File-wiping malware is destructive code designed to delete, corrupt, or overwrite files so they cannot be recovered easily, or at all. Unlike ransomware, which usually tries to extort payment for decryption, a wiper is often meant to damage systems, erase evidence, or cause maximum disruption.
In cyber attacks, wipers can be delivered as a final payload after a user runs a fake installer, disk image, or other trusted-looking file. Once executed, they may target documents, system files, backups, or whole disks, turning a simple compromise into permanent data loss. That makes them especially dangerous in campaigns that mix credential theft, remote access, and sabotage. Defenders reduce the risk by blocking untrusted downloads, restricting execution from removable or mounted media, keeping offline backups, and monitoring for unusual delete, overwrite, or mass file-encryption activity that can indicate destructive behavior.