Tag: cobalt strike
Attack reports, vulnerabilities, indicators and intrusion sets linked to cobalt strike.
Attack reports (97)
- From emerging threat to top-tier ransomware-as-a-service: The evolution of INC ransomware · Published 17/06/2026 15:38 · Modified 17/06/2026 20:24
- Ransomware Analysis: Go Binary and Fast Encryption · Published 10/06/2026 13:58 · Modified 10/06/2026 14:01
- Agentic AI Uncovers New China-Linked Cluster OP-512 · Published 05/06/2026 20:07 · Modified 08/06/2026 08:23
- Exploitation of KnowledgeDeliver via ViewState Deserialization Vulnerability · Published 25/05/2026 10:08 · Modified 25/05/2026 10:51
- Middle East Malicious Infrastructure Report: 1,350+ C2 Servers Mapped Across 98 Providers · Published 21/05/2026 23:03 · Modified 22/05/2026 07:13
- Fresh mischief and digital shenanigans · Published 21/05/2026 05:47 · Modified 21/05/2026 17:12
- Operation Dragon Whistle: UNG002 Targets Chinese Academia via Weaponized Institutional Lure · Published 20/05/2026 13:07 · Modified 21/05/2026 16:49
- The Gentlemen & SystemBC: A Sneak Peek Behind the Proxy · Published 20/04/2026 15:00 · Modified 20/04/2026 16:54
- Iran conflict drives heightened espionage activity against Middle East targets · Published 11/03/2026 15:24 · Modified 16/03/2026 09:51
- Silver Dragon Targets Organizations in Southeast Asia and Europe · Published 03/03/2026 20:03 · Modified 04/03/2026 11:17
- Nation-State Actors Exploit Notepad++ Supply Chain · Published 16/02/2026 14:28 · Modified 17/02/2026 16:08
- The Shadow Campaigns: Uncovering Global Espionage · Published 05/02/2026 20:20 · Modified 05/02/2026 20:40
- Notepad++ supply chain attack breakdown · Published 03/02/2026 12:08 · Modified 03/02/2026 16:33
- The Chrysalis Backdoor: A Deep Dive into Lotus Blossom's toolkit · Published 03/02/2026 08:21 · Modified 03/02/2026 08:49
- Can't stop, won't stop: TA584 innovates initial access · Published 28/01/2026 18:26 · Modified 28/01/2026 22:46
- Weekly Threat Bulletin – January 28th, 2026 · Published 28/01/2026 13:31 · Modified 28/01/2026 15:05
- APT Attacks Target Indian Government Using GOGITTER, GITSHELLPAD, and GOSHELL | Part … · Published 26/01/2026 21:19 · Modified 27/01/2026 07:35
- Inside China's Hosting Ecosystem: 18,000+ Malware C2 Servers Mapped Across Major ISPs · Published 15/01/2026 12:03 · Modified 19/01/2026 09:29
- Operation FrostBeacon: Multi-Cluster Cobalt Strike Campaign Targets Russia · Published 08/12/2025 17:25 · Modified 21/12/2025 18:43
- APT24 Pivot to Multi-Vector Attacks · Published 20/11/2025 19:42 · Modified 21/11/2025 15:02
- WEBJACK: Evolving IIS Hijacking Campaign Abuses SEO for Fraud and Monetization · Published 19/11/2025 09:01 · Modified 19/11/2025 09:34
- Malicious Infrastructure Finds Stability with aurologic GmbH · Published 06/11/2025 18:51 · Modified 06/11/2025 20:34
- Team46 and TaxOff: Two Sides of the Same Coin · Published 29/10/2025 10:49 · Modified 29/10/2025 18:23
- Uncovering Qilin attack methods exposed through multiple cases · Published 27/10/2025 08:11 · Modified 27/10/2025 10:34
- UAT-8099: Chinese-speaking cybercrime group targets high-value IIS for SEO fraud · Published 02/10/2025 15:07 · Modified 02/10/2025 16:18