Makop Ransomware Exploits RDP Systems with AV Killer and Other Exploits

Cybersecuritynews •Tushar Subhra Dutta • December 9, 2025

Makop ransomware, a strain of the Phobos malware family first spotted in 2020, continues to evolve into a significant threat to businesses worldwide. Recent analysis reveals that attackers are combining brute-force RDP attacks with sophisticated privilege escalation techniques and security bypass tools to compromise organizations. The majority of attacks, representing 55 percent of all incidents, […]

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Makop Ransomware Targets RDP Systems with Advanced Exploits Makop ransomware, part of the Phobos malware family, is actively exploiting RDP systems. Attackers are utilizing brute-force methods alongside privilege escalation techniques and security bypass tools, affecting a significant number of organizations worldwide, with 55 percent of incidents attributed to this ransomware strain. 3 sources 46

Extracted Entities

Makop Ransomware Exploits RDP Systems with AV Killer and Other Exploits

The full story

Extracted Entities

Attack Types (3)

Malware (1)

Ransomware Groups (1)

Tools (1)