SODINOKIBI Infection

[Jaimepen 0]

My computer have been infected by ransomware SODINOKIBI, all files have been encripted with an extension ".901i56"  I have come to this forum after having tried a lot of solutions. And unfortunately I have done everything that it says that there is no need to do in the first steps when it comes to ransomware. If you have any help I would be very useful because I have lost very important files. Thank you.

[stapp 155]

It is recommended to upload a copy of the ransom note along with an encrypted file to ID Ransomware so that you can verify which ransomware you are dealing with to this site here:
https://id-ransomware.malwarehunterteam.com/

You can then paste a link to the results into a reply so that one of our experts can review them.

[Amigo-A 136]

Yes, this malware called Sodinokibi Ransomware or BlueBackground Ransomware
https://id-ransomware.blogspot.com/2019/04/sodinokibi-ransomware.html

In ID Ransomware it is also called Sodinokibi

Extension: .<random_personal>
Ransom note" <random_personal>-readme.txt

 At the moment I’ve prepared several variants for publicationid my Digest, but only the first one is described. Samples for research are in my article.

[Amigo-A 136]

No one has reported so far that he can decrypt files. Samples still collect.
You do not need to panic, and patiently wait for the answer decryption specialists. Perhaps they have something to say to you.

[MagWm 0]

is there any news for this ransomware? we have also been hit hard.

[GT500 873]

17 hours ago, MagWm said:

is there any news for this ransomware? we have also been hit hard.

Our recommendation right now (especially for businesses) is to contact Coveware. They should be able to help reduce the ransom payment for you.