Hackers deployed wiper malware in destructive attacks on Venezuela’s energy sector

Researchers found a previously unknown destructive wiper, dubbed Lotus Wiper, was deployed against Venezuela’s energy and utilities sector in an attack designed to destroy systems. The wiper erases data across physical drives and was compiled in September 2025, with indicators suggesting months of preparation and targeting of older Windows machines. #LotusWiper #PDVSA

Keypoints

A previously unknown destructive wiper called Lotus Wiper targeted Venezuela’s energy and utilities sector.
Lotus Wiper erases data on physical drives and deletes files system-wide, leaving machines irrecoverable.
Attackers focused on older Windows systems, indicating detailed knowledge and likely long-term network access.
Malware was compiled in late September 2025 and a campaign-related sample was uploaded from Venezuela in mid-December.
No threat actor has been identified and there is no confirmed link between Lotus Wiper and the PDVSA incident.