Microsoft Uncovers GigaWiper, a Backdoor Designed for Destruction on Demand

Destructive Windows backdoor stuffs multiple wipers and ransomware code into a single package

A newly identified destructive Windows backdoor combines ransomware-like encryption with multiple data-wiping features, according to Microsoft. Last October, the Redmond threat-hunting team first spotted attacks using the Golang-based implant they've named GigaWiper. Its developers stuffed multiple malware families into the software as on-demand commands, giving criminals a Swiss Army knife of command-and-control (C2) and destructive capabilitie…

Microsoft uncovers GigaWiper, a backdoor designed for destruction on demand

Microsoft is warning defenders about a new backdoor that blurs the line between espionage malware and wipers. In a technical analysis published on Thursday, Microsoft Threat Intelligence detailed GigaWiper, a Golang-based implant first observed in October 2025 intrusions that combines remote administration capabilities with multiple disk-wiping and ransomware routines. Rather than building a new destructive tool from scratch, the operators assem…

Microsoft Warns of GigaWiper Backdoor Built to Destroy Windows PCs

Microsoft details GigaWiper, a destructive Windows backdoor that can wipe disks, encrypt files and give attackers remote access to compromised systems globally.

Microsoft discovers new multi-malware package 'GigaWiper' capable of deploying wipers and ransomware

Microsoft warns of "GigaWiper," a destructive malware attributed to Iranian group CyberAv3ngers that combines multiple variants into one It can wipe drives, encrypt files with a fake ransomware extension, or overwrite Windows partitions, while also spying via screenshots, VNC sessions, and system data theft The malware hides under fake OneDrive tasks and registry keys, showing both espionage and sabotage capabilities with no recovery path for vi…

GigaWiper Combines Multiple Malware for System-Level Sabotage

The backdoor’s destructive capabilities include a standalone wiper, ransomware encryption, and a multi-pass wiping command. The post GigaWiper Combines Multiple Malware for System-Level Sabotage appeared first on SecurityWeek.