Hackers Use Lotus Wiper to Destroy Drives and Delete Files in Energy Sector Attack

Cybersecuritynews •Tushar Subhra Dutta • April 22, 2026

A newly discovered malware called Lotus Wiper has been used in a targeted destructive attack against the energy and utilities sector in Venezuela. Unlike ransomware, this threat does not ask for money or lock files for a ransom payment. Instead, it permanently destroys data, wipes entire drives, and leaves systems in a state from which […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Destructive Lotus Wiper Targets Venezuelan Energy Sector Amid Geopolitical Tensions In late 2025 and early 2026, a new data-wiping malware known as Lotus Wiper was identified targeting the energy and utilities sector in Venezuela. The malware was uploaded to a public platform in mid-December 2025 and is believed to be linked to geopolitical tensions in the region, particularly following the capture of Nicolás Maduro on January 3, 2026. The attack method involves two batch scripts that weaken system defenses and prepare the environment for the wiper payload, which completely erases data and recovery options from affected systems. The Lotus Wiper operates by overwriting physical drives and systematically deleting files, rendering systems unrecoverable. Kaspersky researchers have analyzed the malware and provided recommendations for monitoring and detection. The attacks have raised concerns about the security of critical infrastructure in Venezuela, particularly the state-owned oil company PDVSA, which suffered a cyberattack around the same time. No financial motives were identified in the malware's design, indicating a politically motivated attack. The situation remains critical as organizations in the sector assess their defenses against such threats. 7 sources 78

Extracted Entities

Hackers Use Lotus Wiper to Destroy Drives and Delete Files in Energy Sector Attack

The full story

Extracted Entities

Attack Types (1)

Countries (1)

Industries (1)

Malware (1)