Sodinokibi ransomware can now encrypt open and locked files

Researchers have spotted that Sodinokibi is now using the Windows Restart Manager API to close processes or shut down Windows services keeping a file open during encryption.