Bird Agent parla su Matrix e MQTT: Kaspersky svela NightEagle e Toy Ghouls, i nuovi cluster contro le aziende russe
Un rapporto Kaspersky smaschera tre cluster attivi contro l'enterprise russo: il cyberspionaggio via VPN di NightEagle con la backdoor GhostContainer su Exchange, e Toy Ghouls, gruppo finanziario passato da builder ransomware rubati a Bird Agent, un impianto che usa MQTT e Matrix come canali C2.#wiper — Public Fediverse posts
Live and recent posts from across the Fediverse tagged #wiper, aggregated by home.social.
-
📰 Pro-Ukraine 'Hacking Cat' Group Deploys Wiper Malware
Pro-Ukrainian hacktivist group 'Hacking Cat' is now deploying custom wiper malware against Russian targets. The move marks a tactical escalation aimed at disrupting military logistics with destructive attacks. #CyberWarfare #Wiper #HackingCat #Ukraine
-
Kenya’s 2027 Election Test: Religious Leaders Sound Alarm Over Violence, Money and Political Capture.
By Kizito NAIROBI, Thursday, October 3. Religious leaders and other stakeholders during the National Stakeholders’ Convention on the 2027 General Election at Fungamano House, Nairobi. With Kenya still nearly a year away from the 2027 General Election, religious leaders, professional organisations, constitutional agencies and civil society groups are warning that the country is already showing signs of a dangerous political season. The warning came at the conclusion of a […] -
MPs Set to Defect to PM Party as Political Realignments Gather Pace.
PM party, party leader addressing the media at party headquaters. By Kizito NAIROBI, Kenya — September 1, 2026. A fresh political realignment could be taking shape in Murang’a, with a political leader claiming that a number of Members of Parliament are preparing to defect to the PM party. The leader said the anticipated defections will be announced during an upcoming rally in Murang’a as the party steps up its mobilisation activities across the country. “We will come to […] -
https://www.europesays.com/africa/402218/ Kalonzo condemns attack on Governor Orengo in Migori #kalonzo #Kenya #KenyaNews #leader #Machakos #Orengo #star #StarNews #StarNewsKenya #StarNewspaper #StarNewspaperKenya #TheStar #TheStarKenya #TheStarNewspaper #Wiper
-
https://www.europesays.com/africa/399783/ Kalonzo gives police, TSC, KDF seven days to disclose recruitment details #kalonzo #KDF #Kenya #KenyaNews #recruitment #star #StarNews #StarNewsKenya #StarNewspaper #StarNewspaperKenya #TheStar #TheStarKenya #TheStarNewspaper #TSC #Wetangula #Wiper
-
https://www.europesays.com/africa/384901/ Gachagua pushes for early DCP-Wiper deal ahead of wider opposition unity talks #2027 #DCP #élections #Gachagua #Kenya #KenyaNews #Ruto #star #StarNews #StarNewsKenya #StarNewspaper #StarNewspaperKenya #TheStar #TheStarKenya #TheStarNewspaper #Wiper
-
Governors Under Fire as Health Workers Dig In Over Nationwide Strike.
By Kizito NAIROBI, Aug. 3, 2026. Kenya's striking healthcare workers have intensified their campaign against county governments, accusing governors of negligence, political games and failure to safeguard public health, while calling for healthcare services to be transferred back to the national government. Kenya National Union of Medical Laboratory Officers National Chairman Odipo Nicholas. Addressing the press, leaders of unions representing nurses, clinical officers, laboratory […] -
https://www.europesays.com/africa/355942/ Kalonzo denies plans to work with Ruto, vows to oust him in 2027 #2027 #DCP #kalonzo #Kenya #KenyaNews #opposition #politics #star #StarNews #StarNewsKenya #StarNewspaper #StarNewspaperKenya #TheStar #TheStarKenya #TheStarNewspaper #Wiper
-
KPP Emerges as Growing Political Force in Nairobi, New Poll Shows.
By Kizito NAIROBI, Saturday, July 25. The Kenya Patriots Party (KPP) has emerged as one of Nairobi's fastest-growing political parties, according to a new opinion poll that places the party among the city's top political formations ahead of the 2027 General Election. The survey by the Centre for African Progress ranked KPP fourth with 12 per cent support, behind the Democracy for the Citizens Party (DCP), which led with 28 per cent, ODM at 15 per cent, and UDA at 14 per cent. Despite […] -
Babu Owino’s Poll Lead Signals Early Shake-up in Nairobi’s 2027 Governor Race.
By Kizito NAIROBI, Saturday, July 25. A new opinion poll has redrawn the political map of Nairobi nearly a year before the expected 2027 General Election, placing Embakasi East MP Babu Owino ahead of a crowded gubernatorial field while exposing growing public dissatisfaction with Governor Johnson Sakaja's administration. The survey by the Centre for African Progress suggests Babu Owino has opened an early lead with 36 per cent support, four percentage points ahead of businesswoman Agnes […] -
GigaWiper: Anatomy of a destructive backdoor assembled from multiple malware - https://www.redpacketsecurity.com/gigawiper-anatomy-of-a-destructive-backdoor-assembled-from-multiple-malware/
#threatintel
#GigaWiper
#backdoor
#wiper
#ransomware
#Golang-malware -
GigaWiper: wiper, stealer, ransomware w jednym. Szczegółowa analiza malware
Badacze bezpieczeństwa z Microsoft Threat Intelligence przeprowadzili analizę zaawansowanej kampanii, w której cyberprzestępcy wykorzystali rodzinę złośliwego oprogramowania o nazwie GigaWiper. Jak sama nazwa wskazuje, malware należy do kategorii wiperów, których głównym zadaniem jest bezpowrotne niszczenie danych na zainfekowanej maszynie. Działania te są realizowane poprzez usuwanie metadanych partycji dysków, szyfrowanie danych...
#Aktualności #Malware #Microsoft #Ransomware #RAT #Stealer #Wiper
https://sekurak.pl/gigawiper-wiper-stealer-ransomware-w-jednym-szczegolowa-analiza-malware/
-
📰 Microsoft Uncovers 'GigaWiper,' a Destructive Backdoor with Wiping and Fake Ransomware Modules
Microsoft details 'GigaWiper,' a destructive backdoor linked to Iran. The malware features disk wiping and a 'fake ransomware' module that irreversibly scrambles files to maximize damage. 💥 #Wiper #Malware #CyberSecurity #Iran
🌐 cyber[.]netsecops[.]io
-
Kidero urges media to shun ‘merchant headlines,’ backs government’s security role.
Nairobi, Friday 3rd, July. Former Nairobi Governor Evans Kidero has urged media houses to uphold truth and professionalism in their reporting, accusing some outlets of publishing what he termed "merchant headlines" that risk misleading the public and heightening national tensions. Speaking in Nairobi on Friday, Kidero said journalists have a responsibility not only to inform the public but also to educate and promote national cohesion, warning against reporting that could destabilise the […] -
📰 'Synapse' Wiper Malware Disguised as Ransomware, Designed for Maximum Destruction
New malware 'Synapse' is a destructive wiper disguised as ransomware. 💣 It fakes encryption but actually destroys the MBR and corrupts files. Possible links to the Sandworm APT group. #Wiper #Malware #CyberSecurity #Sandworm
🌐 cyber[.]netsecops[.]io
-
https://www.europesays.com/africa/306911/ ‘Touch Gachagua, touch all of us’: Kalonzo warns government over opposition ‘threats’ #Gachagua #Kajiado #kalonzo #Kenya #KenyaNews #star #StarNews #StarNewsKenya #StarNewspaper #StarNewspaperKenya #State #TheStar #TheStarKenya #TheStarNewspaper #Wiper
-
https://www.europesays.com/africa/306601/ Opposition Unity Message Dominates Kalonzo’s AIC Namanga Service Address #article #Edit #Editor’sChoice #EditorsPick #KalonzoMusyoka #PoliticalParties #PoliticalPartys #PoliticalScience #PoliticalTensions #politics #Signs #SignsMedia #SignsMediaKenyaLimited #SignsTv #Signsmedia #Signst #Signstv #Signstvkenya #Signsv #Ssignstv #Tanzania #UnitedOpposition #Wiper #WiperParty #WiperPatrioticFront
-
Job Loss
Window washers are extremely upset about the new addition to this building.
Salem, Massachusetts 2014
#Job_Loss #Hogwash_Book_Eight #wiper #Salem #Massachusetts #Essex_County #Hogwash #Hog_Wash #photography
https://flic.kr/p/21SvGhM -
VECT Ransomware is a Wiper, Not Ransomware — Don’t Bother Paying, Says Check Point Research
You can read their blog post at https://blog.checkpoint.com/security/vect-ransomware-why-paying-wont-get-your-files-back/ or their full report at https://research.checkpoint.com/2026/vect-ransomware-by-design-wiper-by-accident/
(h/t, @cybernews)
I contacted VECT and asked them for their response to #CheckPoint's report. Their response was, um... short? :)
#infosecurity #ransomware #decryption #decryptor #VECT #wiper
-
-
📰 VECT 2.0 Ransomware Flaw Means Paying the Ransom is Pointless—Large Files are Wiped Forever
⚠️ VECT 2.0 ransomware is actually a destructive WIPER for files >128KB! A critical flaw makes data recovery impossible, even if you pay. Researchers warn that paying the ransom is pointless as the decryption keys are destroyed. #Ransomware #Wiper #CyberSecurity
-
InfoSec News Nuggets 04/27/2026 Firefox Vulnerability Allows Tor User Fingerprinting Researchers disclosed CVE-2026-6770, an IndexedDB issue that can let sites correlate a user’s activity across ...
#InfoSec #News #Nuggets #AboutDFIR #Lotus #Wiper #news #nuggets #Pack2TheRoot
Origin | Interest | Match -
Iranian Hackers Breach FBI Director’s Email, Attack Stryker Threat actors linked to Iran have successfully compromised the personal email account of a senior U.S. Federal Bureau of Investigation ...
#Security #cybersecurity #breach #FBI #Iranian #hackers #Stryker #wiper #attack
Origin | Interest | Match -
‘CanisterWorm’ Springs #Wiper Attack #Targeting #Iran
A financially motivated data theft and #extortion group is attempting to inject itself into the #Iranwar , unleashing a #worm that spreads through poorly secured cloud services and wipes data on infected systems that use Iran’s time zone or have #Farsi set as the default language.
#security #CanisterWormhttps://krebsonsecurity.com/2026/03/canisterworm-springs-wiper-attack-targeting-iran/
-
Parliamo del fonte cyber Iran-USA: Handala contro Stryker
E' da un po' che non riuscivo a prendere del tempo per aggiornare questo blog e, visti gli avvenimenti che hanno determinato e stanno determinando la sicurezza nelle ultime settimane, riapro con un post sull'Iran. L’11 marzo 2026 Stryker, uno dei colossi mondiali della tecnologia medicale, ha scoperto cosa significa avere l’intero ambiente Microsoft trasformato in un kill‑switch remoto, azionato da un gruppo hacktivista filo‑iraniano che si firma Handala Hack e che l’intelligence […]https://insicurezzadigitale.com/parliamo-del-fonte-cyber-iran-usa-handala-contro-stryker/
-
The Stryker outage confirms a shift in Handala’s tactics: moving from regional hacktivism to destructive global operations. By abusing Microsoft Intune, they bypassed traditional EDR to wipe 200k devices. Identity, not malware, was the vector.
Read More: https://www.security.land/stryker-cyberattack-handala-wiper/
#SecurityLand #News #Stryker #Handala #Wiper #MicrosoftIntune #Cybersecurity
-
Breaking, new, by me: Iran-backed Hackers Claim Wiper Attack on Medtech Firm Stryker
A hacktivist group with links to Iran's intelligence agencies is claiming responsibility for a data-wiping attack against Stryker, a global medical technology company based in Michigan. News reports out of Ireland, Stryker's largest hub outside of the United States, said the company sent home more than 5,000 workers there today. Meanwhile, a voicemail message at Stryker's main U.S. headquarters says the company is currently experiencing a building emergency.
From the story:
"Wiper attacks usually involve malicious software designed to overwrite any existing data on infected devices. But a trusted source with knowledge of the attack who spoke on condition of anonymity told KrebsOnSecurity the perpetrators in this case appear to have used a Microsoft service called Microsoft Intune to issue a ‘remote wipe’ command against all connected devices."
"Intune is a cloud-based solution built for IT teams to enforce security and data compliance policies, and it provides a single, web-based administrative console to monitor and control devices regardless of location. The Intune connection is supported by this Reddit discussion on the Stryker outage, where several users who claimed to be Stryker employees said they were told to uninstall Intune urgently."
https://krebsonsecurity.com/2026/03/iran-backed-hackers-claim-wiper-attack-on-medtech-firm-stryker/
-
MedTech Giant Stryker Crippled by Iran-Linked Hacker Attack Stryker was targeted by the Handala group, which claims to have wiped more than 200,000 of the company’s devices. The post MedTech Gian...
#Cyberwarfare #cyberattack #disruption #Iran #Stryker #wiper
Origin | Interest | Match -
📰 Sandworm Deploys New 'DynoWiper' Malware in Failed Attack on Polish Power Grid
Russia's Sandworm group deployed new 'DynoWiper' malware in a failed cyberattack on Poland's power grid. ⚡️ The attack, described as the largest in years, highlights the ongoing threat to critical infrastructure. #Sandworm #CyberAttack #Wiper #Poland
-
Researchers say Russian government hackers were behind attempted Poland power outage https://www.byteseu.com/1741324/ #Cyberattack #cybersecurity #Energy #Poland #Russia #Wiper
-
📰 Anubis RaaS Ups the Ante with Destructive 'Wipe Mode' to Maximize Extortion
New Anubis RaaS includes a destructive '/WIPEMODE' that permanently destroys data, making recovery impossible. This changes the extortion game, relying on data leak threats instead of decryption. 💀 #Ransomware #Wiper #Anubis #ThreatIntel
-
Updated my post on the Anubis attack on Mid South Pulmonary Specialists after getting additional info from Anubis.
It seems they used their wiper to delete all of MSPS's backups, and then encrypted all of their systems.
That sounds pretty grim. MSPS has not posted anything (perhaps they can't) or issued any notice anywhere about whether patient care has been affected at all by any breach.
#HIPAA #healthsec #cybersecurity #databreach #ransomware #Anubis #wiper #backups #incidentresponse
-
I commented on an attack on Trumbull County, Ohio, by Anubis that @amvinfe reported this week. I will continue to try to follow up, but in the meantime, I posted this:
"Tell the truth, or someone will tell it for you — Trumbull County, Ohio edition."
https://databreaches.net/2025/12/09/tell-the-truth-or-someone-will-tell-it-for-you-trumbull-county-ohio-edition/#databreach #ransomware #wiper #govsec #incidentresponse #transparency #Anubis #Trumbull_County
-
Anubis hasn't really had a lot of media coverage, but @amvinfe's post about the attack on Mid South Pulmonary & Sleep Specialists was a wake-up call for me. So I took a look at Anubis's dark web leak site and saw they added -- and leaked -- five U.S. healthcare entities in November.
Given that they are not loath to encrypt and wipe victims' data... well... yikes.
#databreach #ransomware #Anubis #HealthSec #cybersecurity #HIPAA #wiper
-
https://www.evshift.com/348872/worlds-smallest-helmet-wiper-shorts-ebike-bikelife-moto-ev-electric/ Worlds Smallest Helmet Wiper #shorts #ebike #bikelife #moto #ev #ELECTRIC #BIKELIFE #ebike #ELECTRIC #ElectricCars #ElectricVehicle #ElectricVehicles #EV #helmet #moto #shorts #Smallest #wiper #Worlds
-
-
Predatory Sparrow’s toolkit and chain-of-execution highlight destructive-sabotage best practices for defenders:
- Multi-stage batch scripts with hostname checks (avoid accidental collateral).
- Scheduled-task detonation (msrun.bat → 23:55) and NIC disable via PowerShell.
- Log wiping (wevtutil) and BCD/shadow-copy removal to prevent recovery.
- XOR-encrypted configs (msconf.conf), encrypted payloads, and precise target enumeration.Detection & response suggestions: immutable offline backups, firmware-level integrity checks, EDR + OT anomaly telemetry correlation, and scheduled-task auditing. Discuss what telemetry you’d add to catch the staging phase - then follow @technadu for more IOCs and deep dives.
#ThreatIntel #Wiper #IR #EDR #OTSecurity #ICS #TTPs #InfoSec
-
HybridPetya – Ransomware omijający zabezpieczenie UEFI Secure Boot
Badacze bezpieczeństwa z firmy ESET odkryli nowy wariant ransomware przypominający doskonale wszystkim znany Petya/NotPetya, rozszerzony o możliwość przejmowania systemów operacyjnych uruchamianych ze wsparciem UEFI. Malware wykorzystuje podatność CVE-2024-7344do ominięcia mechanizmu UEFI Secure Boot. W najnowszych systemach podatność ta została załatana, jednak schemat działania oprogramowania, tzn. wykorzystanie eksploitów na poziomie firmware...
#WBiegu #Notpetya #Petya #Ransomware #Secureboot #Wiper
https://sekurak.pl/hybridpetya-ransomware-omijajacy-zabezpieczenie-uefi-secure-boot/
