Skip to content
MalwareWiki

Wiper

GamaWiper

According to ClearSky, this is a VBS-based wiper, deployed via exploitation of a vulnerable WinRAR version (CVE-2025-80880).

GamaWiper is a VBScript wiper operated by Gamaredon Group.

Background

ClearSky reports this as a VBS-based wiper delivered by exploiting a vulnerable WinRAR build (CVE-2025-80880). The firm attributes it to Gamaredon with medium confidence.

Source: Malpedia (Fraunhofer FKIE).