Moneybird — Malware Profile

Moneybird is a ransomware variant written in C++ associated with Agrius operations. The name "Moneybird" is contained in the malware's ransom note and as strings in the executable.

MITRE ATT&CK techniques (2)

• T1027.009 Embedded Payloads
• T1486 Data Encrypted for Impact

Attributed threat actors

• Agrius

Read the full analysis on IntelFusions