Signal
Lotus Wiper malware targets Venezuelan energy sector in destructive attacks
Evidence first: scan the strongest sources, then decide whether to go deeper.
Published 2026-04-22 10:55 UTCUpdated 2026-04-22 19:00 UTC
rss
cvemalwarethreat_actorsincident_responsesecurity_policy
Source links open
Source links and full evidence are open here. Archive history, compare-over-time, alerts, exports, API, integrations, and workflow are paid.
No card needed for the free brief.
Evidence trail (top sources)
top sources (3 domains)domains are deduped. counts indicate coverage, not truth.3 top sources shown
Overview
Cybersecurity researchers have uncovered a previously undocumented wiper malware dubbed Lotus Wiper, which has been deployed in destructive campaigns targeting Venezuela's energy and utilities sector. The malware operates by overwriting drives, deleting files, and disabling recovery mechanisms, severely impacting the targeted systems. These attacks occurred prior to recent US intervention, suggesting a strategic effort to disrupt Venezuela's critical infrastructure.
Score total
1.34
Momentum 24h
3
Posts
3
Origins
3
Source types
1
Duplicate ratio
0%
Why now
- The attacks occurred recently, from late 2025 to early 2026, highlighting an ongoing threat.
- The malware was active prior to recent US intervention, indicating possible geopolitical implications.
- Early detection and analysis can help prevent further destructive campaigns in critical infrastructure.
Why it matters
- Lotus Wiper attacks disrupt critical energy infrastructure in Venezuela, risking national stability.
- The malware's destructive nature complicates recovery and incident response efforts.
- Understanding this threat aids in defending similar critical sectors globally.
LLM analysis
Topic mix: lowPromo risk: lowSource quality: medium
Recurring claims
- Lotus Wiper is a novel wiper malware targeting Venezuela's energy and utilities sector causing destructive damage.
How sources frame it
- The Hacker News: neutral
- SecurityWeek: neutral
- The Record (Recorded Future News): neutral
All evidence
All evidence
Hackers deployed wiper malware in destructive attacks on Venezuela’s energy sector
The Record (Recorded Future News) · therecord.media · 2026-04-22 19:00 UTC
New Wiper Malware Targeted Venezuelan Energy Sector Prior to US Intervention
SecurityWeek · securityweek.com · 2026-04-22 12:10 UTC
Lotus Wiper Malware Targets Venezuelan Energy Systems in Destructive Attack
thehackernews · thehackernews.com · 2026-04-22 10:55 UTC
Show filters & breakdown
Posts loaded: 0Publishers: 3Origin domains: 3Duplicates: -
Showing 3 / 0
Top publishers (this list)
- The Record (Recorded Future News) (1)
- SecurityWeek (1)
- thehackernews (1)
Top origin domains (this list)
- therecord.media (1)
- securityweek.com (1)
- thehackernews.com (1)