Recently, the National Computer Virus Emergency Response Center and the National Engineering Laboratory for Computer Virus Prevention and Control Technology have relied on the National Computer Virus Collaborative Analysis Platform to discover many cases of users being attacked by the “Sorry” ransomware virus in China. After the user's important files were encrypted, the file name was changed to the original file name+ “.sorry” suffix string. The attackers also left a ransom letter on the user's host, requiring the user to download an encrypted communication tool to contact them.

Recently, the National Computer Virus Emergency Response Center and the National Engineering Laboratory for Computer Virus Prevention and Control Technology have relied on the National Computer Virus Collaborative Analysis Platform to discover many cases of users being attacked by the “Sorry” ransomware virus in China. After the user's important files were encrypted, the file name was changed to the original file name+ “.sorry” suffix string. The attackers also left a ransom letter on the user's host, requiring the user to download an encrypted communication tool to contact them.