Malware: CaddyWiper

Description

[CaddyWiper](https://attack.mitre.org/software/S0693) is a destructive data wiper that has been used in attacks against organizations in Ukraine since at least March 2022.(Citation: ESET CaddyWiper March 2022)(Citation: Cisco CaddyWiper March 2022)

External References

• mitre-attack
• ESET CaddyWiper March 2022
• Cisco CaddyWiper March 2022

Techniques Used by This Malware

• T1057 — Process Discovery
• T1082 — System Information Discovery
• T1083 — File and Directory Discovery
• T1106 — Native API
• T1222.001 — Windows File and Directory Permissions Modification
• T1485 — Data Destruction
• T1561.002 — Disk Structure Wipe