DoubleZero

Aliases: FiberLake

First seen
2022-03-17 00:00:00
Malware type
wiper
Profile updated
2026-07-07 13:01:36

Targeted industries: government-and-public-sector

Targeted regions: country_code:ua

Context

A wiper identified by CERT-UA on March 17th, written in C#.

Reports & references

  • Microsoft — Analysis Resources Cyber Threat Activity Ukraine (report)
  • Kaspersky — 106457 (report)
  • cybersecurity.att.com — Analysis On Recent Wiper Attacks Examples And How They Wiper Malware Works (report)
  • trustwave.com — Overview Of The Cyber Weapons Used In The Ukraine Russia War (report)
  • fortinet.com — The Increasing Wiper Malware Threat (report)
  • youtube.com — Watch (report)
  • cip.gov.ua — Khto Stoyit Za Kiberatakami Na Ukrayinsku Kritichnu Informaciinu Infrastrukturu Statistika 15 22 Bereznya (report)
  • CrowdStrike — The Anatomy Of Wiper Malware Part 1 (report)
  • Microsoft — Re4Vwwd (report)
  • CrowdStrike — The Anatomy Of Wiper Malware Part 3 (report)
  • Microsoft — A Year Of Russian Hybrid Warfare In Ukraine Ms Threat Intelligence 1 (report)
  • nextgov.com — 363558 (report)
  • malpedia.caad.fkie.fraunhofer.de — Win.Doublezero (report)
  • splunk.com — Threat Update Doublezero Destructor (report)
  • CERT-UA — 38088 (report)
  • esentire.com — Esentire Threat Intelligence Malware Analysis Doublezero (report)
  • Cisco Talos — Threat Advisory Doublezero (report)
  • Palo Alto Unit 42 — Doublezero Net Wiper (report)

External references