{"id":28194,"date":"2019-08-02T18:33:00","date_gmt":"2019-08-02T18:33:00","guid":{"rendered":"http:\/\/d9a8efef-f491-4f8e-a57d-0129ca18ac47"},"modified":"2019-08-02T18:33:00","modified_gmt":"2019-08-02T18:33:00","slug":"germanwiper-ransomware-hits-germany-hard-destroys-files-asks-for-ransom","status":"publish","type":"post","link":"https:\/\/www.threatshub.org\/blog\/germanwiper-ransomware-hits-germany-hard-destroys-files-asks-for-ransom\/","title":{"rendered":"GermanWiper ransomware hits Germany hard, destroys files, asks for ransom"},"content":{"rendered":"<p>For the past week, a new ransomware strain has been wreaking havoc across Germany. Named GermanWiper, this ransomware doesn&#8217;t encrypt files but instead it rewrites their content with zeroes, permanently destroying users&#8217; data.<\/p>\n<p>As a result, any users who get infected by this ransomware should be aware that paying the ransom demand will not help them recover their files.<\/p>\n<p>Unless users had created offline backups of their data, their files are most likely gone for good.<\/p>\n<p>For now, the only good news is that this ransomware appears to be limited to spreading in German-speaking countries only, and with a focus on Germany primarily.<\/p>\n<h3>Pretty big distribution campaign<\/h3>\n<p>First signs of GermanWiper were reported earlier this week when victims started asking for help on the Bleeping Computer forums, a popular place where internet users congregate to get advice in dealing with ransomware infections.<\/p>\n<p>The <a href=\"https:\/\/www.bleepingcomputer.com\/forums\/t\/701735\/germanwiper-ransomware-with-random-extensions-08kja-avco3-oqn1b\/\" target=\"_blank\" rel=\"noopener noreferrer\">first report came on Tuesday<\/a>, July 30, and they kept piling on through the following days.<\/p>\n<p>Michael Gillespie, the creator of <a href=\"https:\/\/id-ransomware.malwarehunterteam.com\/\" target=\"_blank\" rel=\"noopener noreferrer\">ID-Ransomware<\/a>, a website where ransomware victims can upload samples and identify the type of ransomware that has infected their systems, told ZDNet that currently GermanWiper is one of the top five most active ransomware strains on his platform.<\/p>\n<p><span class=\"img aspect-set\"><img decoding=\"async\" src=\"https:\/\/zdnet3.cbsistatic.com\/hub\/i\/2019\/08\/02\/944d13a8-66a1-4fb7-a404-bcc12f39e7aa\/302fc9004870954e568c5829711fae59\/idr-detections.png\" class alt=\"IDR detections for GermanWiper\"><\/span> <span class=\"credit\">Image: Michael Gillespie<\/span><\/p>\n<section class=\"sharethrough-top\" data-component=\"medusaContentRecommendation\" data-medusa-content-recommendation-options=\"{&quot;promo&quot;:&quot;promo_ZD_recommendation_sharethrough_top_in_article_desktop&quot;,&quot;spot&quot;:&quot;dfp-in-article&quot;}\">\n<\/section>\n<p>The four ransomware strains with more detections on ID-Ransomware are all strains that are distributed globally. Taking this detail into account, it&#8217;s safe to say that German-speaking users are currently under assault from GermanWiper&#8217;s operators.<\/p>\n<h3>Distributed via malspam<\/h3>\n<p>According to German security researcher <a href=\"https:\/\/dissectingmalwa.re\/tfw-ransomware-is-only-your-side-hustle.html\" target=\"_blank\" rel=\"noopener noreferrer\">Marius Genheimer<\/a> and CERT-Bund, Germany&#8217;s Computer Emergency Response Team, the GermanWiper ransomware is currently being distributed via malicious email spam (malspam) campaigns.<\/p>\n<p>These emails claim to be job applications from a person named &#8220;Lena Kretschmer.&#8221; A CV is attached as a ZIP file to these emails, and contains a LNK shortcut file. The LNK file is boobytrapped and will install the GermanWiper ransomware.<\/p>\n<p>When users run this file, the ransomware will rewrite the content of various local files with the 0x00 (zero character), and append a new extension to all files. This extension has a format of five random alpha-numerical characters, such as .08kJA, .AVco3, .OQn1B, .rjzR8, etc..<\/p>\n<p>After it &#8220;encrypts&#8221; all targeted files, GermanWiper will open the ransom note (an HTML file) inside the user&#8217;s default browser. The ransom note looks like the one below. A video of the infection process is also available <a href=\"https:\/\/app.any.run\/tasks\/0f8bf1d6-011e-423d-bbd2-70abb4f50bf4\/\" target=\"_blank\" rel=\"noopener noreferrer\">here<\/a>.<\/p>\n<p><span class=\"img aspect-set\"><img decoding=\"async\" src=\"https:\/\/www.zdnet.com\/article\/germanwiper-ransomware-hits-germany-hard-destroys-files-asks-for-ransom\/\" class=\"lazy\" alt=\"GermanWiper ransom note\" data-original=\" https:\/\/zdnet1.cbsistatic.com\/hub\/i\/2019\/08\/02\/a09d0716-3c9c-43de-8192-3e8d7efb133f\/51b36e09adb8d94d9c76133797ec138a\/germanwiper-ransom-note.png\"><\/span><noscript><\/p>\n<p><span class=\"img aspect-set\"><img decoding=\"async\" src=\"https:\/\/zdnet1.cbsistatic.com\/hub\/i\/2019\/08\/02\/a09d0716-3c9c-43de-8192-3e8d7efb133f\/51b36e09adb8d94d9c76133797ec138a\/germanwiper-ransom-note.png\" class alt=\"GermanWiper ransom note\"><\/span><\/p>\n<p><\/noscript> <span class=\"credit\">Image: ZDNet<\/span><\/p>\n<p>Victims are given seven days to pay the ransom demand. It is important to remember that paying the ransom note won&#8217;t help users recover their files.<\/p>\n<h3>Second ransomware-wiper combo to hit Germany<\/h3>\n<p>Curiously, this is not the first ransomware with wiper tendencies that targets German-speaking users. In November 2017, Germany was targeted by a <a href=\"https:\/\/www.bleepingcomputer.com\/news\/security\/ordinypt-ransomware-intentionally-destroys-files-currently-targeting-germany\/\" target=\"_blank\" rel=\"noopener noreferrer\">similar ransomware strain named Ordinypt (or HSDFSDCrypt)<\/a>.<\/p>\n<p>Coincidentally, or not, Ordinypt also used malspam for distribution and CVs of beautiful women to get victims to infect themselves. In addition, the Ordinypt ransom note is also nearly identical with the one used by GermanWiper.<\/p>\n<p><em>ZDNet would like to thank security researcher<\/em> <a href=\"https:\/\/twitter.com\/James_inthe_box\/\" target=\"_blank\" rel=\"noopener noreferrer\"><em>@James_inthe_box<\/em><\/a> <em>for his help with this report.<\/em><\/p>\n<h3>Related malware and cybercrime coverage:<\/h3>\n<p>READ MORE <a href=\"https:\/\/www.zdnet.com\/article\/germanwiper-ransomware-hits-germany-hard-destroys-files-asks-for-ransom\/#ftag=RSSbaffb68\">HERE<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Users advised not to pay the ransom under any circumstances!<br \/>\nREAD MORE HERE&#8230;<\/p>\n","protected":false},"author":2,"featured_media":28195,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"colormag_page_layout":"default_layout","footnotes":""},"categories":[62],"tags":[],"class_list":["post-28194","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-zdnet-security"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v27.6 - https:\/\/yoast.com\/product\/yoast-seo-wordpress\/ -->\n<title>GermanWiper ransomware hits Germany hard, destroys files, asks for ransom 2026 | ThreatsHub Cybersecurity News<\/title>\n<meta name=\"description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/www.threatshub.org\/blog\/germanwiper-ransomware-hits-germany-hard-destroys-files-asks-for-ransom\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"GermanWiper ransomware hits Germany hard, destroys files, asks for ransom 2026 | ThreatsHub Cybersecurity News\" \/>\n<meta property=\"og:description\" content=\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security &amp; Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/www.threatshub.org\/blog\/germanwiper-ransomware-hits-germany-hard-destroys-files-asks-for-ransom\/\" \/>\n<meta property=\"og:site_name\" content=\"ThreatsHub Cybersecurity News\" \/>\n<meta property=\"article:published_time\" content=\"2019-08-02T18:33:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2019\/08\/germanwiper-ransomware-hits-germany-hard-destroys-files-asks-for-ransom.png\" \/>\n\t<meta property=\"og:image:width\" content=\"770\" \/>\n\t<meta property=\"og:image:height\" content=\"345\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/png\" \/>\n<meta name=\"author\" content=\"TH Author\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@threatshub\" \/>\n<meta name=\"twitter:site\" content=\"@threatshub\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"TH Author\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"3 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/germanwiper-ransomware-hits-germany-hard-destroys-files-asks-for-ransom\\\/#article\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/germanwiper-ransomware-hits-germany-hard-destroys-files-asks-for-ransom\\\/\"},\"author\":{\"name\":\"TH Author\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\"},\"headline\":\"GermanWiper ransomware hits Germany hard, destroys files, asks for ransom\",\"datePublished\":\"2019-08-02T18:33:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/germanwiper-ransomware-hits-germany-hard-destroys-files-asks-for-ransom\\\/\"},\"wordCount\":532,\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/germanwiper-ransomware-hits-germany-hard-destroys-files-asks-for-ransom\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/08\\\/germanwiper-ransomware-hits-germany-hard-destroys-files-asks-for-ransom.png\",\"articleSection\":[\"ZDNet | Security\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/germanwiper-ransomware-hits-germany-hard-destroys-files-asks-for-ransom\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/germanwiper-ransomware-hits-germany-hard-destroys-files-asks-for-ransom\\\/\",\"name\":\"GermanWiper ransomware hits Germany hard, destroys files, asks for ransom 2026 | ThreatsHub Cybersecurity News\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/germanwiper-ransomware-hits-germany-hard-destroys-files-asks-for-ransom\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/germanwiper-ransomware-hits-germany-hard-destroys-files-asks-for-ransom\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/08\\\/germanwiper-ransomware-hits-germany-hard-destroys-files-asks-for-ransom.png\",\"datePublished\":\"2019-08-02T18:33:00+00:00\",\"description\":\"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/germanwiper-ransomware-hits-germany-hard-destroys-files-asks-for-ransom\\\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/germanwiper-ransomware-hits-germany-hard-destroys-files-asks-for-ransom\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/germanwiper-ransomware-hits-germany-hard-destroys-files-asks-for-ransom\\\/#primaryimage\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/08\\\/germanwiper-ransomware-hits-germany-hard-destroys-files-asks-for-ransom.png\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2019\\\/08\\\/germanwiper-ransomware-hits-germany-hard-destroys-files-asks-for-ransom.png\",\"width\":770,\"height\":345},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/germanwiper-ransomware-hits-germany-hard-destroys-files-asks-for-ransom\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"GermanWiper ransomware hits Germany hard, destroys files, asks for ransom\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"name\":\"ThreatsHub Cybersecurity News\",\"description\":\"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\"},\"alternateName\":\"Threatshub.org\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#organization\",\"name\":\"ThreatsHub.org\",\"alternateName\":\"Threatshub.org\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"contentUrl\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/wp-content\\\/uploads\\\/2025\\\/05\\\/Threatshub_Favicon1.jpg\",\"width\":432,\"height\":435,\"caption\":\"ThreatsHub.org\"},\"image\":{\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/x.com\\\/threatshub\"]},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/www.threatshub.org\\\/blog\\\/#\\\/schema\\\/person\\\/12e0a8671ff89a863584f193e7062476\",\"name\":\"TH Author\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"contentUrl\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g\",\"caption\":\"TH Author\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"GermanWiper ransomware hits Germany hard, destroys files, asks for ransom 2026 | ThreatsHub Cybersecurity News","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/www.threatshub.org\/blog\/germanwiper-ransomware-hits-germany-hard-destroys-files-asks-for-ransom\/","og_locale":"en_US","og_type":"article","og_title":"GermanWiper ransomware hits Germany hard, destroys files, asks for ransom 2026 | ThreatsHub Cybersecurity News","og_description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","og_url":"https:\/\/www.threatshub.org\/blog\/germanwiper-ransomware-hits-germany-hard-destroys-files-asks-for-ransom\/","og_site_name":"ThreatsHub Cybersecurity News","article_published_time":"2019-08-02T18:33:00+00:00","og_image":[{"width":770,"height":345,"url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2019\/08\/germanwiper-ransomware-hits-germany-hard-destroys-files-asks-for-ransom.png","type":"image\/png"}],"author":"TH Author","twitter_card":"summary_large_image","twitter_creator":"@threatshub","twitter_site":"@threatshub","twitter_misc":{"Written by":"TH Author","Est. reading time":"3 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/www.threatshub.org\/blog\/germanwiper-ransomware-hits-germany-hard-destroys-files-asks-for-ransom\/#article","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/germanwiper-ransomware-hits-germany-hard-destroys-files-asks-for-ransom\/"},"author":{"name":"TH Author","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476"},"headline":"GermanWiper ransomware hits Germany hard, destroys files, asks for ransom","datePublished":"2019-08-02T18:33:00+00:00","mainEntityOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/germanwiper-ransomware-hits-germany-hard-destroys-files-asks-for-ransom\/"},"wordCount":532,"publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/germanwiper-ransomware-hits-germany-hard-destroys-files-asks-for-ransom\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2019\/08\/germanwiper-ransomware-hits-germany-hard-destroys-files-asks-for-ransom.png","articleSection":["ZDNet | Security"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/www.threatshub.org\/blog\/germanwiper-ransomware-hits-germany-hard-destroys-files-asks-for-ransom\/","url":"https:\/\/www.threatshub.org\/blog\/germanwiper-ransomware-hits-germany-hard-destroys-files-asks-for-ransom\/","name":"GermanWiper ransomware hits Germany hard, destroys files, asks for ransom 2026 | ThreatsHub Cybersecurity News","isPartOf":{"@id":"https:\/\/www.threatshub.org\/blog\/#website"},"primaryImageOfPage":{"@id":"https:\/\/www.threatshub.org\/blog\/germanwiper-ransomware-hits-germany-hard-destroys-files-asks-for-ransom\/#primaryimage"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/germanwiper-ransomware-hits-germany-hard-destroys-files-asks-for-ransom\/#primaryimage"},"thumbnailUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2019\/08\/germanwiper-ransomware-hits-germany-hard-destroys-files-asks-for-ransom.png","datePublished":"2019-08-02T18:33:00+00:00","description":"ThreatsHub Cybersecurity News | ThreatsHub.org | Cloud Security & Cyber Threats Analysis Hub. 100% Free OSINT Threat Intelligent and Cybersecurity News.","breadcrumb":{"@id":"https:\/\/www.threatshub.org\/blog\/germanwiper-ransomware-hits-germany-hard-destroys-files-asks-for-ransom\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/www.threatshub.org\/blog\/germanwiper-ransomware-hits-germany-hard-destroys-files-asks-for-ransom\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/germanwiper-ransomware-hits-germany-hard-destroys-files-asks-for-ransom\/#primaryimage","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2019\/08\/germanwiper-ransomware-hits-germany-hard-destroys-files-asks-for-ransom.png","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2019\/08\/germanwiper-ransomware-hits-germany-hard-destroys-files-asks-for-ransom.png","width":770,"height":345},{"@type":"BreadcrumbList","@id":"https:\/\/www.threatshub.org\/blog\/germanwiper-ransomware-hits-germany-hard-destroys-files-asks-for-ransom\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/www.threatshub.org\/blog\/"},{"@type":"ListItem","position":2,"name":"GermanWiper ransomware hits Germany hard, destroys files, asks for ransom"}]},{"@type":"WebSite","@id":"https:\/\/www.threatshub.org\/blog\/#website","url":"https:\/\/www.threatshub.org\/blog\/","name":"ThreatsHub Cybersecurity News","description":"%%focuskw%% Threat Intel \u2013 Threat Intel Services \u2013 CyberIntelligence \u2013 Cyber Threat Intelligence - Threat Intelligence Feeds - Threat Intelligence Reports - CyberSecurity Report \u2013 Cyber Security PDF \u2013 Cybersecurity Trends - Cloud Sandbox \u2013- Threat IntelligencePortal \u2013 Incident Response \u2013 Threat Hunting \u2013 IOC - Yara - Security Operations Center \u2013 SecurityOperation Center \u2013 Security SOC \u2013 SOC Services - Advanced Threat - Threat Detection - TargetedAttack \u2013 APT \u2013 Anti-APT \u2013 Advanced Protection \u2013 Cyber Security Services \u2013 Cybersecurity Services -Threat Intelligence Platform","publisher":{"@id":"https:\/\/www.threatshub.org\/blog\/#organization"},"alternateName":"Threatshub.org","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/www.threatshub.org\/blog\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/www.threatshub.org\/blog\/#organization","name":"ThreatsHub.org","alternateName":"Threatshub.org","url":"https:\/\/www.threatshub.org\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","contentUrl":"https:\/\/www.threatshub.org\/blog\/coredata\/uploads\/2025\/05\/Threatshub_Favicon1.jpg","width":432,"height":435,"caption":"ThreatsHub.org"},"image":{"@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/x.com\/threatshub"]},{"@type":"Person","@id":"https:\/\/www.threatshub.org\/blog\/#\/schema\/person\/12e0a8671ff89a863584f193e7062476","name":"TH Author","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","url":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/066276f086d5155df79c850206a779ad368418a844da0182ce43f9cd5b506c3d?s=96&d=mm&r=g","caption":"TH Author"}}]}},"_links":{"self":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/28194","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/comments?post=28194"}],"version-history":[{"count":0,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/posts\/28194\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media\/28195"}],"wp:attachment":[{"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/media?parent=28194"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/categories?post=28194"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.threatshub.org\/blog\/wp-json\/wp\/v2\/tags?post=28194"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}