New Agenda ransomware variant targeting critical infrastructure

A new Agenda ransomware variant is attacking critical infrastructure, utilizing partial encryption and disabling user account control, crucial for securing against malware attacks.

A new variant of the Agenda ransomware, a ransomware targeting healthcare and education entities, has been identified. Agenda uses the practice of partial or intermittent encryption and configures parameters that are used to determine the percentage of the file content to be encrypted. The new variant is also able to disable user account control – which otherwise could help mitigate the impact of malware by requiring administrative access to launch a program or a task.