S0607 KillDisk
malwareEnterpriseICSplatformsLinux · Windows
also known asKillDisk · Win32/KillDisk.NBI · Win32/KillDisk.NBH · Win32/KillDisk.NBD · Win32/KillDisk.NBC · Win32/KillDisk.NBB
KillDisk is a disk-wiping tool designed to overwrite files with random data to render the OS unbootable. It was first observed as a component of BlackEnergy malware during cyber attacks against Ukraine in 2015. KillDisk has since evolved into stand-alone malware used by a variety of threat actors against additional targets in Europe and Latin America; in 2016 a ransomware component was also incorporated into some KillDisk variants.
techniques used (19)
ATT&CK techniques this enables or maps to.
used by groups (2)
Threat groups associated with this.
used by campaigns (1)
Campaigns that use this.
source
Where this definition is published.
Software like this carries known vulnerabilities once it is exposed to the internet. See what is exposed on your perimeter with a free passive scan.
Free scan