Search: “Cobalt Strike”

1,143 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Ransomware 449 Malware 300 Threat actor 125 Vulnerability 115 Exploit / PoC 73 Data breach 36 Policy & legal 13 Phishing & fraud 12 AI safety & security 8 Advisory 7 Research 2 AI tools & infra 2 Industry 1 Tools 1

SeverityAll critical 374 high 635 medium 116 low 13 info 6

A Multi-Method Approach to Identifying Rogue Cobalt Strike Servers

Recorded FutureAug 21, 00:00 UTC · Aug 21, 2025Ransomware

57

Identifying Rogue Cobalt Strike Servers: A Recorded Future Approach

Recorded FutureAug 12, 00:00 UTC · Aug 12, 2025Vulnerability

42

Blowing Cobalt Strike Out of the Water With Memory Analysis

Palo Alto Unit 42Jun 5, 17:24 UTC · Jun 5, 2024Ransomware

57

Attackers use domain fronting technique to target Myanmar with Cobalt Strike

Cisco TalosNov 16, 12:00 UTC · Nov 16, 2021Ransomware

57

How to Detect Cobalt Strike: An Inside Look at the Popular Commercial Post

Recorded FutureJun 27, 00:00 UTC · Jun 27, 2025Ransomware

57

New campaign uses government, union-themed lures to deliver Cobalt Strike beacons

Cisco TalosSep 28, 12:12 UTC · Sep 28, 2022Threat actor CVE-2017-0199

60

New Snort, ClamAV coverage strikes back against Cobalt Strike

Cisco TalosSep 21, 04:01 UTC · Sep 21, 2020Ransomware

57

Microsoft leads effort to disrupt illicit use of Cobalt Strike, a dangerous hacking tool in the wrong hands

CyberScoopApr 6, 16:00 UTC · Apr 6, 2023Ransomware in the wild

60

APT41 likely compromised Taiwanese government-affiliated research institute with ShadowPad and Cobalt Strike

Cisco TalosAug 1, 12:00 UTC · Aug 1, 2024Threat actor CVE-2018-0824

60

Cisco Talos Advisory on Adversaries Targeting the Healthcare and Public Health Sector

Cisco TalosOct 30, 21:30 UTC · Oct 30, 2020Advisory

42

Live Cybersecurity Webinar — Deconstructing Cobalt Strike

The Hacker NewsJun 11, 08:17 UTC · Jun 11, 2021Vulnerability

30

CobaltSpam tool can flood Cobalt Strike malware servers

The RecordDec 13, 00:00 UTC · Dec 13, 2022Malware

42

IndigoDrop spreads via military

Cisco TalosJun 22, 17:40 UTC · Jun 22, 2020Exploit / PoC

45

A Cobalt Strike flaw exposed attackers' infrastructure

Security AffairsMar 3, 13:17 UTC · Mar 3, 2019Vulnerability

30

Operation Morpheus took down 593 Cobalt Strike servers used by threat actors

Security AffairsJul 3, 18:24 UTC · Jul 3, 2024Threat actor1

60

China-Nexus TAG-112 Compromises Tibetan Websites to Distribute Cobalt Strike

Recorded FutureAug 21, 00:00 UTC · Aug 21, 2025Vulnerability

42

Manjusaka: A Chinese sibling of Sliver and Cobalt Strike

Cisco TalosAug 2, 12:00 UTC · Aug 2, 2022Malware

55

Unmasking the new persistent attacks on Japan

Cisco TalosMar 6, 11:00 UTC · Mar 6, 2025Vulnerability CVE-2024-45771

60

Microsoft aims at stopping cybercriminals from using cracked copies of Cobalt Strike

Security AffairsApr 7, 10:38 UTC · Apr 7, 2023Ransomware

60

Number of Unauthorized Cobalt Strike Copies Plummets 80%

Infosecurity MagazineMar 10, 09:30 UTC · Mar 10, 2025Threat actor

45

HelpSystems Patch Falls Short, RCE Vulnerability in Cobalt Strike Remains

Infosecurity MagazineOct 18, 17:00 UTC · Oct 18, 2022Vulnerability CVE-2022-42948 CVE-2022-39197

47

Google seeks to make Cobalt Strike useless to attackers

Help Net SecurityNov 21, 00:00 UTC · Nov 21, 2022Threat actor

45

UK’s NCA Leads Major Cobalt Strike Takedown

Infosecurity MagazineJul 4, 09:30 UTC · Jul 4, 2024Ransomware

57

Vermilion Strike, a Linux implementation of Cobalt Strike used in attacks

Security AffairsSep 14, 06:00 UTC · Sep 14, 2021Malware

30

Malicious use of Cobalt Strike down 80% after crackdown, Fortra says

The RecordMar 7, 19:06 UTC · Mar 7, 2025Ransomware

57

SOC files: an APT41 attack on government IT services in Africa

Kaspersky SecurelistJul 21, 08:00 UTC · Jul 21, 2025Threat actor

60

Hackers Found Using CrossC2 to Expand Cobalt Strike Beacon’s Reach to Linux and macOS

The Hacker NewsAug 15, 00:00 UTC · Aug 15, 2025Ransomware

57

Microsoft Takes Legal Action to Disrupt Cybercriminals' Illegal Use of Cobalt Strike Tool

The Hacker NewsApr 8, 04:44 UTC · Apr 8, 2023Ransomware

57

Threat actor ports Cobalt Strike beacon to Linux, uses it in attacks

The RecordDec 13, 00:00 UTC · Dec 13, 2022Threat actor

57

Google provides rules to detect tens of cracked versions of Cobalt Strike

Security AffairsNov 21, 11:41 UTC · Nov 21, 2022Exploit / PoC

45

Global Police Operation Shuts Down 600 Cybercrime Servers Linked to Cobalt Strike

The Hacker NewsJul 7, 16:50 UTC · Jul 7, 2024Ransomware

57

Critical RCE Vulnerability Discovered in Popular Cobalt Strike Hacking Software

The Hacker NewsOct 19, 06:29 UTC · Oct 19, 2022Vulnerability CVE-2022-42948 CVE-2022-39197

60

Bug in Cobalt Strike pentesting tool used to identify malicious servers

Help Net SecurityMar 1, 00:00 UTC · Mar 1, 2019Malware

42

Building a bypass with MSBuild

Cisco TalosFeb 18, 16:01 UTC · Feb 18, 2020Exploit / PoC

45

Uncovering Qilin attack methods exposed through multiple cases

Cisco TalosOct 27, 02:00 UTC · Oct 27, 2025Ransomware

57

Additional Entities Targeted by DarkSide Affiliate, TAG-21; Links to WellMess and Sliver Infrastructure

Recorded FutureJul 15, 00:00 UTC · Jul 15, 2025Ransomware

57

Cobalt Strike: International law enforcement operation tackles illegal uses of ‘Swiss army knife’ pentesting tool

The RecordJul 3, 15:25 UTC · Jul 3, 2024Ransomware

57

StrikeShark: a new campaign involving a custom SharkLoader and Cobalt Strike Beacon

Kaspersky SecurelistJun 24, 14:23 UTC · Jun 24, 2026Malware CVE-2021-26855 CVE-2023-32315 CVE-2024-36401+10 CVEs

47

Emotet directly drops Cobalt Strike beacons without intermediate Trojans

Security AffairsDec 8, 06:32 UTC · Dec 8, 2021Malware

42

Threat actors are abusing MSBuild to implant Cobalt Strike Beacons

Security AffairsDec 28, 15:56 UTC · Dec 28, 2021Threat actor

45