Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 17:37:44 UTC
Home > List all groups > List all tools > List all groups using tool ZeroCleare
 Tool: ZeroCleare
Names
ZeroCleare
ZEROCLEAR
Category Malware
Type Wiper
Description
(IBM) New malware from the wiper class, used in a destructive attack in the Middle
East. We named this malware “ZeroCleare” per the program database (PDB) pathname
of its binary file.
Information
MITRE ATT&CK Malpedia AlienVault OTX Last change to this tool card: 02 March 2025
Download this tool card in JSON format
All groups using tool ZeroCleare
Changed Name Country Observed
APT groups
 OilRig, APT 34, Helix Kitten, Chrysene 2014-Sep 2024
1 group listed (1 APT, 0 other, 0 unknown)
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=7d4138d7-655e-48a2-82b8-e4973ec045d4
Page 1 of 2

Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=7d4138d7-655e-48a2-82b8-e4973ec045d4
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=7d4138d7-655e-48a2-82b8-e4973ec045d4
Page 2 of 2

APT groups OilRig, APT 34, Helix Kitten, Chrysene 2014-Sep 2024 
1 group listed (1 APT, 0 other, 0 unknown) 
   Page 1 of 2