Agrius hacking group has shifted from using purely destructive wiper #malware to a combination of wiper and #ransomware functionality. Don't be fooled, Agrius intentionally masked their « activity » as a ransomware attack. This group is state-sponsored and it'slikely to be of Iranian origin

https://assets.sentinelone.com/sentinellabs/evol-agrius