CyberGuard dictionary / Malware
Wiper
A wiper is malware designed to destroy or make data and systems unusable rather than to hold them for ransom.
In simple terms
Its goal is disruption. It may overwrite files, damage boot information, or erase recovery copies.
Technical explanation
Wipers can target selected paths or entire systems and may imitate ransomware to confuse responders. Recovery depends on clean backups, understanding the affected scope, and confirming that destructive access has been removed.
A wiper is designed to destroy or render data unusable, often by overwriting files or disk structures. Restoration requires clean backups and confidence that the destructive access has been removed.
Examples in practice
A compromised administrator account launches a wiper that overwrites shared files and deletes local recovery data.
Several office machines suddenly lose boot records. The team isolates the affected network, preserves evidence from a representative host, and restores systems from protected images.
Why it matters
Destructive attacks make isolation, protected backups, and tested restoration critical.
VERIFY & LEARN MORE
Sources and further reading
- attack.mitre.orghttps://attack.mitre.org/techniques/↗
- csrc.nist.govhttps://csrc.nist.gov/pubs/sp/800/61/r3/final↗
Published 2026-10-15 · Last updated 2026-10-15 · CyberGuard editorial content. Source links provide context; they do not imply endorsement.