Iranian hacking group Agrius pretends to encrypt files for a ransom, destroys it instead

… destroyed by the wiper.  Agrius "intentionally masked their … payloads are then deployed.  Agrius'; toolkit includes Deadwood ( … , and ZeroCleare.  During attacks, Agrius also drop a custom .NET … been made, but due to Agrius'; interests in Iranian issues …

source https://agriculture.einnews.com/article/542051598/Emhq52ilWmb1m18a?ref=rss&ecode=-Bq0NJbm4E27Q2Cb