Microsoft, Fortra & Health-ISAC Team Up to Remove Illicit Cobalt Strike Tools

The effort aims to disrupt the use of altered Cobalt Strike software by cybercriminals in ransomware and other attacks.

Microsofts Digital Crimes Unit (DCU), security software vendor Fortra, and the Health Information Sharing and Analysis Center (Health-ISAC), have joined forces to remove cracked legacy copies of Cobalt Strike by way of legal and technical action.
Using dated and maliciously altered versions of the Cobalt Strike software, threat actors have targeted healthcare organizations in nearly 70 ransomware attacks in 19 countries.
Cobalt Strike, sold by Fortra, is a reputable and popular post-exploitation security tool, but its older versions have become a
favorite for cybercriminals to employ in nefarious activities
. Pulling these legacy copies globally is a new approach for Microsofts DCU, and its aimed at cutting off the threat at the source: illegal distribution of
compromised, malicious software
.
While this action will impact the criminals immediate operations, we fully anticipate they will attempt to revive their efforts. Our action is therefore not one and done,
Microsoft stated in a blog post
. Through ongoing legal and technical action, Microsoft, Fortra and Health-ISAC, along with our partners, will continue to monitor and take action to disrupt further criminal operations, including the use of cracked copies of Cobalt Strike.

Last News
▸ Some DLP Products Vulnerable to Security Holes ◂ Discovered: 23/12/2024 Category: security	▸ Scan suggests Heartbleed patches may not have been successful. ◂ Discovered: 23/12/2024 Category: security	▸ IoT Devices on Average Have 25 Vulnerabilities ◂ Discovered: 23/12/2024 Category: security

**Cyber Security Categories**
Google Dorks Database	Exploits Vulnerability	Exploit Shellcodes

CVE List

Tools/Apps

News/Aarticles

Phishing Database

Deepfake Detection

Trends/Statistics & Live Infos

Tags:
Microsoft, Fortra & Health-ISAC Team Up to Remove Illicit Cobalt Strike Tools