Threats Tagged 'crucio'

GigaWiper is a sophisticated Golang-based backdoor discovered in October 2025 that integrates command-and-control features with multiple destructive payloads. It combines functionality from at least three malware families, including a physical disk wiper, a fake ransomware component encrypting files with unsaved keys, and an enhanced multi-pass secure wiper. The backdoor supports 20 commands for control, system information gathering, and destructive actions such as disk wiping, screen recording, remote control, BSOD triggering, and event log clearing. Persistence is maintained via scheduled tasks, and communication occurs through RabbitMQ and Redis servers. No specific affected software versions or patches are identified, and no known exploits in the wild have been reported. The severity is assessed as medium based on the destructive capabilities described.