  98. Message 098 From LockBit 3.0 Actor / other Date

    File: [3.7z]

  99. Message 099 From LockBit 3.0 Actor / other Date

    File: [4.7z]

  100. Message 100 From LockBit 3.0 Actor / other Date

    File: [9.png]

  101. Message 101 From LockBit 3.0 Actor / other Date

    Since all your files do not have names but are simply numbered for better security and handling and use of special programs, I made screenshots of some random files for you.

  102. Message 102 From LockBit 3.0 Actor / other Date

    Because of this policy of naming files it is hard to find the most valuable and compromising files of your company, but I was able to find a file that describes your money and the money of your investors, this amount exceeds 500 million dollars, so this once again confirms that you are evading taxes and 1% of this amount for me and keeping our secrets will be a perfectly fair amount.

  103. Message 103 From Victim Victim Date

    Our NET Revenue last year was $3 million. The document you provided has our clients’ money and we only hold the funds. We cannot access the funds as only our clients can. So, when we pay you in BTC it goes into a wallet. Your wallet is likely held at some brokerage firm. The brokerage firm cannot access your wallet and take that money. They are just holding the money and you are the one that controls it not us. When we report to our regulator, we must report the amount of funds we are holding. Again – this is loans and deposits that we cannot use and is reported to regulators. We are offering you 25% of our Net Revenue Number of $3million. $750,000 is a sizeable sum. We want to get to a deal and will pay you quickly. So, hopefully you understand that we do not control the $500,000,000 number as it controlled by our members. We only can control the $3 Million Net Revenue Number and we are offering 25% of that sum. I do not know if other organizations are giving you this amount of their Net Revenue. We are a not-for-profit credit union. Please understand that we want to settle and will pay you with funds we can control. Can we conclude our affairs and move forward and pay you what we control.

  104. Message 104 From LockBit 3.0 Actor / other Date

    Hi, you're trying to trick me again, once again, the minimum possible ransom amount is $5 million. Judging by your documents you regularly violate tax laws and evade taxes, you understate your profits, although in fact it is much higher, you are engaged in money laundering, this is the first thing. Secondly as soon as all this becomes public, none of your investors will not trust you with money for your business, as well as the reputation as a credit institution will be forever and irrevocably ruined, your competitors will be very happy to download all the loan agreements and lure your clients to themselves, so please stop pissing in my ears, pay 5 million dollars and let's go as ships at sea in peace.

  105. Message 105 From Victim Victim Date

    No one is trying to trick you and we are not pissing in your ears. Your accusations are unfounded as we are audited by regulators every year. We have tried to explain our business model to you and you seem to not understand. We are a not for profit credit Union and our net revenue last year was $3M. Our records are public and you can look them up. We have told you we will give you 25 percent of our net revenue, which is 750K. We have been through your blog and companies with larger revenue than we have are charged less than you are asking from us. We are willing to sail in peace just modify your understanding of the situation and we will pay quickly.

  106. Message 106 From LockBit 3.0 Actor / other Date

    $5,000,000 is the price.

  107. Message 107 From LockBit 3.0 Actor / other Date

    http://lockbitapt2d73krlbewgv27tquljgxr33xbwwsp6rkyieto7u4ncead.onion/post/IkGuYqjqKZ5KB0nV63153472ed56e

  108. Message 108 From LockBit 3.0 Actor / other Date

    I am tired of your lies, you have 21 hours to pay, after the timer expires all your information will be published publicly.

  109. Message 109 From LockBit 3.0 Actor / other Date

    Before you send $5 million to my wallet, send a $1 test payment please.

  110. Message 110 From LockBit 3.0 Actor / other Date

    bc1qyuunv9pz6f4qpgd0c0wmenu9zhr6u57yjf4afd bitcoin wallet

  111. Message 111 From LockBit 3.0 Actor / other Date

    Good luck

  112. Message 112 From Victim Victim Date

    The below link is from an independent source which confirms our net income of $3,593M for the year, which you can see on page 7 of the report. This is the money we have available to settle our affairs not the $500M in customer loans and deposits you continue to reference which you can see on pg.13 of the report and which isn’t hidden from the authorities as you claim. Please accept our offer and let's settle this once and for all. If you are financially motivated, then give us a realistic number as you are already receiving 25 percent of our net revenue. https://www.mossadams.com/getmedia/7b751331-6788-43df-b8e2-bcf754e9d85e/Credit-Union-Index-WA-OR.pdf

  113. Message 113 From LockBit 3.0 Actor / other Date

    5 million is a realistic figure for you and it is not up for discussion. Pay up or you will lose your business.

  114. Message 114 From Victim Victim Date

    In good faith, paying you $1,000 to extend the leak clock does nobody any good. We cannot pay $5M and we have tried to explain this to you multiple times. Our net income is $3M. It seems like we have hit an impasse in our discussions. We do not understand how you can in good faith ask a company to pay more in net income than they made. It seems you want our business to go under. From a business perspective, we all win if you would lower your number and we sail our separate ways. If I could raise the amount to $1M, will this be enough to satisfy your demands. If so, I can talk further with the board about how to raise the additional amount.

  115. Message 115 From LockBit 3.0 Actor / other Date

    Talk to the board about 1 percent of your $500 million, you have three hours left.

  116. Message 116 From Victim Victim Date

    The board has communicated that we only made $3Million in Net Revenue last year and provided you third party references on it. We do not control the $500 million that you continue to reference as that is our client money. Publishing us does no good on either party as we are both motivated to get to a solution. What other information can we provide you to demonstrate that we do not control the $500 million and only control the $3M. We are only a 100 person company.

  117. Message 117 From LockBit 3.0 Actor / other Date

    I don't believe you.

  118. Message 118 From LockBit 3.0 Actor / other Date

    bc1qyuunv9pz6f4qpgd0c0wmenu9zhr6u57yjf4afd bitcoin wallet to extend the timer by 1 day

  119. Message 119 From LockBit 3.0 Actor / other Date

    Send me $1,000.

  120. Message 120 From Victim Victim Date

    Look at the public record documents we sent to you in the last few messages. It lays it all out in financial details. I do not know what else we can provide you. that has all credit unions listed and anyone can access it.

  121. Message 121 From LockBit 3.0 Actor / other Date

    Public information is fake, the real information is contained in your documents, I have thousands of your documents, all documents do not have file names, if you tell me the document number in which your real reporting is contained it will be easier for us to check the information and compare it with public fake reports.

  122. Message 122 From LockBit 3.0 Actor / other Date

    File: [bluff1.png]

  123. Message 123 From LockBit 3.0 Actor / other Date

    You're a filthy liar, your net profit per month is $3-4 million dollars, that's just the information I could find now in one of your documents

  124. Message 124 From LockBit 3.0 Actor / other Date

    File: [bluff2.png]

  125. Message 125 From LockBit 3.0 Actor / other Date

    non-interest income another 5 million a month

  126. Message 126 From LockBit 3.0 Actor / other Date

    The price for you will not be lower than $5 million. This conversation with you is over.

  127. Message 127 From LockBit 3.0 Actor / other Date

    I hope the IRS will properly deal with your company after leaking these documents.

  128. Message 128 From LockBit 3.0 Actor / other Date

    And put in jail your management who reports three million a year

  129. Message 129 From LockBit 3.0 Actor / other Date

    Goodbye.

  130. Message 130 From Victim Victim Date

    We just want to understand your position in that you will walk away from a million dollars which is 33 percent of our Net Revenue for payment of a decryption key.

  131. Message 131 From LockBit 3.0 Actor / other Date

    Why are you pretending to be an idiot? I gave you the documents that prove that your company has a hidden untaxed net profit of 4-5 million a month!

  132. Message 132 From Victim Victim Date

    • You continue to misinterpret our records, and this has drawn out our negotiations many days. We have nothing to hide in our financial records as they are public and regulators, third party auditors, investors, and others can view them at any time. The link we provided shows this. Now, Bluff 1 shows our cumulative net income for the year at $3.5M as of August 2022 (Cumulative means from January to Today), the prior month’s income rolls forward and we actually lost money in August. Bluff 2 shows the cumulative year-to-date income as of August which is included in our $3.5M earnings to date and not a separate income number as you incorrectly assessed. All our Financials can be found in the Accounting Drive, Board Reports folder by year and month. The balance sheet and income statement in the folder provides the financial picture. While you review these documents, please delay posting our information to your blog which will harm our negotiations. After you have read the documents, can we conclude our business. We just want to understand your position in that you will walk away from a million dollars which is 33 percent of our Net Revenue for payment of a decryption key.

  133. Message 133 From LockBit 3.0 Actor / other Date

    Okay, my boss agrees to $4 million.

  134. Message 134 From Victim Victim Date

    Now that you understand our financials. Can we settle and we will send you 1 million.

  135. Message 135 From LockBit 3.0 Actor / other Date

    Ok my boss agrees to 1 million, only if you send it today, here is the bitcoin wallet, bc1qyuunv9pz6f4qpgd0c0wmenu9zhr6u57yjf4afd

  136. Message 136 From Victim Victim Date

    In exchange for $1M we will receive all decryption keys, support, proof of data deletion, and a detailed explanation on how to broke into our system.

  137. Message 137 From Victim Victim Date

    Also, how long after payment will we receive the decryptor?

  138. Message 138 From LockBit 3.0 Actor / other Date

    1 million just for the decryption keys. All other items are paid separately and will cost 3 million.

  139. Message 139 From Victim Victim Date

    Ok, so you are saying we pay $1million for the keys and support. And if we want the data back, that is another $1Million and the security report is $1M.

  140. Message 140 From LockBit 3.0 Actor / other Date

    Yes. You will receive a decryptor in 1 confirmation on the bitcoin network.

  141. Message 141 From Victim Victim Date

    I appreciate that you have given us options here. Need some time to discuss with the board and we have different time zones on what the meaning of send it today.

  142. Message 142 From LockBit 3.0 Actor / other Date

    I live in New York City. My time is now 2:55 p.m., you have until 12 a.m. to make the transfer if you want to take advantage of the discount.

  143. Message 143 From Victim Victim Date

    you realize we are on PDT not EDT.

  144. Message 144 From LockBit 3.0 Actor / other Date

    It would be easier if I told you that you have 10 hours to transfer the money.

  145. Message 145 From Victim Victim Date

    When we structured this deal, it was supposed to be a package deal. On the data, can you provide us a file tree

  146. Message 146 From Victim Victim Date

    If we are going to pay you this evening, can you stay online with questions that we have

  147. Message 147 From Victim Victim Date

    We want to meet your deadline but need a few answers from you. Thank you.

  148. Message 148 From Victim Victim Date

    Are you there. We are working on acquiring the funds you want for the decryptor. Can you answer a few questions

  149. Message 149 From LockBit 3.0 Actor / other Date

    1 million dollars just a decryptor.

  150. Message 150 From LockBit 3.0 Actor / other Date

    All other requests for an additional fee.

  151. Message 151 From LockBit 3.0 Actor / other Date

    Getting a tree of downloaded files from your network, deleting those files, not allowing those files to be published on our blog separately $1 million.

  152. Message 152 From LockBit 3.0 Actor / other Date

    Information about how we entered your network, as well as other vulnerabilities separately 1 million dollars.

  153. Message 153 From LockBit 3.0 Actor / other Date

    What else do you want?

  154. Message 154 From LockBit 3.0 Actor / other Date

    You don't have much time left, should I wait for your money today or not?

  155. Message 155 From Victim Victim Date

    Yes. You should wait. We receive the decryptor along with support. Wallet is confirmed as bc1qyuunv9pz6f4qpgd0c0wmenu9zhr6u57yjf4afd

  156. Message 156 From Victim Victim Date

    We are ready to go once you confirm the wallet

  157. Message 157 From Victim Victim Date

    We have four hours left per your instructions.

  158. Message 158 From LockBit 3.0 Actor / other Date

    I confirm wallet.

  159. Message 159 From Victim Victim Date

    Thank you. Stand by.

  160. Message 160 From Victim Victim Date

    We receive the decryptor after payment along with any support. Correct

  161. Message 161 From LockBit 3.0 Actor / other Date

    Yes. Correct.

  162. Message 162 From Victim Victim Date

    We have sent payment

  163. Message 163 From Victim Victim Date

    we are at 2 confirmations now.

  164. Message 164 From Victim Victim Date

    The tranactions has been confirmed. Please send the decryptor.

  165. Message 165 From LockBit 3.0 Actor / other Date

    Did you have any difficulty deciphering it?

  166. Message 166 From Victim Victim Date

    The Decryptor is not working properly for files in some locations of the computer such as "C:\Program Files", "C:\WIndows" folder and more locations etc. can you give us a new decryptor which works on all the files on the system?

  167. Message 167 From LockBit 3.0 Actor / other Date

    Run decryptor as Administrator

  168. Message 168 From Victim Victim Date

    We are running the tool as System Administrator and have an issue - The Decryptor is not working properly for files in some locations of the computer such as "C:\Program Files", "C:\WIndows" folder and more locations etc. can you give us a new decryptor which works on all the files on the system?

  169. Message 169 From LockBit 3.0 Actor / other Date

    Show me screenshot, it's impossible.

  170. Message 170 From Victim Victim Date

    Stand by

  171. Message 171 From Victim Victim Date

    File: [image (1).png]

  172. Message 172 From LockBit 3.0 Actor / other Date

    strange folder name "samples_from_mn-dc003"

  173. Message 173 From LockBit 3.0 Actor / other Date

    I think it is because the user does not have enough rights to change the system files in the system folders. There are two variants here, either try to run the decryptor with different permissions, e.g. from the system or another administrator, or copy the files to the desktop and decrypt them.

  174. Message 174 From LockBit 3.0 Actor / other Date

    I also need to know the model of the operating system on which you are observing this problem, I will do lab work and try to reproduce the situation.

  175. Message 175 From LockBit 3.0 Actor / other Date

    Also please give me the MD5 hash sum of your decryptor

  176. Message 176 From LockBit 3.0 Actor / other Date

    Maybe the decryptor got corrupted during the download.

  177. Message 177 From Victim Victim Date

    We’ve also tested copying encrypted files into multiple folders deep with all permissions changed to full access to all users,everyone,domain users, etc. The decryptor does not decrypt anything outside of the folder that it’s located in.

  178. Message 178 From Victim Victim Date

    i will acquire the items you are asking for

  179. Message 179 From Victim Victim Date

    Windows 11, MD5 hash of LBB_Decryptor.exe: 5cb062a9833428b118121b987099cc28

  180. Message 180 From Victim Victim Date

    can you fix the file path on the decryption so it will run everywhere or does it have a command line that we can point it to

  181. Message 181 From Victim Victim Date

    please let's know what else you need so we can work the problem and fix our network

  182. Message 182 From Victim Victim Date

    any update on this.

  183. Message 183 From LockBit 3.0 Actor / other Date

    Yes

  184. Message 184 From LockBit 3.0 Actor / other Date

    Please make a video recording as you decrypt, hundreds of companies successfully decrypt their data and only you allegedly encountered difficulties, it seems to me that you are lying as you like to do it.

  185. Message 185 From Victim Victim Date

    File: [decrypt_tool_fail_log.txt]

  186. Message 186 From Victim Victim Date

    We would like to be one of your successful companies and never chat again if the decryptor worked as we thought it would. We have no reason to lie as we paid a significant sum for it. We will create the video. We did create a log file that shows when the decryptor run that the files do not decrypt.

  187. Message 187 From LockBit 3.0 Actor / other Date

    It is very interesting to see your video.

  188. Message 188 From LockBit 3.0 Actor / other Date

    I am also very curious why in your created log file there is no file in the folders that you stated, and gave a screenshot, such as program files

  189. Message 189 From LockBit 3.0 Actor / other Date

    It would be interesting to see in the videos how you create the log file and how you try to decrypt the many files in the program files folder and others.

  190. Message 190 From Victim Victim Date

    We are getting close to decrypting all files but have some issues with these last remaining ones. We can't post to the chat because the file is too large. Here is our link to the files for you to take a look at. Thank you.

  191. Message 191 From Victim Victim Date

    https://file.io/dhxwMCmmN5by

  192. Message 192 From LockBit 3.0 Actor / other Date

    You keep ignoring my questions, I'm waiting for a video of you getting the log file and trying to decrypt files that are in the system folders. Like the program files, for example

  193. Message 193 From Victim Victim Date

    Yes we will get you the video with the system files being ignored soon, meanwhile we were able to use the commandline version of the tool and --path command and point it to specific paths to fix the issue where the GUI was ignoring some paths. The sample file sent is a file where the decryption failed no matter the path the file is located at

  194. Message 194 From LockBit 3.0 Actor / other Date

    I'll ask you to edit your video faster, I'm already getting tired of this circus.

  195. Message 195 From LockBit 3.0 Actor / other Date

    While you are in the business of tampering with evidence I will ask you just one question, will you pay to have your information removed or can I already publish the stolen information and our correspondence?

  196. Message 196 From Victim Victim Date

    We are getting tired as well from the circus. We were able to make strides in decryption. however we hit a snag and wanted your help. We will get the video to you

  197. Message 197 From Victim Victim Date

    We would like to understand the data you have and you promised us a partial file tree. If you can send us the partial file tree, we will discuss the amount you want with this

  198. Message 198 From Victim Victim Date

    We appreciate you taking your time with us.

  199. Message 199 From Victim Victim Date

    Link to video: https://file.io/HP89VY5PmjW5

  200. Message 200 From LockBit 3.0 Actor / other Date

    Why are you copying encrypted files into the system folders and trying to decrypt them? You told me that you cannot decrypt files that were already in the system folders, not the ones you are copying there.

  201. Message 201 From LockBit 3.0 Actor / other Date

    I sent you some files, from the file tree makes no sense, all files have only ordinal numbers and have no names.

  202. Message 202 From LockBit 3.0 Actor / other Date

    Price is not negotiable, either you pay 1 million or not pay, make a decision today please.

  203. Message 203 From Victim Victim Date

    We told you we could not decrypt and were showing you the issue as the decryptor would not go down to a folder level. We finally figured it out however another issue come up with the file we sent you as it will not decrypt.

  204. Message 204 From LockBit 3.0 Actor / other Date

    You're trying to trick me, I've known that for a long time, but I wondered what ridiculous evidence you'd provide.

  205. Message 205 From LockBit 3.0 Actor / other Date

    $recycle.bin;config.msi;$windows.~bt;$windows.~ws;windows;appdata;application data;boot;google;mozilla;program files;program files (x86);programdata;system volume information;tor browser;windows.old;intel;msocache;perflogs;x64dbg;public;all users;default

  206. Message 206 From LockBit 3.0 Actor / other Date

    WHITE FOLDERS

  207. Message 207 From LockBit 3.0 Actor / other Date

    The encryption tool never encrypts the data contained in these folders.

  208. Message 208 From LockBit 3.0 Actor / other Date

    You lied to me from the beginning and made up every flaw in the decoder.

  209. Message 209 From LockBit 3.0 Actor / other Date

    So I'm not going to believe your nonsense about a non-functional decryptor. Any files you send me you changed in the hex editor to fuck with my head.

  210. Message 210 From LockBit 3.0 Actor / other Date

    bc1qyuunv9pz6f4qpgd0c0wmenu9zhr6u57yjf4afd

  211. Message 211 From LockBit 3.0 Actor / other Date

    You have one day to pay for the deletion of the data, you filthy liar.

  212. Message 212 From Victim Victim Date

    We are willing to pay if you can produce a file listing. So are you producing one or not?

  213. Message 213 From LockBit 3.0 Actor / other Date

    Pay and I will give you a list of files as soon as you pay.

  214. Message 214 From Victim Victim Date

    we told you - show us the file tree

  215. Message 215 From LockBit 3.0 Actor / other Date

    I told you, your files have no names, there are only numbers instead of file names, the file tree makes no sense. I can let you download all your files after paying $1 million.