Microsoft Warns of GigaWiper Backdoor Built to Destroy Windows PCs

Microsoft discovered GigaWiper, a persistent Windows backdoor observed in destructive attacks in October 2025 that combines code from multiple malware families to provide remote access and a suite of irreversible destructive functions (multi-pass disk wiping, partition removal, and ransomware-like file encryption with unrecoverable keys). The implant persists via a scheduled task, uses RabbitMQ/Redis for C2, supports remote-control and system-management commands, and Microsoft provides detections and mitigation guidance.