Skip to content
MalwareWiki

Wiper

Azov Wiper

According to Checkpoint, this malware is a wiper instead of ransomware as self-announced.

Azov Wiper is a Windows wiper.

Background

Checkpoint reports that, despite presenting itself as ransomware, this malware actually operates as a wiper. Hand-coded in FASM, it leverages multi-threading to irrecoverably overwrite data in 666-byte blocks.

Source: Malpedia (Fraunhofer FKIE).