[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fuZM0KoQCykmI-o8JGMxS779SV3JfaxoRwx93qZsjDPE":3},{"article":4,"iocs":35,"watch_terms":36,"solutions":37,"lesson":127},{"id":5,"title":6,"slug":7,"summary":8,"ai_summary":9,"brief":10,"url":11,"image_url":12,"published_at":13,"ingested_at":14,"relevance_score":15,"entities":16,"category_id":17,"category":18,"article_tags":22},"90d80aa9-4e54-4e62-9227-3c33749a64f3","GigaWiper Lets Threat Actors Choose Their Own Destructive Attack","gigawiper-lets-threat-actors-choose-their-own-destructive-attack-8a5ca6","A modular implant borrows from various malware families to combine both backdoor and wiper activities to maximize impact and minimize operational output.","GigaWiper is a new, modular malware implant that allows threat actors to customize destructive attacks. It combines backdoor capabilities with wiper functionalities, enabling attackers to achieve maximum impact with minimal operational effort. The malware's modular design allows it to borrow components from various existing malware families, making it adaptable and potentially harder to detect.","GigaWiper malware offers modularity for destructive attacks, blending backdoor and wiper functions.","https:\u002F\u002Fwww.darkreading.com\u002Fcyberattacks-data-breaches\u002Fgigawiper-threat-actors-choose-their-own-destructive-attack","https:\u002F\u002Feu-images.contentstack.com\u002Fv3\u002Fassets\u002Fblt6d90778a997de1cd\u002Fblteeacc770d8fb720d\u002F6a54d144763fdbda3db4e01e\u002Fdestruction-MasPix-alamy.jpg?width=720&quality=80&disable=upscale","2026-07-13T16:50:54+00:00","2026-07-13T18:00:28.198925+00:00",7,[],"89f78b1c-3503-45a1-9fc7-e23d2ce1c6d5",{"id":17,"icon":19,"name":20,"slug":21},null,"Malware","malware",[23,28,30],{"category":24},{"id":25,"icon":19,"name":26,"slug":27},"6cbdd207-aaa1-4176-9534-e156b125e917","Nation-state","nation-state",{"category":29},{"id":17,"icon":19,"name":20,"slug":21},{"category":31},{"id":32,"icon":19,"name":33,"slug":34},"e7b231c8-5f79-4465-8d38-1ef13aea5a14","Threat Intelligence","threat-intelligence",[],[],{"controls":38,"vendors":126},[39,68,97],{"slug":40,"name":41,"problem":42,"products":43},"endpoint-detection-response","Endpoint detection and response (EDR and XDR)","Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.",[44,52,60],{"vendor_slug":45,"vendor_name":46,"vendor_logo":47,"product_slug":48,"product_name":49,"url":50,"description":51},"microsoft","Microsoft","\u002Fvendor-logos\u002Fmicrosoft.png","defender-for-endpoint","Microsoft Defender for Endpoint","https:\u002F\u002Fwww.microsoft.com\u002Fen-us\u002Fsecurity\u002Fbusiness\u002Fendpoint-security\u002Fmicrosoft-defender-endpoint","Endpoint detection and response for Windows, macOS, Linux and mobile devices.",{"vendor_slug":53,"vendor_name":54,"vendor_logo":55,"product_slug":56,"product_name":57,"url":58,"description":59},"sentinelone","SentinelOne","\u002Fvendor-logos\u002Fsentinelone.png","singularity-endpoint","Singularity Endpoint","https:\u002F\u002Fwww.sentinelone.com\u002Fplatform\u002Fendpoint-security\u002F","Endpoint protection and detection with automated response and rollback.",{"vendor_slug":61,"vendor_name":62,"vendor_logo":63,"product_slug":64,"product_name":65,"url":66,"description":67},"elastic","Elastic","\u002Fvendor-logos\u002Felastic.png","elastic-security","Elastic Security","https:\u002F\u002Fwww.elastic.co\u002Fsecurity","SIEM and endpoint security built on Elasticsearch, with open detection rules.",{"slug":69,"name":70,"problem":71,"products":72},"network-detection-response","Network detection and response (NDR)","Attackers moving between systems inside the network get seen.",[73,81,89],{"vendor_slug":74,"vendor_name":75,"vendor_logo":76,"product_slug":77,"product_name":78,"url":79,"description":80},"vectra-ai","Vectra AI","\u002Fvendor-logos\u002Fvectra-ai.png","vectra-ai-platform","Vectra AI Platform","https:\u002F\u002Fwww.vectra.ai\u002Fplatform","Detection of attacker behaviour across network, identity and cloud.",{"vendor_slug":82,"vendor_name":83,"vendor_logo":84,"product_slug":85,"product_name":86,"url":87,"description":88},"darktrace","Darktrace","\u002Fvendor-logos\u002Fdarktrace.png","darktrace-network","Darktrace \u002F NETWORK","https:\u002F\u002Fwww.darktrace.com\u002Fproducts\u002Fhybrid-network","Network detection and response based on learning normal behaviour.",{"vendor_slug":90,"vendor_name":91,"vendor_logo":92,"product_slug":93,"product_name":94,"url":95,"description":96},"corelight","Corelight","\u002Fvendor-logos\u002Fcorelight.png","open-ndr","Corelight Open NDR","https:\u002F\u002Fcorelight.com\u002Fplatform\u002F","Network detection and response based on Zeek and Suricata.",{"slug":98,"name":99,"problem":100,"products":101},"immutable-backup","Immutable backup and recovery","Ransomware cannot delete or encrypt your way back.",[102,110,118],{"vendor_slug":103,"vendor_name":104,"vendor_logo":105,"product_slug":106,"product_name":107,"url":108,"description":109},"cohesity","Cohesity","\u002Fvendor-logos\u002Fcohesity.png","dataprotect","Cohesity DataProtect","https:\u002F\u002Fwww.cohesity.com\u002Fplatform\u002Fdataprotect\u002F","Backup and recovery with immutable snapshots, on premises or as a service.",{"vendor_slug":111,"vendor_name":112,"vendor_logo":113,"product_slug":114,"product_name":115,"url":116,"description":117},"commvault","Commvault","\u002Fvendor-logos\u002Fcommvault.png","commvault-cloud","Commvault Cloud","https:\u002F\u002Fwww.commvault.com\u002Fplatform","Backup and recovery platform with immutable storage and recovery testing.",{"vendor_slug":119,"vendor_name":120,"vendor_logo":121,"product_slug":122,"product_name":123,"url":124,"description":125},"veeam","Veeam","\u002Fvendor-logos\u002Fveeam.png","veeam-data-platform","Veeam Data Platform","https:\u002F\u002Fwww.veeam.com\u002Fproducts\u002Fveeam-data-platform.html","Backup and recovery for virtual, physical, cloud and SaaS workloads, with immutable storage options.",[],{"slug":128,"title":129,"body":130,"framework_refs":131,"framework_notes":145},"gigawiper-modular-malware-enables-customizable-destructive-attacks","GigaWiper: Modular Malware Enables Customizable Destructive Attacks","GigaWiper represents a dangerous evolution in destructive malware by combining backdoor access with wiper capabilities in a modular, customizable framework. Its ability to borrow components from existing malware families makes signature-based detection unreliable, increasing the window of exposure before identification. Organizations that lack immutable backups and robust incident response plans face potentially irreversible data destruction. The low operational overhead for attackers means even less-skilled threat actors can deploy highly destructive campaigns, dramatically broadening the threat landscape.",[132,133,134,135,136,137,138,139,140,141,142,143,144],"CIS Control 11 – Data Recovery","CIS Control 13 – Network Monitoring and Defense","CIS Control 17 – Incident Response Management","NIST SP 800-53 IR-4 – Incident Handling","NIST SP 800-53 CP-9 – System Backup","NIST SP 800-53 SI-3 – Malicious Code Protection","NIST SP 800-53 AU-6 – Audit Record Review, Analysis, and Reporting","NIST Cybersecurity Framework DE.CM-1 – Network Monitoring","NIST Cybersecurity Framework RC.RP-1 – Recovery Plan Execution","MITRE ATT&CK T1485 – Data Destruction","MITRE ATT&CK T1543 – Create or Modify System Process (Persistence)","ISO\u002FIEC 27001 A.12.3 – Information Backup","ITIL – Service Continuity Management",{}]