Search: “cobalt”

715 stories

Searchkeyword smart Sortlatest hot importance relevance

DomainAll Cyber AIWindow24h 3d 7d 30d AllIn the wild Important only Show duplicates

CategoryAll Ransomware 482 Malware 346 Vulnerability 152 Threat actor 151 Exploit / PoC 81 Data breach 42 Industry 29 Policy & legal 25 Phishing & fraud 17 Advisory 8 AI safety & security 8 AI tools & infra 5 Research 2 AI research 1

SeverityAll critical 441 high 715 medium 139 low 45 info 10

A Multi-Method Approach to Identifying Rogue Cobalt Strike Servers

Recorded FutureAug 21, 00:00 UTC · Aug 21, 2025Ransomware

57

Identifying Rogue Cobalt Strike Servers: A Recorded Future Approach

Recorded FutureAug 12, 00:00 UTC · Aug 12, 2025Vulnerability

42

Blowing Cobalt Strike Out of the Water With Memory Analysis

Palo Alto Unit 42Jun 5, 17:24 UTC · Jun 5, 2024Ransomware

57

Attackers use domain fronting technique to target Myanmar with Cobalt Strike

Cisco TalosNov 16, 12:00 UTC · Nov 16, 2021Ransomware

57

How to Detect Cobalt Strike: An Inside Look at the Popular Commercial Post

Recorded FutureJun 27, 00:00 UTC · Jun 27, 2025Ransomware

57

New campaign uses government, union-themed lures to deliver Cobalt Strike beacons

Cisco TalosSep 28, 12:12 UTC · Sep 28, 2022Threat actor CVE-2017-0199

60

APT41 likely compromised Taiwanese government-affiliated research institute with ShadowPad and Cobalt Strike

Cisco TalosAug 1, 12:00 UTC · Aug 1, 2024Threat actor CVE-2018-08241

60

New Snort, ClamAV coverage strikes back against Cobalt Strike

Cisco TalosSep 21, 04:01 UTC · Sep 21, 2020Ransomware1

57

CobaltSpam tool can flood Cobalt Strike malware servers

The RecordDec 13, 00:00 UTC · Dec 13, 2022Malware

42

Cisco Talos Advisory on Adversaries Targeting the Healthcare and Public Health Sector

Cisco TalosOct 30, 21:30 UTC · Oct 30, 2020Advisory

42

Cobalt cybercrime gang targets Russian and Romanian banks

Security AffairsSep 1, 09:34 UTC · Sep 1, 2018Malware

42

Cobalt crime gang is using again CobInt in attacks on former soviet states

Security AffairsSep 13, 08:01 UTC · Sep 13, 2018Vulnerability CVE-2017-8570 CVE-2017-11882 CVE-2018-0802+1 CVEs

47

China-Nexus TAG-112 Compromises Tibetan Websites to Distribute Cobalt Strike

Recorded FutureAug 21, 00:00 UTC · Aug 21, 2025Vulnerability

42

HelpSystems Patch Falls Short, RCE Vulnerability in Cobalt Strike Remains

Infosecurity MagazineOct 18, 17:00 UTC · Oct 18, 2022Vulnerability CVE-2022-42948 CVE-2022-39197

47

Hackers Found Using CrossC2 to Expand Cobalt Strike Beacon’s Reach to Linux and macOS

The Hacker NewsAug 15, 00:00 UTC · Aug 15, 2025Ransomware

57

Malicious use of Cobalt Strike down 80% after crackdown, Fortra says

The RecordMar 7, 19:06 UTC · Mar 7, 2025Ransomware

57

UK’s NCA Leads Major Cobalt Strike Takedown

Infosecurity MagazineJul 4, 09:30 UTC · Jul 4, 2024Ransomware

57

Microsoft Takes Legal Action to Disrupt Cybercriminals' Illegal Use of Cobalt Strike Tool

The Hacker NewsApr 8, 04:44 UTC · Apr 8, 2023Ransomware

57

Threat actor ports Cobalt Strike beacon to Linux, uses it in attacks

The RecordDec 13, 00:00 UTC · Dec 13, 2022Threat actor

57

Experts found a link between a Magecart group and Cobalt Group

Security AffairsOct 8, 14:14 UTC · Oct 8, 2019Vulnerability CVE-2017-0199

47

Bug in Cobalt Strike pentesting tool used to identify malicious servers

Help Net SecurityMar 1, 00:00 UTC · Mar 1, 2019Malware

42

Additional Entities Targeted by DarkSide Affiliate, TAG-21; Links to WellMess and Sliver Infrastructure

Recorded FutureJul 15, 00:00 UTC · Jul 15, 2025Ransomware

57

Global Police Operation Shuts Down 600 Cybercrime Servers Linked to Cobalt Strike

The Hacker NewsJul 7, 16:50 UTC · Jul 7, 2024Ransomware

57

StrikeShark: a new campaign involving a custom SharkLoader and Cobalt Strike Beacon

Kaspersky SecurelistJun 24, 14:23 UTC · Jun 24, 2026Malware CVE-2021-26855 CVE-2023-32315 CVE-2024-36401+10 CVEs

47

Cobalt Strike: International law enforcement operation tackles illegal uses of ‘Swiss army knife’ pentesting tool

The RecordJul 3, 15:25 UTC · Jul 3, 2024Ransomware

57

Iran-linked COBALT MIRAGE group uses ransomware in its operations

Security AffairsMay 13, 06:52 UTC · May 13, 2022Ransomware CVE-2018-13379 CVE-2020-12812 CVE-2019-5591+3 CVEs

60

The Cobalt group is exploiting the CVE-2017-11882 Microsoft Office flaw in targeted attacks

Security AffairsNov 26, 14:06 UTC · Nov 26, 2017Vulnerability CVE-2017-11882 CVE-2017-8759

47

Uncovering Qilin attack methods exposed through multiple cases

Cisco TalosOct 27, 02:00 UTC · Oct 27, 2025Ransomware

57

Emotet directly drops Cobalt Strike beacons without intermediate Trojans

Security AffairsDec 8, 06:32 UTC · Dec 8, 2021Malware

42

APT41-Linked Silver Dragon Targets Governments Using Cobalt Strike and Google Drive C2

The Hacker NewsMar 4, 14:52 UTC · Mar 4, 2026Threat actor

57

APT41 Hackers Use ShadowPad, Cobalt Strike in Taiwanese Institute Cyber Attack

The Hacker NewsAug 2, 16:32 UTC · Aug 2, 2024Threat actor CVE-2018-0824

60

Hackers Using Golang Variant of Cobalt Strike to Target Apple macOS Systems

The Hacker NewsMay 15, 00:00 UTC · May 15, 2023Malware1

42

Chinese and Russian Hackers Using SILKLOADER Malware to Evade Detection

The Hacker NewsMar 18, 05:02 UTC · Mar 18, 2023Malware

42

Quarterly Report: Incident Response Trends in Q3 2022

Cisco TalosOct 25, 12:00 UTC · Oct 25, 2022Ransomware CVE-2020-1472

60

New Malware Campaign Targeting Job Seekers with Cobalt Strike Beacons

The Hacker NewsOct 1, 05:49 UTC · Oct 1, 2022Malware CVE-2017-0199

47

Government, Union-Themed Lures Used to Deliver Cobalt Strike Payloads

Infosecurity MagazineSep 29, 17:00 UTC · Sep 29, 2022Vulnerability

42

Manjusaka, a new attack tool similar to Sliver and Cobalt Strike

Security AffairsAug 3, 17:15 UTC · Aug 3, 2022Malware

42

LockBit 3.0 sideloads Cobalt Strike through Windows Defender

Security AffairsAug 2, 12:30 UTC · Aug 2, 2022Ransomware

57

Hackers Backdoor Unpatched Microsoft SQL Database Servers with Cobalt Strike

The Hacker NewsFeb 22, 07:22 UTC · Feb 22, 2022Vulnerability

42

Loncom packer: from backdoors to Cobalt Strike

Kaspersky SecurelistApr 2, 10:00 UTC · Apr 2, 2020Malware

42