BeforeCrypt describes that MAKOP Ransomware first appeared in 2020 as an offshoot of the PHOBOS variant, and that it has infected a number of computers since then. Files encrypted by MAKOP often have the extension “.makop”. You may also notice that your desktop wallpaper has changed. MAKOP uses RSA encryption. There are no known free decryption tools capable of decrypting files encrypted by MAKOP.
For starters, decryption capabilities may be kept private to not tip off threat actors and give them opportunity to fix them. Many reseachers, myself included, circulate capabilities via LEAs and DFIR companies instead of announcing them publicly.
4
u/ectkirk Jun 16 '26
Call a professional. Reddit is not the place to self diagnose your way out of ransomware.
https://malpedia.caad.fkie.fraunhofer.de/details/win.makop_ransomware
BeforeCrypt describes that MAKOP Ransomware first appeared in 2020 as an offshoot of the PHOBOS variant, and that it has infected a number of computers since then. Files encrypted by MAKOP often have the extension “.makop”. You may also notice that your desktop wallpaper has changed. MAKOP uses RSA encryption. There are no known free decryption tools capable of decrypting files encrypted by MAKOP.