Wiper malware explained: How it works and why it’s so devastating

A newly identified wiper called PathWiper was deployed in Ukraine in June 2025 using legitimate endpoint administration tools to overwrite and corrupt validated volumes; the report contextualises PathWiper alongside historical destructive wipers (NotPetya, Shamoon, HermeticWiper, etc.), outlines common wiper techniques (data/MBR/GPT overwrites, network propagation, supply-chain vectors), and recommends prevention controls such as application allowlisting and ringfencing.