Lotus Wiper Attack Disrupts Venezuelan Energy Sector in 2025
In December 2025, Venezuela's state-owned oil company, Petróleos de Venezuela S.A. (PDVSA), experienced a significant cyberattack that disrupted its core administrative and operational systems. The attack, attributed to a previously unknown malware dubbed 'Lotus Wiper,' employed sophisticated living-off-the-land techniques to disable system defenses and systematically delete critical data, rendering systems unrecoverable. This incident led to the temporary suspension of oil cargo deliveries and forced PDVSA to rely on manual processes, highlighting vulnerabilities in the company's technological infrastructure. ([darkreading.com](https://www.darkreading.com/cyber-risk/lotus-wiper-attack-targeted-venezuelan-energy-firms-utilities?utm_source=openai)) The Lotus Wiper attack underscores the escalating use of destructive malware targeting critical infrastructure, particularly in the energy sector. The incident serves as a stark reminder of the need for robust cybersecurity measures and incident response strategies to protect against sophisticated cyber threats that can have severe operational and economic consequences.
Kill Chain
