Do Son Makop ransomware operators now use GuLoader and BYOVD (ThrottleStop.sys) to bypass EDR and security. The "low-effort" campaign targets RDP-exposed networks, with 55% of attacks aimed at India.
Makop ransomware
The BianLian ransomware group, first identified in 2022, has quickly ascended the ranks to become one of the most formidable extortion groups