The Makop (.run) Variant: A Definitive Forensic Recovery Guide
In our recovery lab today at Lockbit Decryptor, we isolated a new, aggressive iteration of the Makop ransomware family known as the “.run” variant. This is not merely a file encryption event; it is a calculated double-extortion operation. Our forensic analysis confirms that while the malware utilizes a complex file-renaming convention to induce panic, it…
