Wiper

Wiper is a malware threat that systematically wipes a hard drive clean. Wiper targets computers that belong to the Iranian Oil Ministry and the National Iranian Oil Company. Wiper was created by cybercriminals to steal and harm data. Wiper also systematically erases system files, specifically with a .pnf extension, that causes the affected computer system to crash and prevents it from restarting. Wiper can create and delete a registry entry for a service called 'RAHDAUD64'. This points to a file on disk called '~DF78.tmp' that had been in the Windows Temp folder before being deleted.Wiper is used for sabotage to destroy data.