HermeticWiper

HermeticWiper is a destructive wiper first identified on February 23, 2022, targeting Ukrainian organizations across aviation, defense, financial, and IT sectors (with at least one infection observed in Lithuania); the malware escalates privileges, disables crash dumps and Volume Shadow Service, overwrites the first 512 bytes of drives (MBR) to prevent booting, and was observed alongside a Golang-based ransomware and DDoS activity prior to Russia’s assault on Ukraine.