Ankura CTIX FLASH Update - November 14, 2023

Malware Activity

BiBi-Linux Wiper Variant "BiBi-Windows Wiper" Identified

Researchers have discovered "BiBi-Windows Wiper", a Windows-based variant of the "BiBi-Linux Wiper" malware targeting systems in cyberattacks aimed at Israel by a pro-Hamas hacktivist group. Researchers noted that the original Linux-based malware is an x64 ELF executable that currently lacks obfuscation or protective measures. The malware is able to "specify target folders and can potentially destroy an entire operating system if run with root permissions." Additionally, BiBi-Windows Wiper deletes all shadow copies from the system and is multithreaded for increased speed. The Windows variant being established quickly after the Linux-based wiper leads researchers to believe that the campaign is expanding to target end user machines as well as application servers. Researchers emphasized that the current campaign is primarily centered around Israeli IT and government sectors and tactical