Iranian hacking group Agrius pretends to encrypt files for a ransom, destroys them instead

The group uses a combination of its own custom toolsets and readily available offensive security software to deploy either a destructive wiper or a custom wiper-turned-ransomware variant.
Source: cyware.com