Reddit NetSec

CVE Database V5

AlienVault OTX General

Reddit InfoSec News

Exploit-DB RSS Feed

ThreatFox MISP Feed

CIRCL OSINT Feed

AlienVault OTX Vulnerabilities

AlienVault OTX Malware

New PathWiper Data Wiper Malware Disrupts Ukrainian Critical Infrastructure in 2025 Attack

The PathWiper malware is a newly identified data wiper malware that reportedly disrupted Ukrainian critical infrastructure in an attack occurring in 2025. Data wiper malware is designed to irreversibly delete or corrupt data on infected systems, rendering them unusable and causing significant operational disruption. Although specific technical details such as infection vectors, propagation methods, or targeted systems are not provided, the critical severity classification and the targeting of critical infrastructure suggest a sophisticated attack aimed at causing maximum damage to essential services. Data wipers typically overwrite or erase data at the file system or disk level, often bypassing recovery mechanisms, which can lead to prolonged outages and require extensive recovery efforts. The attack on Ukrainian critical infrastructure aligns with a pattern of cyberattacks targeting national infrastructure to cause disruption and potentially influence geopolitical situations. The lack of known exploits in the wild and minimal discussion on Reddit indicates this is a newly emerging threat with limited public technical analysis available. However, the critical impact on infrastructure highlights the urgency for organizations to understand and prepare for such threats.

Detailed information about New PathWiper Data Wiper Malware Disrupts Ukrainian Critical Infrastructure in 2025 Attack. Get real-time updates, technical details,

New PathWiper Data Wiper Malware Disrupts Ukrainian Critical Infrastructure in 2025 Attack - Live Threat Intelligence - Threat Radar | OffSeq.com

HermeticWiper | New Destructive Malware Used In Cyber Attacks on Ukraine

HermeticWiper is a newly identified destructive malware campaign primarily targeting Ukrainian organizations, first reported in February 2022. The malware is designed to perform data destruction, specifically wiping disk structures to render systems inoperable. It employs advanced techniques such as signed binary proxy execution (MITRE ATT&CK T1218) to evade detection and execute malicious payloads under the guise of legitimate signed binaries. Additionally, HermeticWiper modifies Group Policy settings (T1484.001) to inhibit system recovery mechanisms (T1490), effectively preventing restoration or remediation of affected systems. This combination of tactics indicates a sophisticated attack aimed at causing maximum disruption by destroying data and disabling recovery options. The malware's destructive nature aligns with the MITRE ATT&CK pattern for data destruction (T1485) and disk structure wiping (T1561.002). Although no specific affected software versions or exploits in the wild have been identified, the campaign's high severity and targeting of critical infrastructure in Ukraine suggest a state-sponsored or highly motivated threat actor. The campaign's timing and targeting coincide with geopolitical tensions in the region, emphasizing its strategic intent to disrupt Ukrainian operations through cyber means.

Detailed information about HermeticWiper | New Destructive Malware Used In Cyber Attacks on Ukraine. Get real-time updates, technical details, and mitigation st

Title	Severity	Type	Source	Date

Threats Affecting Baltic States

Filter Threats

Threats Affecting Baltic States

Keyboard Shortcuts

Navigation

Search & Filters

UI Controls

Accessibility