Europol coordinates global action against criminal abuse of Cobalt Strike


Law enforcement has teamed up with the private sector to fight against the abuse of a legitimate security tool by criminals who were using it to infiltrate victims’ IT systems.

Older, unlicensed versions of the Cobalt Strike red teaming tool were targeted during a week of action coordinated from Europol’s headquarters between 24 and 28 June. Throughout the week, law enforcement flagged known IP addresses associated with criminal activity, along with a range of domain names used by criminal groups, for online service providers to disable unlicensed versions of the tool.

Read more…
Source: Europol


Sign up for our Newsletter


Related:

  • Proposed Irish hate speech regulations could have a chilling effect on freedom

    January 4, 2024

    In light of the Dublin riots, which estimates suggest resulted in millions of euro worth of damage, following the stabbing of three children outside their school by a foreign national, Ireland’s regional free speech culture war battleground has become global. Several public figures from across the world have sounded the alarm over potential threats to freedom ...

  • Pakistan: Separate agency set up to tackle cybercrime challenge

    December 28, 2023

    The government has established a separate agency, National Cyber Crime Investigation Agency, equipped with all the required equipment and skills with which Pakistan’s cyberspace, data of public and private institutions, business transactions, and online activities of citizens can be secured, effectively. This was stated by Caretaker Federal Minister for Information Technology and Telecommunication Dr Umar Saif, ...

  • UK: 767 sex crime victims affected by Norfolk police data leak

    December 27, 2023

    Hundreds of victims of sexual offences were among those to have personal details leaked as part of a huge police data breach. Norfolk and Suffolk constabularies revealed in August that a technical issue had led to sensitive raw data about crimes being mistakenly disclosed as part of responses to freedom of information requests. Among the data ...

  • Lapsus$: GTA 6 hacker handed indefinite hospital order

    December 22, 2023

    An 18-year-old hacker who leaked clips of a forthcoming Grand Theft Auto (GTA) game has been sentenced to an indefinite hospital order. Arion Kurtaj from Oxford, who is autistic, was a key member of international gang Lapsus$. The gang’s attacks on tech giants including Uber, Nvidia and Rockstar Games cost the firms nearly $10m. The judge ...

  • UK: Police to be able to run face recognition searches on 50m driving licence holders

    December 20, 2023

    The police will be able to run facial recognition searches on a database containing images of Britain’s 50 million driving licence holders under a law change being quietly introduced by the government. Should the police wish to put a name to an image collected on CCTV, or shared on social media, the legislation would provide them ...

  • #StopRansomware: ALPHV Blackcat

    December 19, 2023

    The Federal Bureau of Investigation (FBI) and the Cybersecurity and Infrastructure Security Agency (CISA) are releasing this joint CSA to disseminate known IOCs and TTPs associated with the ALPHV Blackcat ransomware as a service (RaaS) identified through FBI investigations as recently as Dec. 6, 2023. This advisory provides updates to the FBI FLASH BlackCat/ALPHV Ransomware Indicators ...