Cisco Talos observed a destructive attack on a critical infrastructure entity within Ukraine, using a previously unknown wiper we are calling “PathWiper.”

A new data wiper malware named 'PathWiper' is being used in targeted attacks against critical infrastructure in Ukraine, aimed at disrupting operations in the country.

Cisco Talos observed a destructive attack on a critical infrastructure entity within Ukraine, using a previously unknown wiper we are calling “PathWiper.”

A new data wiper malware named 'PathWiper' is being used in targeted attacks against critical infrastructure in Ukraine, aimed at disrupting operations in the country.

Cisco Talos discovers PathWiper, a destructive new malware targeting critical infrastructure in Ukraine, highlighting ongoing cyber threats amidst the Russia-Ukraine conflict.

Cisco Talos observed a destructive attack on a critical infrastructure entity within Ukraine, using a previously unknown wiper we are calling “PathWiper.”

Cisco Talos observed a destructive attack on a critical infrastructure entity within Ukraine, using a previously unknown wiper we are calling “PathWiper.”

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

Follow us on Bluesky, Twitter (X), Mastodon and Facebook at @Hackread

New PathWiper malware targeted Ukrainian critical infrastructure, using legitimate tools for cyber-attacks

A new data wiper malware named 'PathWiper' is being used in targeted attacks against critical infrastructure in Ukraine, aimed at disrupting operations in the country.

PathWiper malware hit Ukraine’s critical systems in 2025, wiping data via admin console access and worsening conflict-driven cyberattacks.

A critical infrastructure entity within Ukraine was targeted by a previously unseen data wiper malware named PathWiper, according to new findings from Cisco Talos. "The attack was instrumented via a legitimate endpoint administration framework, indicating that the attackers likely had access to the administrative console, that was then used to issue malicious commands and deploy PathWiper across

The new PathWiper, spotted in an attack on Ukrainian critical infrastructure, has similarities to wiper malware previously deployed by the Russian group known as Sandworm.

Cisco Talos researchers have uncovered yet another destructive attack on critical infrastructure in Ukraine, dubbed 'PathWiper'.

Russian state-backed hacking group Sandworm has escalated cyber warfare, targeting Ukraine's grain industry with data-wiping malware. These attacks, occurring in June and September 2025, aim to destabilize Ukraine's economy by disrupting grain exports—a crucial revenue source. Known for previous malware like PathWiper and HermeticWiper, Sandworm's strategy now includes focused assaults on critical industries. The collaboration with UAC-0099 for initial access highlights the sophisticated, destructive tactics employed. In response, enhanced cybersecurity measures and strategic defenses are vital to protect against such impactful threats.

A Russia-linked threat actor has used the destructive malware dubbed PathWiper against a critical infrastructure organization in Ukraine.

A new data wiper malware named 'PathWiper' is being used in targeted attacks against critical infrastructure in Ukraine, aimed at disrupting operations in the country. [...]