AV Killer is a cyberattack tool used by the Makop ransomware operation to exploit Remote Desktop Protocol (RDP) systems, leveraging AV Killer in combination with additional exploits to gain access and deploy ransomware.
Overview
AV Killer is a cyberattack tool used by the Makop ransomware operation to exploit Remote Desktop Protocol (RDP) systems, leveraging AV Killer in combination with additional exploits to gain access and deploy ransomware. This highlights RDP as a critical attack surface and shows Makop’s use of modular exploits to breach endpoints.
Related Threat Clusters
-
DragonForce Ransomware Exploits Microsoft Teams for Covert C2 Communications
The DragonForce ransomware group has been observed using a custom malware, Backdoor.Turn, to conceal command-and-control (C&C) traffic within Microsoft Teams' relay infrastructure. This sophisticated technique allows…
13 articles · Updated June 16, 2026 -
SilverFox Expands ValleyRAT with Kernel-Mode Rootkit in New Campaign
The SilverFox APT group has upgraded its ValleyRAT malware into a sophisticated eight-stage malware chain, culminating in a kernel-mode rootkit. This evolution enhances post-exploitation persistence and evasion…
2 articles · Updated July 6, 2026 -
Makop Ransomware Targets RDP Systems with Advanced Exploits
Makop ransomware, part of the Phobos malware family, is actively exploiting RDP systems. Attackers are utilizing brute-force methods alongside privilege escalation techniques and security bypass tools, affecting a…
3 articles · Updated December 9, 2025
Recent Intelligence Reports
- SilverFox Hackers Use Go RAT, AV Killer, and Kernel Rootkit in Live ValleyRAT Campaign — Cybersecuritynews · July 6, 2026
- DragonForce Attackers Weaponize Microsoft Teams Relays to Stay Hidden — Security · June 16, 2026
- Makop Ransomware Exploits RDP Systems with AV Killer and Other Exploits — Cybersecuritynews · December 9, 2025
- Makop Ransomware Targets RDP Systems Using AV Killer and Additional Exploits — Gbhackers · December 9, 2025