DynoWiper

aliases

Last seen:Mar 17, 2026

Intelligence Profile

Malware family tracked by Malpedia. ID: win.dynowiper

Threat Analysis

DynoWiper is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

Intelligence Reports Mentioning DynoWiper

Under the Hood of DynoWiper, (Thu, Feb 19th)

SANS ISC· Feb 19, 2026

DynoWiper update: Technical analysis and attribution

ESET Research· Jan 30, 2026

ESET Research: Sandworm behind cyberattack on Poland’s power grid in late 2025

ESET Research· Jan 23, 2026

External References

→https://cert.pl/uploads/docs/CERT_Polska_Energy_Sector_Incident_Report_2025.pdf

→https://t0asts.com/dynowiper

→https://www.truesec.com/hub/blog/detecting-russian-threats-to-critical-energy-infrastructure

→https://www.welivesecurity.com/en/eset-research/dynowiper-update-technical-analysis-attribution/

Quick Facts

TypeAPT / Threat Group

Aliases2

Also Known As

DynoWiperwin.dynowiper

External Intelligence

Malpedia: win.dynowiper

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search

Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.

← All Threat Actors·Geopolitics Map·Search DynoWiper