CyberMaterial

CyberMaterial

Threats

GigaWiper

When Malware Doesn’t Have to Choose Between Espionage and Destruction

CyberMaterial's avatar
Sofia's avatar
CyberMaterial and Sofia
Jul 18, 2026
∙ Paid

Cybersecurity professionals have long classified malware into distinct categories. Ransomware encrypts files for financial gain. Spyware steals sensitive information. Wiper malware destroys data to maximize disruption.

But what happens when a single piece of malware combines all three?

That’s the idea behind GigaWiper, a recently disclosed malware framework attributed by Microsoft to the Iranian-affiliated threat group CyberAv3ngers. Rather than serving a single purpose, GigaWiper appears to provide attackers with a flexible toolkit capable of adapting to different stages of an operation.

More Than Just a Wiper. Despite its name, GigaWiper is far more than destructive malware.


This Substack is reader-supported. To receive new posts and support our work, consider becoming a free or paid subscriber.


Watch Summary Video Below: ⬇️

User's avatar

Continue reading this post for free, courtesy of CyberMaterial.

Or purchase a paid subscription.
© 2026 CyberMaterial · Privacy ∙ Terms ∙ Collection notice
Start your SubstackGet the app
Substack is the home for great culture