Threat Update: AcidRain Wiper

Threat Update: AcidRain Wiper | Splunk

By Splunk Threat Research Team

Splunk is committed to using inclusive and unbiased language. This blog post might contain terminology that we no longer use. For more information on our updated terminology and our stance on biased language, please visit our blog post. We appreciate your understanding as we work towards making our community more inclusive for everyone.

The Splunk Threat Research Team has addressed a new malicious payload named AcidRain. This payload, deployed in the ongoing conflict zone of Eastern Europe, is designed to wipe modem or router devices (CPEs). These devices provide internet connectivity and are usually based on specific architectures such as Microprocessor…