Scworld
Makop Ransomware Enhancements Target Indian Organizations
First seen 11 Dec 2025, 02:49 UTC
•


•85% similarity
•43.2
Share:
Export
Ask AI about this cluster
Analyzing cluster data...
Referenced clusters:
Something went wrong. Please try again.
Cluster AI
Ask questions about this threat cluster with AI-powered analysis.
Get Researcher $29.99/moArticle Content
Browse articles
The Makop ransomware, a variant of the Phobos family, has been updated to include GuLoader malware for enhanced payload delivery. Recent attacks have primarily targeted Indian businesses, utilizing Remote Desktop Protocol for initial access and employing various off-the-shelf tools to evade detection.
ThreatCluster AI