MILKMAID

First seen
2022-03-15 00:00:00
Malware type
wiper
Family
Malware family
Profile updated
2026-07-07 12:36:44

Targeted industries: government-and-public-sector energy-and-utilities

Targeted regions: country_code:ua country_code:pl

Context

MILKMAID is a destructive wiper malware used in targeted cyber attacks primarily against government and energy sectors. It disrupts operations by erasing critical data, often linked to geopolitical motives.

Detection coverage

  • 1 YARA rules

Detection rules

  • MALPEDIA_Win_Milkmaid_Auto (yara-rule)

Reports & references

  • Mandiant — Rpt Apt30 (report)
  • malpedia.caad.fkie.fraunhofer.de — Win.Milkmaid (report)

External references