Threat Group Cards: A Threat Actor Encyclopedia
Archived: 2026-04-05 16:20:45 UTC
Home > List all groups > List all tools > List all groups using tool TerraWiper
 Tool: TerraWiper
Names TerraWiper
Category Malware
Type Wiper
Description
(QuoINT) In October 2018 while hunting for TerraCrypt variants we discovered a wiper
malware we dubbed TerraWiper. TerraWiper is a Master Boot Record (MBR) wiper compiled
from PureBasic, and it uses a slightly different version of the obfuscator used for TerraLoader
variants. TerraWiper samples attempt to render a machine unbootable by zero-ing its MBR.
Therefore, it would be possible for an infected computer to easily recover the data, or to make
the machine boot again by fixing its MBR.
Information
Last change to this tool card: 10 July 2020
Download this tool card in JSON format
All groups using tool TerraWiper
Changed Name Country Observed
APT groups
 Venom Spider, Golden Chickens 2017-Jan 2025
1 group listed (1 APT, 0 other, 0 unknown)
Source: https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=20f5dc28-f743-4940-ae85-6c77d0223dc2
https://apt.etda.or.th/cgi-bin/listgroups.cgi?u=20f5dc28-f743-4940-ae85-6c77d0223dc2
Page 1 of 1