DoubleZero (Malware Family) By Fraunhofer FKIE Archived: 2026-04-05 19:12:07 UTC DoubleZero aka: FiberLake A wiper identified by CERT-UA on March 17th, written in C#. References 2023-03-15 ⋅ Microsoft ⋅ A year of Russian hybrid warfare in Ukraine CaddyWiper DesertBlade DoubleZero HermeticWiper INDUSTROYER2 IsaacWiper PartyTicket SwiftSlicer WhisperGate 2022-11-18 ⋅ Palo Alto Networks Unit 42 ⋅ Akshata Rao, Wenjun Hu, Zong-Yu Wu An AI Based Solution to Detecting the DoubleZero .NET Wiper DoubleZero 2022-10-24 ⋅ Youtube (Virus Bulletin) ⋅ Alexander Adamov Russian wipers in the cyberwar against Ukraine AcidRain CaddyWiper DesertBlade DoubleZero EternalPetya HermeticWiper HermeticWizard INDUSTROYER2 IsaacWiper KillDisk PartyTicket WhisperGate 2022-09-26 ⋅ CrowdStrike ⋅ Ioan Iacob, Iulian Madalin Ionita The Anatomy of Wiper Malware, Part 3: Input/Output Controls CaddyWiper DEADWOOD DistTrack DoubleZero DUSTMAN HermeticWiper IsaacWiper Meteor Petya Sierra(Alfa,Bravo, ...) StoneDrill WhisperGate ZeroCleare 2022-08-18 ⋅ Trustwave ⋅ Pawel Knapczyk Overview of the Cyber Weapons Used in the Ukraine - Russia War AcidRain CaddyWiper Cobalt Strike CredoMap DCRat DoubleZero GraphSteel GrimPlant HermeticWiper INDUSTROYER2 InvisiMole IsaacWiper PartyTicket 2022-08-18 ⋅ Trustwave ⋅ Pawel Knapczyk Overview of the Cyber Weapons Used in the Ukraine - Russia War AcidRain CaddyWiper Cobalt Strike CredoMap DCRat DoubleZero GraphSteel GrimPlant HermeticWiper INDUSTROYER2 InvisiMole IsaacWiper PartyTicket https://malpedia.caad.fkie.fraunhofer.de/details/win.doublezero Page 1 of 3 2022-08-12 ⋅ CrowdStrike ⋅ Ioan Iacob, Iulian Madalin Ionita The Anatomy of Wiper Malware, Part 1: Common Techniques Apostle CaddyWiper DEADWOOD DistTrack DoubleZero DUSTMAN HermeticWiper IsaacWiper IsraBye KillDisk Meteor Olympic Destroyer Ordinypt Petya Sierra(Alfa,Bravo, ...) StoneDrill WhisperGate ZeroCleare 2022-05-11 ⋅ Kaspersky ⋅ GReAT New ransomware trends in 2022 BlackCat Conti DEADBOLT DoubleZero LockBit PartyTicket StealBit 2022-05-02 ⋅ AT&T ⋅ Fernando Martinez Analysis on recent wiper attacks: examples and how wiper malware works AcidRain CaddyWiper DoubleZero HermeticWiper INDUSTROYER2 IsaacWiper 2022-04-28 ⋅ Fortinet ⋅ Gergely Revay An Overview of the Increasing Wiper Malware Threat AcidRain CaddyWiper DistTrack DoubleZero EternalPetya HermeticWiper IsaacWiper Olympic Destroyer Ordinypt WhisperGate ZeroCleare 2022-04-27 ⋅ Microsoft ⋅ Microsoft Digital Security Unit (DSU) Special Report: Ukraine An overview of Russia’s cyberattack activity in Ukraine CaddyWiper DoubleZero HermeticWiper INDUSTROYER2 IsaacWiper PartyTicket WhisperGate 2022-04-05 ⋅ eSentire ⋅ eSentire Threat Response Unit (TRU) eSentire Threat Intelligence Malware Analysis: DoubleZero DoubleZero 2022-03-28 ⋅ splunk ⋅ Splunk Threat Research Team Threat Update DoubleZero Destructor DoubleZero 2022-03-25 ⋅ GOV.UA ⋅ State Service of Special Communication and Information Protection of Ukraine (CIP) Who is behind the Cyberattacks on Ukraine's Critical Information Infrastructure: Statistics for March 15-22 Xloader Agent Tesla CaddyWiper Cobalt Strike DoubleZero GraphSteel GrimPlant HeaderTip HermeticWiper IsaacWiper MicroBackdoor Pandora RAT 2022-03-24 ⋅ NextGov ⋅ Brandi Vincent Ukrainian Cyber Lead Says ‘At Least 4 Types of Malware’ in Use to Target Critical Infrastructure and Humanitarian Aid CaddyWiper DoubleZero HermeticWiper IsaacWiper 2022-03-24 ⋅ Cisco Talos ⋅ Cisco Talos Threat Advisory: DoubleZero DoubleZero https://malpedia.caad.fkie.fraunhofer.de/details/win.doublezero Page 2 of 3 2022-03-22 ⋅ ⋅ Cert-UA ⋅ Cert-UA Cyberattack on Ukrainian enterprises using the DoubleZero destructor program (CERT-UA # 4243) DoubleZero 2022-02-28 ⋅ Microsoft ⋅ MSRC Team Cyber threat activity in Ukraine: analysis and resources CaddyWiper DesertBlade DoubleZero HermeticWiper INDUSTROYER2 IsaacWiper PartyTicket WhisperGate DEV-0586 There is no Yara-Signature yet. Source: https://malpedia.caad.fkie.fraunhofer.de/details/win.doublezero https://malpedia.caad.fkie.fraunhofer.de/details/win.doublezero Page 3 of 3