Sponsored by Hudson Rock Use Hudson Rock's free cybercrime intelligence tools to learn how Infostealer infections are leading to ransomware attacks

Enjoying ransomware.live? Help us keep tracking ransomware gangs and shipping new features. Support us

Negotiation Chat — lockbit3.0

Return to Lockbit3.0
Negotiation chats provided by Valéry Marchive and Julien Mousqueton.

Chat ID: bankbsi_co_id

Initial Ransom
$20,000,000
Negotiated Ransom
N/A
Ransom Paid
N/A
Victim
[Chat started]
08.05.2023 03:34:30 UTC
Victim
give me proof that you have comptomised us
08.05.2023 03:35:18 UTC
Hello.
08.05.2023 03:41:23 UTC
Gang
We have about a terabyte and a half of your customer data
08.05.2023 03:42:40 UTC
Gang
Victim
ok how do we know that
08.05.2023 03:43:31 UTC
We can provide you file tree of stolen data
08.05.2023 03:44:14 UTC
Gang
Victim
let me see that
08.05.2023 03:44:38 UTC
You choose any two files of no more than a megabyte from the ones we stole and we can give them to you.
08.05.2023 03:45:00 UTC
Gang
Victim
you dont even know who's data you have stolen
08.05.2023 03:49:03 UTC
Victim
show me that customer data you think you hv stole it
08.05.2023 03:50:43 UTC
File: [banksbitree.zip]
08.05.2023 03:52:55 UTC
Gang
File: [proofs.zip]
08.05.2023 03:56:54 UTC
Gang
BSMCOLLECTION Database (check your last backup from it) - a lot of customers data Some interesting from SPM-HESTU - a lot of customers data Medalion Some from Swift
08.05.2023 03:57:35 UTC
Gang
Victim
what price do you want?
13.05.2023 02:18:44 UTC
It depends on your greed, what can the largest bank in the country with multibillion-dollar revenues offer me for a quality pentest of your corporate network?
13.05.2023 09:13:13 UTC
Gang
Victim
It looks like you want big things, if that's the case, we'll confirm with other things, do you have a stolen username, password, like a pin or something else?
13.05.2023 09:56:28 UTC
You will find out about this after all the stolen data is published, in case you do not want to pay for a quality pentest of your corporate network.
13.05.2023 13:29:28 UTC
Gang
Victim
ok, can I buy for 100,000 USD? you like?
13.05.2023 14:27:05 UTC
20 000 000 $
13.05.2023 15:31:53 UTC
Gang
Victim
why is it so big, at least give us 1 sample username and password you stole we will take it at 10,000,000 dollars
13.05.2023 15:55:53 UTC
Your competitors and scammers will be looking for logins and passwords in the databases after the data is published.
13.05.2023 16:09:30 UTC
Gang
Victim
So is there anyone else who wants to buy it?
13.05.2023 16:10:14 UTC
We will not disclose this information.
13.05.2023 16:11:55 UTC
Gang
An example of a login to the Internet banking.
13.05.2023 21:31:41 UTC
Gang
202194016611 20Darkstar94!
13.05.2023 21:31:50 UTC
Gang
Would you be more comfortable paying in bitcoin or monero?
13.05.2023 21:32:16 UTC
Gang
Be a man, promise - do it.
15.05.2023 16:37:37 UTC
Gang