Cobalt Strike Stories

Global Stories

Cobalt Strike stories

Google flags KnowledgeDeliver flaw & Chinese phishing surge

A zero-day in a widely used Japanese learning platform let hackers plant malware, while Chinese phishing services are now bypassing one-time codes.

By Sofiah Nichole Salivio • 5 min read • Wed, 27th May 2026

Ransomware

ReliaQuest warns of SonicWall MFA bypass after patching

Patching alone has left some older SonicWall devices exposed to VPN attacks, with reliaQuest finding the first known in-the-wild use of CVE-2024-12802.

By Joseph Gabriel Lagonsin • 4 min read • Fri, 22nd May 2026

Malware

Proofpoint details TA584's fast-evolving 2025 attacks

Cyber gang TA584 triples 2025 email attacks as it adopts ClickFix lures and new Tsundere Bot malware, Proofpoint researchers warn.

By Mark Tarre • 5 min read • Fri, 30th Jan 2026

Malware

Cybercriminals to weaponise AI & exploit open-source risks in 2026

In 2026, cybercriminals will exploit AI tools and open-source vulnerabilities, escalating ransomware threats with both noisy and stealthy tactics.

By Sean Mitchell • 4 min read • Sat, 22nd Nov 2025

Malware

AI-driven DNS threats & malicious adtech surge worldwide

Infoblox's 2025 report reveals a surge in AI-driven DNS threats and widespread malicious adtech affecting global organisations, urging proactive cyber defence.

By Catherine Knowles • 4 min read • Tue, 5th Aug 2025

Phishing

AI-driven DNS threats & malicious adtech fuel cybercrime surge

Infoblox reports a surge in AI-driven DNS threats and malicious adtech, with 25% of new domains found malicious, urging firms to adopt proactive cyber defences.

By Melvin Hipolito • 4 min read • Tue, 5th Aug 2025

Hyperscale

Elastic report: Azure outpaces AWS in 2024 cyber threats analysis

In a significant shift, Microsoft Azure has eclipsed AWS as the leading environment for cyber threats, accounting for 64% of anomalous signals, according to Elastic's new report.

By Melania Watson • 3 min read • Wed, 2nd Oct 2024

Encryption

Elastic report: misconfigurations & OSTs heighten cyber risk

Elastic's 2024 Global Threat Report reveals that misconfigurations and offensive security tools significantly elevate cyber risks, notably in cloud environments.

By Sean Mitchell • 3 min read • Wed, 2nd Oct 2024

Malware

Elastic discovers new attack vector in Microsoft Management Console

Elastic Security Labs has unveiled GrimResource, a new attack technique exploiting the Microsoft Management Console, allowing full code execution with minimal security alerts.

By Sean Mitchell • 3 min read • Wed, 26th Jun 2024

Advanced Persistent Threat Protection

Cybersecurity firm Group-IB tracks major new threat actor GambleForce

Threat actor GambleForce has struck 24 organisations in 8 countries in 3 months, exploiting SQL vulnerabilities to steal sensitive data.

By Catherine Knowles • 3 min read • Thu, 14th Dec 2023

DevOps

Huge increase in threat actors using Cobalt Strike - Proofpoint research

Proofpoint cybersecurity company has released research finding a 161% increase in threat actors using the threat emulation tool Cobalt Strike.

By Ryan Morris-Reade • 3 min read • Wed, 7th Jul 2021

Malware

Hackers using spearphishing to target banks –Bitdefender

To limit the risk of being discovered, attackers operated outside of normal business hours and cashout operations were planned for weekends.

By Kai Ping Lew • 2 min read • Tue, 21st Aug 2018

Stories from Other Regions

Cobalt Strike stories

Malware

AI-driven cyberattacks surge, targeting Australian organisations

AI-driven cyberattacks have surged in Australia, targeting major firms like Qantas and CommBank as attackers exploit browser flaws and stolen credentials.

By Melvin Hipolito • 4 min read • Thu, 9th Oct 2025

Malware

Microsoft & Fortra's joint fight against Cobalt Strike abuse

Microsoft, Fortra, and Health ISAC unite against cybercrime, significantly reducing Cobalt Strike misuse by 80% through international cooperation and proactive strategies.

By Catherine Knowles • 3 min read • Wed, 12th Mar 2025