KillDisk (Lazarus)
Aliases: KillDisk.NBO
- Malware type
- wiper
- Family
- Malware family
- Last IoC activity
- 2026-05-22 03:18:08
- Profile updated
- 2026-07-07 12:46:31
Targeted industries: energy-and-utilities financial-services government-and-public-sector
Targeted regions: country_code:ua country_code:ru
Context
KillDisk is a destructive malware used by the Lazarus Group, known for its disk wiping capabilities. It has been observed targeting critical infrastructure, particularly in Ukraine and Russia, with the intent of causing significant data loss and operational disruption.
Reports & references
- Trend Micro — New Killdisk Variant Hits Financial Organizations In Latin America (report)
- ESET — Lazarus Killdisk Central American Casino (report)
- virusbulletin.com — Vb2018 Kalnai Poslusny (report)
- malpedia.caad.fkie.fraunhofer.de — Win.Lazarus Killdisk (report)