threatintel
actor tracker
Void Manticore
Reportseverity: High2024-05-20

Check Point Research details Void Manticore wipers and Karma persona

published by Check Point Research
Actor
Void ManticoreIR · IranAPT

Iranian state-sponsored intrusion set publicly attributed to the Ministry of Intelligence and Security (MOIS), specialised in destructive operations and conducting them under a rotating set of public…

Summary

Check Point Research published 'Bad Karma, No Justice,' attributing destructive wiper operations against Israeli organisations to Void Manticore — an Iranian MOIS-linked actor that Microsoft tracks as Storm-0842. The report catalogues custom wipers including BiBi (Windows and Linux variants), CIWiper, LowEraser/Pinky, and JustMBR, alongside manual destruction using Windows Format and SDelete. Void Manticore fronts the Karma and Homeland Justice leak-and-influence personas in Israel and Albania respectively.

Tags

wiperbibi-wiperkarmahomeland-justicemois

Primary source

research.checkpoint.com

Other Void Manticore events