Bibi

BiBi is a potent malware that has been deployed by a Pro-Hamas hacktivist group against Israeli targets. It's particularly destructive as it's designed to wipe data from the systems it infiltrates, causing direct damage and disruption. The use of this custom BiBi wiper in their operations underscores the group's intent to not only inflict tangible harm but also convey a politically charged message. This malware typically operates under the guise of suspicious downloads, emails, or websites, infiltrating systems often without the user's knowledge. This malware exhibits unique characteristics in its Windows variant. Once inside a system, it wipes files and leaves a distinct mark by changing the extension of the wiped files to ".BiBi". This alteration serves as an identifier of the malware's activity and possibly as a taunting signature from the hackers. It's worth noting that this act of file wiping can lead to substantial data loss and operational disruptions, heightening the severity of the attack. Interestingly, the BiBi Wiper seems to avoid infecting files with the extensions ".out" and ".so". This selective behavior likely stems from the malware's reliance on files with these extensions, such as "bibi-linux.out", and other libraries essential for the operating system. By preserving these files, the malware ensures the continuous operation of the infected system, thereby maintaining its presence and potential for further damage.