logo

New BiBi Wiper version also destroys the disk partition table

ID: aeede4f6-8416-5916-a337-0cd21080e8e5

STIX ID: report--aeede4f6-8416-5916-a337-0cd21080e8e5

Feed Name: Bleeping Computer

Threat Score
88/100

Date Published: 2024-05-20

Date Updated: 2026-04-20

Author: Bill Toulas

...
...

A Check Point Research-backed report links a suspected Iran-aligned APT, Void Manticore (Storm-842), to destructive campaigns using updated BiBi Wiper variants plus CI Wiper and Partition Wipers that now delete partition tables to hinder recovery; the group leverages web shells, exploits (including CVE-2019-0604 via Scarred Manticore), credential harvesting, and public leaks on Telegram to amplify impact against Israeli and Albanian targets.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.