Cobalt Strike

Block This Now: Cobalt Strike and Other Red-Team Tools

Posted on by Admin
Block This Now: Cobalt Strike and Other Red-Team Tools

Application Security , Cybercrime , Cybercrime as-a-service Attackers Keep Wielding Legitimate Tools and ‘Living Off the Land’ Tactics Mathew J. Schwartz (euroinfosec) • December 31, 2021     Attackers continue to use the legitimate Cobalt Strike tool set to target victims. Many attackers – highly skilled or otherwise – employ “living off the land” tactics, which means using legitimate tools or functionality already present in a network to target a victim. Accordingly, organizations need to…

Read More

Mongolian Certification Authority MonPass Breached

Posted on by Admin
Mongolian Certification Authority MonPass Breached

3rd Party Risk Management , Governance & Risk Management , Incident & Breach Response Avast: This Supply Chain Attack Used Cobalt Strike Prajeet Nair (@prajeetspeaks) • July 6, 2021     This bitmap image file was used for a steganography attack on MonPass. (Source: Avast) Researchers at Avast discovered a compromised server belonging to MonPass, a certification authority in Mongolia, that may have been breached eight times. See Also: Live Panel | Zero Trusts Given-…

Read More