The threat group is also known as the Sodinokibi ransomware gang, and is called Sodin by eSentire. The attacks come on the heels of an extensive and well-planned drive-by-download campaign, which was launched in late December. Victims include two law firms, an insurance company, an architectural firm, a construction company and an agricultural co-op, all located in the U.S.; as well as two large international banks (one in Mexico and one in Africa)
Source: https://threatpost.com/revil-claims-ransomware-attacks/164739/

