Azov Wiper
- Malware type
- wiper
- Profile updated
- 2026-07-07 14:47:32
Context
According to Checkpoint, this malware is a wiper instead of ransomware as self-announced. It is manually written in FASM, unrecoverably overwriting data in blocks of 666 bytes, using multi-threading.
Reports & references
- malpedia.caad.fkie.fraunhofer.de — Win.Azov Wiper (report)
- fortinet.com — The Year Of The Wiper (report)
- research.checkpoint.com — Pulling The Curtains On Azov Ransomware Not A Skidsware But Polymorphic Wiper (report)
- twitter.com — 1587837524604465153 (report)