GigaWiper: Anatomy of a destructive backdoor assembled from multiple malware
2026-07-09T20:52:14Z•6fc60a88cfe26b295d9537d36b7ab1e88ea66b6ae377821e0f61d6f473087dcd
GigaWiperIOCsMicrosoftbackdoorcode-reusedestructive-malwaredetectionmalware-familiesransomwarethreat-intelligencewiper
What happened
Microsoft describes “GigaWiper,” a destructive backdoor platform that combines wiping and ransomware-like capabilities by reusing and assembling code from multiple existing malware families. The analysis details the malware’s destructive and persistence behaviors, shared code and TTPs, and provides detection, hunting guidance, and mitigations for defenders, along with associated telemetry/IOCs. No CVEs are referenced in the post.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- microsoft_security_blog
- Record identifier
- 6fc60a88cfe26b295d9537d36b7ab1e88ea66b6ae377821e0f61d6f473087dcd
- Enrichment time
- 2026-07-09T20:52:14Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.