A new version of the BiBi Wiper malware is now deleting the disk partition table to make data restoration harder, extending the downtime for targeted victims.
A new version of the BiBi Wiper malware is now deleting the disk partition table to make data restoration harder, extending the downtime for targeted victims.
5 Comments
LazerFX@sh.itjust.works · 11 pts · 2y
The old Chernobyl virus did this. I caught it. Had to restore the MPT of a FAT32 drive - fortunately, the MPT and first FAT fell outside the boundary of the destruction, so I was able to use the 2nd FAT to restore the files and get pretty much everything back. Was stressful - lots of running to the second computer to get details of how the hex structure of the MPT was built and recreate it because using a tool would have formatted/erased what was there (This was early 00's, off an old magazine cover floppy disk). Fun times, and not something you want to do with a business machine or with critical software (Though, why haven't you got it backed up in an air-gapped way if it's that critical?)
christopherius@kbin.social · 4 pts · 2y
That sounded like a pain to deal with. Did you get the data back?
LazerFX@sh.itjust.works · 3 pts · 2y
Yep, took a couple of days with a hex editor, but was a good learning experience
hperrin@lemmy.world · 2 pts · 2y
Backup backup backup. Then backup your backups.
nickwitha_k@lemmy.sdf.org · 2 pts · 2y
Or, taps temple thoughtfully don't have data that you care about. That way you never have to worry about data loss. (/S)