Lotus Wiper Malware Targets Venezuelan Energy Systems in Destructive Attack

Back Thehackernews

Lotus Wiper Malware Targets Venezuelan Energy Systems in Destructive Attack

Thehackernews •[email protected] (The Hacker News) • April 22, 2026

Share: View original

Learn how to stop patient zero attacks before they bypass detection and compromise your systems at entry points.

Learn how to validate real attack paths and reduce exploitable risk with continuous agentic security validation.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Destructive Lotus Wiper Targets Venezuelan Energy Sector Amid Geopolitical Tensions In late 2025 and early 2026, a new data-wiping malware known as Lotus Wiper was identified targeting the energy and utilities sector in Venezuela. The malware was uploaded to a public platform in mid-December 2025 and is believed to be linked to geopolitical tensions in the region, particularly following the capture of Nicolás Maduro on January 3, 2026. The attack method involves two batch scripts that weaken system defenses and prepare the environment for the wiper payload, which completely erases data and recovery options from affected systems. The Lotus Wiper operates by overwriting physical drives and systematically deleting files, rendering systems unrecoverable. Kaspersky researchers have analyzed the malware and provided recommendations for monitoring and detection. The attacks have raised concerns about the security of critical infrastructure in Venezuela, particularly the state-owned oil company PDVSA, which suffered a cyberattack around the same time. No financial motives were identified in the malware's design, indicating a politically motivated attack. The situation remains critical as organizations in the sector assess their defenses against such threats. 7 sources 78

Extracted Entities

Attack Types (1)

Industries (1)

Malware (1)