Agenda Ransomware is a new ransomware strain written in the Golang language "Malware written in the Go language (aka Golang) has become common among threat actors, one possible reason for this uptick in popularity is that Go statically compiles necessary libraries, making security analysis much harder."

It targets educational and healthcare institutions in countries like Saudi Arabia, Thailand, Indonesia, and South Africa. Trend Micro researchers said, "Agenda can reboot systems in safe mode, attempts to stop many server-specific processes and services, and has multiple modes to run."

Threat Actors Known to use this Malware