Destructive Windows backdoor stuffs multiple wipers and ransomware code into a single package

A recently discovered Windows backdoor, dubbed GigaWiper, combines the destructive capabilities of multiple malware families into a single package, enabling attackers to wield a versatile tool for command-and-control and data destruction. This Golang-based implant, first detected by Microsoft's threat-hunting team in October, incorporates ransomware-like encryption and multiple data-wiping features, with no possibility of decryption. The backdoor's modular design allows attackers to deploy various malicious components on demand, effectively creating a Swiss Army knife for cybercrime. GigaWiper's developers have consolidated multiple destructive capabilities into a single tool, making it a formidable threat to Windows systems¹. This malicious software poses a significant risk to operational resilience, particularly in sectors that rely heavily on Microsoft products, so it matters to security practitioners who must prioritize planning and mitigation strategies to counter such threats.