Technique
№ 034 · class: exfiltration / impact
Data Destruction
Technique of permanently deleting or corrupting data on a compromised system.
Term
description · examples · notesTechnique of permanently deleting or corrupting data on a compromised system.
Description
Differs from ransomware in that recovery is impossible even with payment.
Can target MBR, partition tables, file systems, or specific files.
Used for sabotage, evidence destruction, or geopolitically motivated attacks.
Wiper malware implements this technique as its primary function.
Examples
- NotPetya (2017) — disguised as ransomware, actually a wiper
- Shamoon — wiped MBR on Saudi Aramco systems
Notes
- Impact technique; the threat is wiper in threats.
Mentioned in the news
Threats
used by 3Threats that use it. Select one to open its page.
Defenses
countered by 5How it is countered. Select one to open its page.