Microsoft Dissects GigaWiper: A Modular Windows Backdoor Built from Older Destructive Programs

Microsoft has analyzed the destructive Windows backdoor known as GigaWiper, revealing that it is not a single tool but a collection of three older destructive programs combined into one command‑based system. The backdoor offers operators the ability to wipe an entire disk, overwrite the Windows drive, or run a fake ransomware that scrambles files with a key it never saves. Each command is selectable by the operator, allowing for flexible destructive actions. The modular design increases the threat’s complexity and makes detection more difficult. The analysis highlights the importance of monitoring for signs of disk wiping, drive overwriting, and ransomware‑like file scrambling in Windows environments.