KillDisk (Lazarus)
Aliases: KillDisk.NBO
- Malware type
- wiper
- Family
- Malware family
- Related IoCs
- 1
- Last IoC activity
- 2026-10-15 20:38:24
- Profile updated
- 2026-07-07 12:46:31
Targeted industries: energy-and-utilities financial-services government-and-public-sector
Targeted regions: country_code:ua country_code:ru
Context
KillDisk is a destructive malware used by the Lazarus Group, known for its disk wiping capabilities. It has been observed targeting critical infrastructure, particularly in Ukraine and Russia, with the intent of causing significant data loss and operational disruption.
Reports & references
- Trend Micro — New Killdisk Variant Hits Financial Organizations In Latin America (report)
- ESET — Lazarus Killdisk Central American Casino (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Lazarus Killdisk (report)
- virusbulletin.com — Vb2018 Kalnai Poslusny (report)