UnclassifiedIdeology
BiBiGun
BiBiGun is a Palestine-attributed threat actor group with an ideological motive, tracked by Brandefense.
- Origin
- Palestine
- Techniques
- 0
- Exploited CVEs
- No CVE data
- Record updated
About BiBiGun.
A pro-Hamas hacktivist group developed a wiper called BiBi-Linux to target and destroy data on Israeli systems. The malware impersonates ransomware but operates solely to corrupt and delete files, indicating no data theft. A Windows variant, BiBi-Windows, was also discovered, sharing similarities with BiBi-Linux but targeting all files except executables. The group's TTPs have shown overlaps with Moses Staff, which is believed to have an Iran nexus.
Last updated Oct 9, 2026. Compiled by Brandefense technologies from structured threat intelligence and reviewed by Brandefense analysts. Techniques follow the MITRE ATT&CK framework.