This Pro-Hamas hacktivist group has updated their payload arsenal to include updated versions of their BiBi Wiper malware, and two new wiper variants.
The Iranian threat actor, dubbed “Void Manticore” by security analysts at Checkpoint research, is responsible for conducting destructive attacks against Israeli and Albanian targets and leaking information online.
Working in conjunction with threat actor Scarred Manticore, the two groups have demonstrated coordinated attacks that impacted the same targets.
The wiper toolsets – and, in particular, BiBi Wiper – are focused lethal malware designed to corrupt files and disk partitions, using a multi-threaded architecture to speed up the process and enlarging the scope of damage.
These types of weapons have been spotted targeting both Linux and Windows systems, but have been limited to geo-political use by threat actors.
While these two threat groups primarily gain initial access via exploits of public-facing applications, the damage of their attacks should be a warning to critical infrastructure organizations in literally any country; should your country become the target, so does your environment.
The time is now to shore up your vulnerability management, your preventative security solutions around email and the web, and implement the use of security awareness training to assist in minimizing the risk of entry via phishing or social engineering attacks.
KnowBe4 empowers your workforce to make smarter security decisions every day. Over 65,000 organizations worldwide trust the KnowBe4 platform to strengthen their security culture and reduce human risk.
