⚠ YOUR DATA ARE STOLEN AND ENCRYPTED
All your important files have been encrypted using AES-256 combined with RSA-2048 asymmetric encryption. Your files cannot be decrypted without our private key. Additionally, all confidential data has been downloaded from your network to our servers. If you refuse to pay, we will publish the data on our TOR darknet blog for public access.
Time remaining before price doubles and data publication
$250,000 USD
3.42 BTC at current rate
After deadline: $500,000 USD + full data publication
| BTC Address | bc1q7cyrfmck2ffu2ud3rn5l5a8yv6f0chkp0wpn9g |
| Encrypted files | 24,891 |
| Data exfiltrated | 412 GB |
| Encryption | AES-256 + RSA-2048 |
| BLOG (Tor) | lockbit3olp7oetlc4tl5zydnoluphh7fvdt5oa6arcp2757r7xkutid.onion |
| CHAT (Tor) | lockbitspxmqqfi6bw4y7f5psnpoaakhlisdx33busmnpgtimart5fad.onion |
| Deadline | 2026-09-26 12:00 UTC |
⚠ What you should NOT do
- Do NOT delete or modify encrypted files, it will lead to problems with decryption of files
- Do NOT use third-party decryption software — they cannot help and will corrupt files permanently
- Do NOT go to the police or the FBI for help — they will forbid you from paying and will not help you in any way, you will be left with encrypted files and your business will die
- Do NOT try to restore from backups — we have encrypted and deleted shadow copies and backup repositories
- Do NOT shut down or restart systems — this may cause irreversible damage to encrypted partitions
What guarantee is there that we won't cheat you?▼
We are the oldest ransomware affiliate program on the planet, nothing is more important than our reputation. We are not a politically motivated group and we want nothing more than money. If you pay, we will fulfill all the terms we agree on during the negotiation process. Treat this situation simply as a paid training for your IT administrators, because it was the misconfiguration of your corporate network that allowed us to attack you. In 5 years, not a single client has been left dissatisfied after making a deal with us.
Can I decrypt without paying?▼
No. The encryption uses AES-256 with RSA-2048 key wrapping. Without the private key stored on our server, decryption is mathematically impossible. No security firm or government agency can help you recover the files without our cooperation.
How do I buy Bitcoin?▼
Register on an exchange such as Coinbase, Kraken, or Binance. Complete identity verification, purchase the required amount in BTC, and send it to the wallet address on the main page. When buying bitcoin, do not tell anyone the true purpose of the purchase. Communicate any other reason, such as personal investment in cryptocurrency. Store cryptocurrency on a cold wallet such as Electrum before sending payment.
What happens after payment?▼
Once payment is confirmed on the blockchain (typically 2 confirmations, ~20 minutes), a custom decryption tool with your unique key will be provided through this chat. The tool will automatically scan and decrypt all affected files on your network. All exfiltrated data will be permanently deleted from our servers.
Will my data be published?▼
If payment is not received by the deadline, we will publish a sample of your most sensitive files on our TOR blog within 24 hours. The full dataset will follow 48 hours later. Published data typically includes financial records, employee PII, customer databases, credentials, and internal communications. You can get more information about us on Elon Musk's Twitter https://twitter.com/hashtag/lockbit
Can I negotiate the price?▼
Negotiation is possible only within the first 24 hours. Use the "Chat with us" tab. After 24 hours, the price is final. We are business people and prefer a fast resolution. Our pentesting services should be paid for the same way you pay your system administrators' salaries.