Hackers Use Lotus Wiper To Destroy Drives In Energy Sector Cyberattack

A newly documented destructive campaign dubbed "Lotus Wiper" targets Venezuela's energy and utilities sector; researchers found orchestration batch scripts and a wiper binary that, once triggered via a NETLOGON-hosted XML flag, disables accounts and systematically destroys system recovery artifacts and every sector of physical drives (clearing USN journals, removing restore points, zeroing sectors and deleting files), leaving systems irrecoverable.