We have extensive experience in decrypting files infected by Sodinokibi ransomware. There are a few publicly available Sodinokibi decrypt tools that can decrypt older versions of Sodinokibi, but in our experience the only way to get a working decryption tool in most cases is from the attackers.

We advise against paying the attackers if at all possible; however, if the damage done is too high, sometimes there is no other option. We actively research and keep records on as many active ransomware gangs as we can. We then use our accumulated data to safely and securely negotiate a lower ransom price if possible, with full legal compliance and complete insurance documentation.

Obtaining the decryption tool usually takes somewhere between 24 and 72 hours. Once we have it, decrypting the files is usually a matter of hours, depending on the amount of encrypted data. Sometimes the ransomware tools provided by attackers are defective, so we import the private keys into our own software. We fully back up all encrypted files to ensure there is no data loss in the event that something goes wrong during the recovery process.

For emergency situations, we provide 24 hour service; simply fill out the Ransomware Data Recovery form, or call one of our customer service numbers listed above. If you want to learn more about Sodinokibi ransomware itself, please visit the Sodinokibi ransomware variant page.

 

 

Comment on this FAQ