{"id":341879,"date":"2026-11-14T18:11:38","date_gmt":"2026-11-14T17:11:38","guid":{"rendered":"https:\/\/glosarix.com\/?post_type=glossary&p=341879"},"modified":"2026-11-14T18:11:39","modified_gmt":"2026-11-14T17:11:39","slug":"wiper-malware","status":"publish","type":"glossary","link":"https:\/\/glosarix.com\/en\/glossary\/wiper-malware\/","title":{"rendered":"Wiper (malware)"},"content":{"rendered":"

Description<\/h2>\n

A wiper is a type of malware whose primary function is the irreversible destruction of files, directories, or entire volumes within a storage system. Unlike conventional deletion, which simply marks space as available for new data, this tool seeks to ensure that the original information is unrecoverable. Its objective can be operational disruption, sabotage, or the elimination of evidence following an intrusion. The operating mechanism is usually based on overwriting the disk sectors where the information resided. The software replaces the original data with random patterns, zeros, or specific binary sequences, which degrades the original magnetic or electronic structure. Some programs offer fast modes that skip this overwriting process to accelerate destruction, although this increases the possibility that specialized forensic tools could reconstruct fragments of the information. These programs are critical tools in the arsenal of malicious actors seeking to cause irreparable damage to digital infrastructures. Their use implies a total loss of availability of the affected services, which forces organizations to rely exclusively on external backups to restore their operations.<\/p>\n

Uses<\/h2>\n

In cyberattacks, wipers are used as sabotage tools to paralyze organizations by destroying their digital assets. By deleting critical file systems, attackers force a total interruption of operations, which generates logistical and financial chaos. The same overwriting technique has a legitimate use in secure erasure, which is not considered a wiper and is a necessary practice in technology asset management to ensure privacy. Companies use certified wiping tools to remove sensitive data from hard drives or servers before their retirement, sale, or recycling. This process ensures that no corporate or personal information can be recovered by unauthorized third parties, thus complying with current data protection regulations.<\/p>\n

Examples<\/h2>\n

An attacker accesses a server and executes a wiper that recursively traverses all system directories. The program overwrites every data block with zeros, ensuring that configuration files and virtual machines are left unusable. After finishing, the operating system cannot boot, leaving the organization without access to its critical services. By contrast, in a hardware management environment, a technician uses legitimate secure erasure software to prepare an old server before its disposal. The program performs multiple passes of random writing over each sector of the hard drive to eliminate any trace of previous information. Once the process is completed, the technician obtains a certificate that guarantees the device is completely clean and ready to be recycled.<\/p>\n

Related terms<\/h2>\n