[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fT_uwc8FI2dMyYNJU0fl8bB7LGJKIWU5BlnipZUsZBic":3},{"article":4,"iocs":50,"watch_terms":51,"solutions":52,"lesson":144},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":27,"category":28,"article_tags":32},"59937555-1480-4de8-9e06-84f9d6eff2d7","GigaWiper Combines Multiple Malware for System-Level Sabotage","gigawiper-combines-multiple-malware-for-system-level-sabotage-f6d25d","The backdoor’s destructive capabilities include a standalone wiper, ransomware encryption, and a multi-pass wiping command. The post GigaWiper Combines Multiple Malware for System-Level Sabotage appeared first on SecurityWeek.","GigaWiper is a sophisticated Go-based backdoor observed since October 2025, capable of system-level sabotage. It integrates a standalone wiper, ransomware-like encryption, and multi-pass wiping commands. This modular approach allows for both espionage and destructive operations, reflecting a shift in wiper malware design.","GigaWiper malware combines wiper, ransomware, and backdoor for system sabotage.","https:\u002F\u002Fwww.securityweek.com\u002Fgigawiper-combines-multiple-malware-for-system-level-sabotage\u002F","https:\u002F\u002Fwww.securityweek.com\u002Fwp-content\u002Fuploads\u002F2025\u002F11\u002Fmalware.jpeg","2026-07-10T09:12:08+00:00","2026-07-10T10:00:24.023358+00:00",8,[17,20,23,25],{"name":18,"type":19},"Microsoft","vendor",{"name":21,"type":22},"WMI","technology",{"name":24,"type":22},"RabbitMQ",{"name":26,"type":22},"Redis","89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5",{"id":27,"icon":29,"name":30,"slug":31},null,"Malware","malware",[33,38,43,45],{"category":34},{"id":35,"icon":29,"name":36,"slug":37},"26b0b636-0e31-4db1-bffb-61bdf9f20a58","Supply Chain","supply-chain",{"category":39},{"id":40,"icon":29,"name":41,"slug":42},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":44},{"id":27,"icon":29,"name":30,"slug":31},{"category":46},{"id":47,"icon":29,"name":48,"slug":49},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[18],{"controls":53,"vendors":140},[54,82,111],{"slug":55,"name":56,"problem":57,"products":58},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[59,67,75],{"vendor_slug":60,"vendor_name":61,"vendor_logo":62,"product_slug":63,"product_name":64,"url":65,"description":66},"crowdstrike","CrowdStrike","\u002Fvendor-logos\u002Fcrowdstrike.png","falcon-insight-xdr","Falcon Insight XDR","https:\u002F\u002Fwww.crowdstrike.com\u002Fen-us\u002Fplatform\u002Fendpoint-security\u002Ffalcon-insight-xdr\u002F","Endpoint detection and response with extended detection across other security tools.",{"vendor_slug":68,"vendor_name":69,"vendor_logo":70,"product_slug":71,"product_name":72,"url":73,"description":74},"sentinelone","SentinelOne","\u002Fvendor-logos\u002Fsentinelone.png","singularity-endpoint","Singularity Endpoint","https:\u002F\u002Fwww.sentinelone.com\u002Fplatform\u002Fendpoint-security\u002F","Endpoint protection and detection with automated response and rollback.",{"vendor_slug":76,"vendor_name":18,"vendor_logo":77,"product_slug":78,"product_name":79,"url":80,"description":81},"microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-endpoint","Microsoft Defender for Endpoint","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fendpoint-security\u002Fmicrosoft-defender-endpoint","Endpoint detection and response for Windows, macOS, Linux and mobile devices.",{"slug":83,"name":84,"problem":85,"products":86},"network-detection-response","Network detection and response (NDR)","Attackers moving between systems inside the network get seen.",[87,95,103],{"vendor_slug":88,"vendor_name":89,"vendor_logo":90,"product_slug":91,"product_name":92,"url":93,"description":94},"vectra-ai","Vectra AI","\u002Fvendor-logos\u002Fvectra-ai.png","vectra-ai-platform","Vectra AI Platform","https:\u002F\u002Fwww.vectra.ai\u002Fplatform","Detection of attacker behaviour across network, identity and cloud.",{"vendor_slug":96,"vendor_name":97,"vendor_logo":98,"product_slug":99,"product_name":100,"url":101,"description":102},"corelight","Corelight","\u002Fvendor-logos\u002Fcorelight.png","open-ndr","Corelight Open NDR","https:\u002F\u002Fcorelight.com\u002Fplatform\u002F","Network detection and response based on Zeek and Suricata.",{"vendor_slug":104,"vendor_name":105,"vendor_logo":106,"product_slug":107,"product_name":108,"url":109,"description":110},"darktrace","Darktrace","\u002Fvendor-logos\u002Fdarktrace.png","darktrace-network","Darktrace \u002F NETWORK","https:\u002F\u002Fwww.darktrace.com\u002Fproducts\u002Fhybrid-network","Network detection and response based on learning normal behaviour.",{"slug":112,"name":113,"problem":114,"products":115},"immutable-backup","Immutable backup and recovery","Ransomware cannot delete or encrypt your way back.",[116,124,132],{"vendor_slug":117,"vendor_name":118,"vendor_logo":119,"product_slug":120,"product_name":121,"url":122,"description":123},"cohesity","Cohesity","\u002Fvendor-logos\u002Fcohesity.png","dataprotect","Cohesity DataProtect","https:\u002F\u002Fwww.cohesity.com\u002Fplatform\u002Fdataprotect\u002F","Backup and recovery with immutable snapshots, on premises or as a service.",{"vendor_slug":125,"vendor_name":126,"vendor_logo":127,"product_slug":128,"product_name":129,"url":130,"description":131},"rubrik","Rubrik","\u002Fvendor-logos\u002Frubrik.png","zero-trust-data-protection","Rubrik Zero Trust Data Protection","https:\u002F\u002Fwww.rubrik.com\u002Fproducts\u002Fdata-protection","Air-gapped, immutable backup for on-premises, cloud and SaaS data, with threat detection in backups and orchestrated recovery.",{"vendor_slug":133,"vendor_name":134,"vendor_logo":135,"product_slug":136,"product_name":137,"url":138,"description":139},"veeam","Veeam","\u002Fvendor-logos\u002Fveeam.png","veeam-data-platform","Veeam Data Platform","https:\u002F\u002Fwww.veeam.com\u002Fproducts\u002Fveeam-data-platform.html","Backup and recovery for virtual, physical, cloud and SaaS workloads, with immutable storage options.",[141],{"slug":76,"name":18,"logo_path":77,"roles":142},[143],"reported_by",{"slug":145,"title":146,"body":147,"framework_refs":148,"framework_notes":162},"gigawiper-malware-combines-wiping-encryption-and-backdoor-for-devastating-sabotage","GigaWiper Malware Combines Wiping, Encryption, and Backdoor for Devastating Sabotage","GigaWiper represents a dangerous evolution in destructive malware, merging espionage-grade backdoor access with ransomware-style encryption and multi-pass data wiping into a single modular toolkit. This combination allows threat actors to first exfiltrate sensitive data before rendering systems completely inoperable, maximizing both intelligence value and destructive impact. The modular design makes detection harder, as each component can operate independently or in concert depending on mission objectives. Organizations without robust offline backups and rapid incident response playbooks face potentially unrecoverable losses when such malware executes. The shift toward hybrid wiper-ransomware-backdoor tooling signals that defenders must now prepare for attacks designed to simultaneously steal, encrypt, and destroy.",[149,150,151,152,153,154,155,156,157,158,159,160,161],"CIS Control 11 – Data Recovery","CIS Control 13 – Network Monitoring and Defense","CIS Control 10 – Malware Defenses","NIST SP 800-61 Rev. 2 – Incident Response","NIST SP 800-34 – Contingency Planning","NIST CP-9 – Information System Backup","NIST SI-3 – Malicious Code Protection","NIST IR-4 – Incident Handling","MITRE ATT&CK T1485 – Data Destruction","MITRE ATT&CK T1486 – Data Encrypted for Impact","MITRE ATT&CK T1059 – Command and Scripting Interpreter","ITIL – Service Continuity Management","GDPR Article 32 – Security of Processing",{}]