Simple definition
A wiper is malicious software intended to destroy data or make systems unusable.
Purpose and use
It targets availability or integrity and may imitate ransomware without providing a real decryption path.
How does it work?
Destruction may affect files, storage structures or components needed for boot. Impact depends on permissions and reachable resources.
Key points
- Example: multiple machines become unusable after activity that damages their data or boot components.
- Contain propagation, preserve useful evidence and assess recovery from isolated copies whose integrity has been checked.
Points to watch
A ransom note does not establish that decryption is possible. Test restoration before returning a rebuilt system to production.
In short
A wiper seeks destruction; response depends on containment and verified recovery.