New GigaWiper Windows Backdoor Bundles Disk Wiping, Fake Ransomware, and Spyware

Microsoft has analyzed a Windows backdoor called GigaWiper, which is a combination of three older destructive programs. This backdoor offers its operator a range of options to disrupt a machine. The available commands include wiping the entire disk, overwriting the Windows drive, or simulating a ransomware attack that scrambles files. The fake ransomware component encrypts files with a key that is not saved, rendering the data inaccessible. GigaWiper's modular design allows its operator to choose from these different methods to compromise a system. The backdoor's capabilities make it a potentially destructive threat to Windows systems.