Aikido: Turning EDRs to Malicious Wipers Using 0-day Exploits

Wipers are becoming the go-to tool for nation-state cyber warfare in the last decade since the Shamoon attack. Wipers have been used by Russia, Iran, North Korea, and other APTs to support offensive acts. One of the most famous recent attacks was launched during the Russian invasion of Ukraine.We were curious if we could build a next-gen wiper. It would run with the permissions of an unprivileged user yet have the ability to delete any file on the system, even …

apts attack attacks build cyber cyber warfare delete edrs exploits gen invasion iran korea making malicious nation north north korea offensive permissions run russia russian russian invasion of ukraine shamoon state support system tool ukraine warfare windows wiper wipers