Storyline
Critical flaw causes Vect ransomware to act as a destructive wiper
Researchers have identified a critical flaw in Vect 2.0 ransomware that causes it to wipe large files instead of encrypting them. This flaw effectively turns the ransomware into a data-destroying wiper, making file recovery impossible even by the attackers themselves.
Published 2026-04-28 12:32 UTCUpdated 2026-04-29 10:45 UTC
Current brief openSource links open
This current storyline is open here with summary, metadata, source links, continuity context, and full evidence. Paid is for compare-over-time, alerts, exports, and workflow.
No card needed for the free brief.
Evidence trail (top sources)
top sources (1 domains)domains are deduped. counts indicate coverage, not truth.1 top source shown
limited source diversity in top sources
Overview
Researchers have identified a critical flaw in Vect 2.0 ransomware that causes it to wipe large files instead of encrypting them. This flaw effectively turns the ransomware into a data-destroying wiper, making file recovery impossible even by the attackers themselves.
Score total
1.03
Momentum 24h
2
Posts
2
Origins
2
Source types
2
Duplicate ratio
50%
Why now
- Recent discovery of the flaw reveals new threat dynamics in ransomware attacks.
- Understanding this behavior is critical for incident response and recovery planning.
- Alerts defenders to potential data loss even if ransom is paid.
Why it matters
- The flaw makes data recovery impossible, increasing damage impact on victims.
- It challenges assumptions about ransomware behavior and attacker capabilities.
- Highlights the risk of ransomware variants acting as destructive wipers.
Continuity snapshot
- Trend status: insufficient_history.
- Continuity stage: emerging_confirmed.
- Current status: open.
- 2 current source-linked posts are attached to this storyline.
All evidence
All evidence
Critical Flaw Turns Vect Ransomware into Data Destroying Wiper
Infosecurity Magazine · infosecurity-magazine.com · 2026-04-29 10:45 UTC
VECT Ransomware Is Actually a Wiper
malware · threatroad.substack.com · 2026-04-29 09:22 UTC
Show filters & breakdown
Posts loaded: 0Publishers: 2Origin domains: 2Duplicates: -
Showing 2 / 0
Top publishers (this list)
- Infosecurity Magazine (1)
- malware (1)
Top origin domains (this list)
- infosecurity-magazine.com (1)
- threatroad.substack.com (1)