Netskope Threat Labs

Makop

ATP Sandbox Adv. HeuristicsAV

Makop is a ransomware family first seen in 2020 as an offshoot of the PHOBOS variant. It encrypts files with RSA cryptography, appends the .makop extension, and changes the desktop wallpaper on victims' machines. Researchers know of no free decryption tools for files encrypted by Makop.

First seen
May 2022
Last seen
October 2026
Alert Name
Gen:Variant.Ransom.Makop.149
Gen:Variant.Ransom.Makop.160
Gen:Variant.Ransom.Makop.168
Gen:Variant.Ransom.Makop.33
Gen:Variant.Ransom.Makop.49
Gen:Variant.Ransom.Makop.50
Win32.Ransomware.Makop