Malware
Handala Wiper
- First Reported
- Mar 14, 2026
- Latest Reported
- Jun 12, 2026
Reported Context (3)
- “While OT/ICS disruption is not confirmed in this incident, Handala’s deployed toolkit includes custom wipers (win.handala, Handala Wiper, Hamsa Wiper) and MBR-overwriting capabilities. Handala Claims Cal Water Hack; Dataminr Reports Chico District Impact
- for lateral movement and initiate destructive operations by dropping wiper malware families such as Handala Wiper and Handala PowerShell Wiper via Group Policy logon scripts. Handala Claims Breach of FBI Director Kash Patel’s Email Amid Stryker Wiper Incident
- [Malware names ] documented custom destructive payloads – BiBi Wiper, Hatef, and 5 more variants (Hamsa, Cl Wiper, CoolWipe, ChillWipe, Handala Wiper). Handala Profile Details MOIS Links, Wiper Campaigns and Tradecraft
CVE (1)
Malware (14)
People (5)
Threat Actors (17)
MITRE ATT&CK (17)
Vendors (3)
Products (13)
Tools (3)
Industries (10)
Countries (5)
Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.
