Skip to content

Types

Wiper

Destructive malware that irreversibly destroys data or systems — sometimes disguised as ransomware to delay attribution.

A wiper exists to destroy. It overwrites files, corrupts the master boot record, or wipes disks outright — with no intent to provide recovery. Some wipers masquerade as ransomware to buy time and muddy attribution, displaying a ransom note while the data is already gone.

Sabotage, not profit

Wipers are typically tools of sabotage and statecraft rather than crime. NotPetya — disguised as ransomware — caused billions in damage in 2017, and wiper families have featured heavily in geopolitical conflict since.

Defense

Offline, immutable backups are the only real protection. Treat any "ransomware" with a non-functional decryptor as a wiper incident and prioritise containment over negotiation.

Malware in this category