Insights, news, education and announcements from PolySwarm | Crucio ransomware

GigaWiper: Inside a Modular Cyberweapon

Jul 17, 2026 2:51:19 PM / by The Hivemind posted in Threat Bulletin, modular malware, Microsoft threat intelligence, GigaWiper, BLUERABBIT, Crucio ransomware, Zebrocy, Golang malware, FlockWiper

Related Families: GigaWiper, Crucio, FlockWiper, Zebrocy

Executive Summary

Industry researchers identified GigaWiper, a sophisticated Golang-based malware platform that combines remote administration, persistence, reconnaissance, surveillance, and multiple destructive payloads within a single modular implant. Rather than deploying separate malware families for different objectives, the threat actor consolidated disk wiping, irreversible file encryption, secure data destruction, and extensive command-and-control (C2) functionality into one flexible backdoor.

Read More