Tag: CVE-2022-24521

1 Attack Reports | 0 Vulnerabilities

Attack reports

Makop ransomware: GuLoader and privilege escalation in attacks against Indian businesses

Makop, a ransomware strain derived from Phobos, is targeting Indian businesses through exposed RDP systems. The attackers employ a diverse toolkit including network scanners, privilege escalation exploits, and AV killers. They have integrated GuLoader, a downloader trojan, to deliver secondary payl…
ransomware
guloader
privilege escalation
CVE-2020-0787
lazagne
credential dumping
network scanning
rdp exploitation
CVE-2025-7771
2025-12-09
CVE-2016-0099
CVE-2017-0213
CVE-2018-8639
CVE-2019-1388
CVE-2020-0796
CVE-2020-1066
CVE-2021-41379
CVE-2022-24521
makop
Published: December 9, 2025
Linked vulnerabilities : CVE-2020-0787, CVE-2025-7771 (CVSS 8.7), CVE-2016-0099, CVE-2020-1066, CVE-2018-8639, CVE-2020-0796, CVE-2019-1388, CVE-2021-41379, CVE-2022-24521, CVE-2017-0213
Downloadable IOCs: 62
Click here to see more Attack Reports