GigaWiper reuses multiple malware lineages in a unified destructive backdoor
Technical Analysis
Summary
Hide ▲
Show ▼
Microsoft's July 9 analysis of GigaWiper shows a modular backdoor that merges espionage, C2, and destructive wiping into one implant, widening the damage a single payload can cause. The research concluded the tool was assembled by combining and reimplementing components from Crucio ransomware, FlockWiper, and a third unrecovered framework. The findings provide reusable technical context for spotting similar multi-function malware and understanding how its destructive commands are organized.
Related Happenings
GigaWiper modular backdoor with wiping and espionage capabilities
Malware Activity
H score22
First: 10.07.2026 18:30
Last: 10.07.2026 18:30
Sources 1
How related:
The backdoor, tracked as GigaWiper, is linked to a malware implant with extensive operational capabilities, allowing cyber threat actors to conduct both quiet espionage activity and destructive wiping operations.
About this happening:
The newly analyzed GigaWiper backdoor combines espionage and destructive wiping functions, giving operators a single implant that can control, sabotage, and erase infe...
GigaWiper modular backdoor with wiping and espionage capabilities
Malware ActivityHow related: The backdoor, tracked as GigaWiper, is linked to a malware implant with extensive operational capabilities, allowing cyber threat actors to conduct both quiet espionage activity and destructive wiping operations.
About this happening: The newly analyzed GigaWiper backdoor combines espionage and destructive wiping functions, giving operators a single implant that can control, sabotage, and erase infe...
Steaelite Windows RAT with FUD and multi-function capabilities
Malware Activity
H score28
First: 27.02.2026 12:06
Last: 27.02.2026 12:06
Sources 1
About this happening:
The Steaelite Windows RAT is being marketed as a fully undetectable tool for Windows 10 and 11, giving operators browser-based control over infected machines and enabl...
Steaelite Windows RAT with FUD and multi-function capabilities
Malware ActivityAbout this happening: The Steaelite Windows RAT is being marketed as a fully undetectable tool for Windows 10 and 11, giving operators browser-based control over infected machines and enabl...
Timeline
-
10.07.2026 18:30 2 articles · 13d ago
GigaWiper reuses multiple malware lineages in a unified destructive backdoor
Initial DisclosureMicrosoft's July 9 writeup identified GigaWiper as a Go backdoor that can maintain control, deploy tooling, and trigger wiping routines. Microsoft Threat Intelligence had already seen it in October 2025 inside compromised environments being erased.
Show sources
- Microsoft Warns New 'GigaWiper' Malware Combines Espionage and Destructive Capabilities — www.infosecurity-magazine.com — 10.07.2026 18:30
- Microsoft Warns New 'GigaWiper' Malware Combines Espionage and Destructive Capabilities — www.infosecurity-magazine.com — 10.07.2026 18:30