GigaWiper: Anatomy of a destructive backdoor assembled from multiple malware

Microsoft Security Blog posts covering a range of active threats and defensive guidance. Key item: analysis of “GigaWiper,” a destructive backdoor that fuses wiping and ransomware-like capabilities by reusing code from multiple malware families; the write-up includes detection and mitigation guidance. Other notable reports: an active Photo‑ZIP intrusion campaign targeting hospitality in Europe and Asia that uses fake image shortcuts and staged archives to deliver a persistent Node.js implant; a malicious Chromium extension that spoofs AI branding and leverages MV3 APIs plus intermediary infra/