Also known as REvil, or Sodin, Sodinikibi is a ransomware program. It encrypts files stored on a victim’s computers and prevents people from accessing their files until they have paid a ransom. This ransomware places ransom notes in the folders that contain encrypted files. Sodinokibi also changes the wallpaper. As of September 2021, Sodinokibi ransomware is decryptable. Bitdefender offers a free decryption tool for this malware.