New GigaWiper Windows Backdoor Bundles Disk Wiping, Fake Ransomware, and Spyware

Back Thehackernews

New GigaWiper Windows Backdoor Bundles Disk Wiping, Fake Ransomware, and Spyware

Thehackernews • July 9, 2026

Share: View original

Learn how to secure AI agents with practical controls for access, visibility, secrets, and risk containment.

Learn how to govern risk, secure AI-built software, and keep control as development moves at machine speed.

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Microsoft Unveils GigaWiper: A Modular Destructive Backdoor for Windows Microsoft has revealed GigaWiper, a destructive Windows backdoor that integrates components from three malware families, including Crucio and FlockWiper. This Golang-based malware is designed for post-initial access attacks, allowing operators to execute commands for system destruction, including raw disk wiping and fake ransomware. GigaWiper disguises itself as OneDrive and utilizes legitimate services for command and control, complicating detection efforts. It can take screenshots, record screen activity, and manipulate event logs to hide its presence. Microsoft links the malware to Iranian threat actors, suggesting a state-sponsored motive targeting Israeli organizations. The malware's modular design enables attackers to switch between espionage and sabotage seamlessly. Early detection and secure backups are critical for defense against this threat. 13 sources 73

Extracted Entities

Attack Types (2)

Malware Ransomware

Malware (1)

Platforms (1)