Uniquely Destructive PathWiper Payload Emerges in Ukraine Attacks

Researchers uncovered PathWiper, a new wiper deployed in an attack on an unnamed Ukrainian organization and attributed to a Russia-linked APT; the malware programmatically enumerates connected and network shares and overwrites storage with random data to prevent recovery, was deployed via a legitimate endpoint administration framework, and is being framed as part of a broader pattern of destructive attacks against Ukrainian critical infrastructure with a high risk of tactics being adopted by criminal ransomware groups.