Researchers have discovered “BiBi-Windows Wiper”, a Windows-based variant of the “BiBi-Linux Wiper” malware targeting systems in cyberattacks aimed at Israel by a pro-Hamas hacktivist group. Researchers noted that the original Linux-based malware is an x64 ELF executable that currently lacks obfuscation or protective measures. The malware is able to “specify target folders and can potentially destroy an entire operating system if run with root permissions.” Additionally, BiBi-Windows Wiper deletes all shadow copies from the system and is multithreaded for increased speed. The Windows variant being established quickly after the Linux-based wiper leads researchers to believe that the campaign is expanding to target end user machines as well as application servers. Researchers emphasized that the current campaign is primarily centered around Israeli IT and government sectors and tactical overlaps between “the hacktivist group, who call themselves Karma, and another geopolitically motivated actor codenamed Moses Staff” were identified. The current infection vectors of both BiBi wipers are currently unknown. Indicators of compromise (IOCs) as well as additional technical details can be found in the report linked below.