Cobalt Strike

RSS

Finding Minhook in a sideloading attack – and Sweden too

Threat Research

cobalt strike

DLL sideloading

minhook

Finding Minhook in a sideloading attack – and Sweden too

Malware,Bug,In,Target,With,Magnifier.,Scanning,Network,Vulnerability,Virus

Threat Research

Asyncrat

cobalt strike

CVE-2024-1708

CVE-2024-1709

Featured

Lockbit

MDR.

Ransomware

rust

ScreenConnect

Sophos X-Ops

ConnectWise ScreenConnect attacks deliver malware

Threat Research

Brute Ratel

cobalt strike

Featured

Havok

Meterpreter

post-exploitation tools

Sliver

Sophos X-Ops

The Phantom Menace: Brute Ratel remains rare and targeted

Security Operations

Threat Research

cobalt strike

Cryptomining

cve-2017-11317

cve-2017-11357

cve-2019-18935

Featured

Powershell

Sophos X-Ops

SophosLabs Uncut

telerik

XMRig

Telerik UI exploitation leads to cryptominer, Cobalt Strike infections

Security Operations

Threat Research

Active Adversary

Active Adversary Report

Artifacts

Attack Tools

cobalt strike

Cryptomining

cyberattacks

cyberthreats

dwell time

Exploit

Featured

initial access broker

malware delivery system

MITRE

ProxyLogon

ProxyShell

Ransomware

ransomware as a service

Sophos Rapid Response

vulnerability

The Active Adversary Playbook 2022

Threat Research

Bazar

cobalt strike

Conti

Featured

Karma

ProxyShell

Ransomware

Security Operations

Conti and Karma actors attack healthcare provider at same time through ProxyShell exploits

Open,Backdoor,In,A,Black,Wall,Cyber,Security,Concept,Illustration

Security Operations

Applied Threat Intelligence

cobalt strike

human-led threat hunting

Security Operations

Sophos MTR

Zloader

Zloader Installs Remote Access Backdoors and Delivers Cobalt Strike

Naked Security

cobalt strike

vulnerability

“Cobalt Strike” network attack tool patches crashtastic server bug

SophosLabs Uncut

Threat Research

cobalt strike

DarkSide

Mega

pCloud

Ransomware

SystemBC

A defender’s view inside a DarkSide ransomware attack