// Context
About This Negotiation
This transcript documents a lockbit3.0 ransomware negotiation with eMunWorks.
The negotiation consisted of 8 messages exchanged over 1 days, beginning on 2022-07-25.
The initial ransom demand was $200.00. The final outcome is not confirmed in the transcript.
// Primary Source
Full Transcript — Verbatim
Reproduced from Casualtek's Ransomchats archive. URLs have been redacted.
Victim names are shown only where the breach was publicly reported in mainstream media. Any organisation wishing their name redacted can contact us at
enquiries@binary-response.com — we will act promptly.
[eMunWorks] — 25.07.2022 12:48:58 UTC — Message 1/8
[Chat started]
[eMunWorks] — 25.07.2022 12:49:32 UTC — Message 2/8
how much?
[eMunWorks] — 25.07.2022 12:50:00 UTC — Message 3/8
how much??
[lockbit3.0] — 25.07.2022 13:39:14 UTC — Message 4/8
All operators are busy at the moment, please wait for an answer.
[eMunWorks] — 25.07.2022 13:40:33 UTC — Message 5/8
ok
[eMunWorks] — 25.07.2022 14:09:52 UTC — Message 6/8
??
[lockbit3.0] — 25.07.2022 15:11:05 UTC — Message 7/8
To decrypt your files and prevent us of destructive actions against your company you will need to pay $200 000 . We also have all your files.
[lockbit3.0] — 26.07.2022 14:38:11 UTC — Message 8/8
What's your decision? Are you ready to pay? You don't have much time.