HOMETHREATSUnidentified 095 (Iranian Wiper)
APT / THREAT GROUP

Unidentified 095 (Iranian Wiper)

2
aliases
Last seen:Mar 17, 2026

Intelligence Profile

Wiper, using EldoS RawDisk for low level access to disks.

Threat Analysis

Unidentified 095 (Iranian Wiper) is a known-sophistication threat actor of undetermined national origin, engaged in cyber operations with a primary motivation of unknown activity patterns.

External References

→https://www.cisa.gov/uscert/ncas/alerts/aa22-264a
→https://www.cisa.gov/uscert/sites/default/files/publications/aa22-264a-iranian-cyber-actors-conduct-cyber-operations-against-the-government-of-albania.pdf

Quick Facts

TypeAPT / Threat Group
Aliases2

Also Known As

Unidentified 095 (Iranian Wiper)win.unidentified_095

External Intelligence

Malpedia: win.unidentified_095

Research Links

MITRE ATT&CK VirusTotal Google (news) Twitter/X search
Data sourced from Malpedia, Ransomware.live, RansomLook, and CTIWATCH OSINT collection. Actor attribution is based on available intelligence and may be incomplete.
← All Threat Actors·Geopolitics Map·Search Unidentified 095 (Iranian Wiper)
Unidentified 095 (Iranian Wiper) — APT / Threat Group | Threat Intelligence | CTIWATCH.COM