"Google Identifies 34 Cracked Versions of Popular Cobalt Strike Hacking Toolkit in the Wild"

There are 34 different hacked release versions of the Cobalt Strike tool, the first of which was shipped in November 2012. Google Cloud has revealed that it discovered these versions in the wild. The Google Cloud Threat Intelligence (GCTI) team found that the versions, which range from 1.44 to 4.7, total 275 distinct JAR files. Cobalt Strike 4.7.2 is the most recent version. Red teams often use Cobalt Strike, a well-known adversarial framework created by Fortra, to simulate attack scenarios and evaluate the toughness of their cyber defenses. It consists of a Team Server that serves as the command-and-control (C2) hub for remotely commandeering infected devices, a stager built to deliver the Beacon, the next-stage payload, and a fully functional implant that communicates with the C2 server. Unauthorized versions of the software have increasingly been weaponized by numerous threat actors to advance their post-exploitation activities due to their extensive feature set. This article continues to discuss the identification of 34 different hacked release versions of the Cobalt Strike tool in the wild. 

THN reports "Google Identifies 34 Cracked Versions of Popular Cobalt Strike Hacking Toolkit in the Wild"

Submitted by Anonymous on