Skip to main content
IOC Radar

Indicators are what attackers leave behind. Stolen credentials are what they arrive with.

Check Exposure
1 IOC

DynoWiper: From Russia with Love

t0asts blog
t0asts blog
Published February 6, 2026Original Report

Threat Actors

Excerpt

Overview IOCs Initial Inspection PRNG Setup Data Corruption Data Deletion MITRE ATT&CK Mapping Acknowledgment Overview In this post I’m going over my analysis of DynoWiper, a wiper family that was discovered during attacks against Polish energy companies in late December of 2025. ESET Research and CERT Polska have linked the activity and supporting malware to infrastructure and tradecraft associated with Russian state-aligned threat actors, with ESET assessing the…

Read the original report →

Diamond Model

SOCIAL AXISTECHNOLOGY AXISADVERSARYSandwormTA0007INFRASTRUCTUREunknownCAPABILITYunknownVICTIMunknown
Adversary(2)
Infrastructure
Capability
Victim

Indicators of Compromise

Open the mindmap →

1 indicators

TypeIndicatorConfidenceScoreFirst Seen
SHA256835b0d87ed2d49899ab6f9479cddb8b4e03f5aeb2365c50a51f9088dcede68d5MediumScore 53/100First seen

IOC Relationship Graph

Building graph…