Tool: TerraWiper| Names | TerraWiper | |
| Category | Malware | |
| Type | Wiper | |
| Description | (QuoINT) In October 2018 while hunting for TerraCrypt variants we discovered a wiper malware we dubbed TerraWiper. TerraWiper is a Master Boot Record (MBR) wiper compiled from PureBasic, and it uses a slightly different version of the obfuscator used for TerraLoader variants. TerraWiper samples attempt to render a machine unbootable by zero-ing its MBR. Therefore, it would be possible for an infected computer to easily recover the data, or to make the machine boot again by fixing its MBR. | |
| Information | <https://quointelligence.eu/2020/01/the-chicken-keeps-laying-new-eggs-uncovering-new-gc-maas-tools-used-by-top-tier-threat-actors/> | |
Last change to this tool card: 09 July 2020
Download this tool card in JSON format
Previous: TerraTV
Next: TFlower
| Changed | Name | Country | Observed | ||
APT groups | |||||
| Venom Spider, Golden Chickens |  | 2017-Feb 2019 | |||
1 group listed (1 APT, 0 other, 0 unknown)
|
Thailand Computer Emergency Response Team (ThaiCERT) Follow us on
|
Report incidents |
|
 |
+66 (0)2-123-1234 | |
 |
report@thaicert.or.th | |
 |
Download PGP key | |