Microsoft uncovers GigaWiper, a backdoor designed for destruction on demand

Source: CSO

Microsoft is warning defenders about a new backdoor that blurs the line between espionage malware and wipers. In a technical analysis published last week, Microsoft Threat Intelligence detailed GigaWiper, a Golang-based implant first observed in Oct. 2025 intrusions that combines remote administration capabilities with multiple disk-wiping and ransomware routines. Rather than building a new destructive tool from scratch, the operators assembled GigaWiper from several existing malware families, embedding them as modular commands inside a single backdoor. GigaWiper is particularly notable for its makeup,” Microsoft researchers said. “The consolidation of multiple destructive capabilities into a modular backdoor reflects a notable shift in wiper malware, which are typically designed purely to destroy rather than to extort and carry real-world consequences.” Full Story