Microsoft leads effort to disrupt illicit use of Cobalt Strike, a dangerous hacking tool in the wrong handsCyberScoop·Apr 6, 16:00 UTC · Apr 6, 2023Ransomware in the wild60
The Cobalt Hacking crew is still active even after the arrest of its leaderSecurity Affairs·May 29, 05:17 UTC · May 29, 2018Ransomware60
Operation Morpheus took down 593 Cobalt Strike servers used by threat actorsSecurity Affairs·Jul 3, 18:24 UTC · Jul 3, 2024Threat actor160
Cobalt adds Autonomous Pentest to scale application security testingHelp Net Security·Jul 23, 00:00 UTC · Jul 23, 2026Threat actor60
Unmasking the new persistent attacks on JapanCisco Talos·Mar 6, 11:00 UTC · Mar 6, 2025VulnerabilityCVE-2024-4577160
Manjusaka: A Chinese sibling of Sliver and Cobalt StrikeCisco Talos·Aug 2, 12:00 UTC · Aug 2, 2022Malware55
Cobalt names Eric Brinkman as Chief Product OfficerHelp Net Security·Feb 26, 00:00 UTC · Feb 26, 2021Industry55
Microsoft aims at stopping cybercriminals from using cracked copies of Cobalt StrikeSecurity Affairs·Apr 7, 10:38 UTC · Apr 7, 2023Ransomware60
'Cobalt Group' launches new campaign against banks in Romania, RussiaCyberScoop·Aug 30, 22:43 UTC · Aug 30, 2018Threat actor in the wild60
Cobalt adds continuous pentesting AI capabilities to scale offensive security and real-world riskHelp Net Security·Mar 25, 10:01 UTC · Mar 25, 2026Vulnerability55
SOC files: an APT41 attack on government IT services in AfricaKaspersky Securelist·Jul 21, 08:00 UTC · Jul 21, 2025Threat actor60
Critical RCE Vulnerability Discovered in Popular Cobalt Strike Hacking SoftwareThe Hacker News·Oct 19, 06:29 UTC · Oct 19, 2022VulnerabilityCVE-2022-42948CVE-2022-3919760
New SharkLoader Malware Deploys Cobalt Strike in StrikeShark CyberattacksThe Hacker News·Jun 27, 12:06 UTC · Jun 27, 2026MalwareCVE-2021-26855CVE-2023-32315CVE-2024-36401+10 CVEs60
Cobalt improves pentest transparency, automation, and risk prioritizationHelp Net Security·Jun 4, 00:00 UTC · Jun 4, 2025Vulnerability55
Cobalt Group tries to slip malicious PDFs past bank employees, researchers sayCyberScoop·Oct 25, 16:46 UTC · Oct 25, 2018Exploit / PoC in the wild60
Cobalt Iron enhances recovery with Isolated Vault ServicesHelp Net Security·Oct 5, 00:00 UTC · Oct 5, 2023Vulnerability55
How cybercriminals are using malware to target Linux-based operating systemsHelp Net Security·Feb 9, 00:00 UTC · Feb 9, 2022Malware55
DeFinity partners with Cobalt to enable dynamic credit management of digital asset tradesHelp Net Security·Jan 3, 11:30 UTC · Jan 3, 2022Industry55
Windows MSHTML 0-Day Exploited to Deploy Cobalt Strike Beacon in Targeted AttacksThe Hacker News·Nov 12, 15:17 UTC · Nov 12, 2021RansomwareCVE-2021-4044460
Iran-linked group Cobalt Dickens hit over 60 universities worldwideSecurity Affairs·Sep 12, 09:27 UTC · Sep 12, 2019Threat actor60
Critical RCE impacts popular postSecurity Affairs·Oct 18, 12:27 UTC · Oct 18, 2022VulnerabilityCVE-2022-42948CVE-2022-3919760
DroxiDat-Cobalt Strike Duo Targets Power Generator NetworkInfosecurity Magazine·Aug 11, 17:00 UTC · Aug 11, 2023Ransomware60
LockBit Ransomware Abuses Windows Defender to Deploy Cobalt Strike PayloadThe Hacker News·Aug 2, 08:07 UTC · Aug 2, 2022Ransomware60
Chinese Hackers Target Taiwan's Semiconductor Sector with Cobalt Strike, Custom BackdoorsThe Hacker News·Jul 18, 04:53 UTC · Jul 18, 2025MalwareCVE-2018-0171CVE-2023-20198CVE-2023-20273+1 CVEs60
New Cyberattack Targets Chinese-Speaking Businesses with Cobalt Strike PayloadsThe Hacker News·Aug 30, 06:17 UTC · Aug 30, 2024Vulnerability55
Researchers Detail Multistage Attack Hijacking Systems with SSLoad, Cobalt StrikeThe Hacker News·Apr 25, 16:12 UTC · Apr 25, 2024Malware55
Chinese Hackers Target Semiconductor Firms in East Asia with Cobalt StrikeThe Hacker News·Oct 9, 02:54 UTC · Oct 9, 2023Malware55
Cobalt Strike Vulnerability Affects Botnet ServersSchneier on Security·Aug 12, 04:35 UTC · Aug 12, 2021Vulnerability55
Cobalt Iron Compass enterprise SaaS backup platform now offers NAS data protectionHelp Net Security·Feb 13, 00:00 UTC · Feb 13, 2020Industry55
Financial hacking teams FIN7, Cobalt Group update tactics to haunt banks and retailCyberScoop·Aug 14, 15:18 UTC · Aug 14, 2019Exploit / PoC in the wild60
Hackers Exploit Recently Disclosed Microsoft Office Bug to Backdoor PCsThe Hacker News·Nov 29, 10:05 UTC · Nov 29, 2017Malware in the wildCVE-2017-11882160
KnowledgeDeliver LMS Flaw Exploited to Deploy Godzilla and Cobalt StrikeThe Hacker News·May 26, 05:19 UTC · May 26, 2026Exploit / PoCCVE-2026-542660
Talos Incident Response quarterly threat report — The top malware families and TTPs used in Q2 2021Cisco Talos·Aug 11, 12:00 UTC · Aug 11, 2021Malware55
Cobalt Dickens threat group looks to be similar to indicted hackersCyberScoop·Aug 24, 13:13 UTC · Aug 24, 2018Policy & legal in the wild60
How workforce reductions affect cybersecurity posturesHelp Net Security·May 8, 00:00 UTC · May 8, 2024Vulnerability55
Power Generator in South Africa hit with DroxiDat and Cobalt StrikeSecurity Affairs·Aug 12, 06:57 UTC · Aug 12, 2023Ransomware60
‘Cobalt Dickens’ group is phishing universities at scale again, researchers sayCyberScoop·Sep 11, 13:42 UTC · Sep 11, 2019Phishing & fraud in the wild60
Companies keep bolting AI onto their products, and the security bill is coming dueHelp Net Security·Jul 7, 05:46 UTC · Jul 7, 2026Policy & legal55