Malicious use of Cobalt Strike down 80% after crackdown, Fortra says

Fortra, Microsoft, Health-ISAC and international law enforcement concluded a multi-year operation (Morpheus) that seized and sinkholed hundreds of IP addresses and domains associated with unauthorized copies of Cobalt Strike, resulting in an estimated 80% drop in illicit copies and reduced dwell time for takedowns; the action disrupted infrastructure commonly abused by ransomware gangs and nation-state threat actors.