Makop Ransomware — Victims, Campaigns & Activity

Threat entity extracted from intelligence sources

Frequency
6
occurrences
First Seen
December 9, 2025
Last Seen
December 16, 2025

Related Threat Clusters

  • Makop Ransomware Targets RDP Systems with Advanced Exploits

    Makop ransomware, part of the Phobos malware family, is actively exploiting RDP systems. Attackers are utilizing brute-force methods alongside privilege escalation techniques and security bypass tools, affecting a…

    3 articles · Updated December 9, 2025
  • India Faces 55% of Makop Ransomware Victims, Acronis Reports

    Acronis Research reveals that India accounts for 55% of victims targeted by the Makop ransomware group. This shift in tactics involves the use of a loader, which helps attackers evade detection by security tools, making…

    3 articles · Updated December 16, 2025
  • Makop Ransomware Enhancements Target Indian Organizations

    The Makop ransomware, a variant of the Phobos family, has been updated to include GuLoader malware for enhanced payload delivery. Recent attacks have primarily targeted Indian businesses, utilizing Remote Desktop…

    4 articles · Updated December 11, 2025

Recent Intelligence Reports

  • 55% victims of Makop ransomware group were based in India: Study — Timesofindia.Indiatimes · December 16, 2025
  • India Accounts for 55% of Victims in Makop Ransomware Operations: Acronis Research — Varindia · December 16, 2025
  • India Accounts for 55% of Victims in Makop Ransomware Operations, Acronis Research — Itvoice.In · December 16, 2025
  • Updated Makop ransomware emerges — Scworld · December 11, 2025
  • Makop Ransomware Exploits RDP Systems with AV Killer and Other Exploits — Cybersecuritynews · December 9, 2025
  • Makop Ransomware Targets RDP Systems Using AV Killer and Additional Exploits — Gbhackers · December 9, 2025

CVSS v3.1 Breakdown