Do Son A newly identified cyberespionage group, dubbed TAG-100, has been linked to a series of sophisticated attacks
Cobalt Strike
threat actors are increasingly exploiting publicly available Cobalt Strike profiles to mask their malicious activities and bypass security measures
UNC1151 employed DLL loaders that downloaded an encrypted JPG file, which was then decrypted to deploy a final payload executable.
This multi-stage malware strategy ultimately delivers the notorious "Cobalt Strike" payload, establishing communication with a C2 server
A widespread malvertising campaign is actively targeting individuals searching for popular utilities like WinSCP and PuTTY
Forensic investigations by Rapid7 have linked these activities to the Black Basta ransomware group, known for its disruptive cyber attacks
The Earth Krahang threat actor uses a combination of brute-force attacks and custom scripts to breach email servers and steal sensitive data.
This new loader isn't limited to SPARKRAT; they've found versions containing Cobalt Strike – a penetration testing framework often misused by hackers
Elastic Security Labs uncovered a sophisticated cyber intrusion, dubbed REF0657, targeting a financial services organization in South Asia
In the ever-evolving landscape of cyber threats, a new name has emerged with a notorious reputation –...
CVE-2022-39197 has been described as an XSS vulnerability in the teamserver that affected the Cobalt Strike version prior to 4.7.1.