logo

Cybercrime's Cobalt Strike Use Plummets 80% Worldwide

ID: bce47a3c-d2d3-53e4-aa27-f0bc0e4e5922

STIX ID: report--bce47a3c-d2d3-53e4-aa27-f0bc0e4e5922

Feed Name: Dark Reading

Threat Score
75/100

Date Published: 2025-03-07

Date Updated: 2026-04-21

Author: Nate Nelson, Contributing Writer

...
...

The article reports that coordinated legal and technical actions by Fortra, Microsoft DCU, and Health-ISAC have reduced malicious Cobalt Strike instances by approximately 80% through seizure and sinkholing of attacker C2 infrastructure under a court TRO; it details how attackers obtain and distribute cracked copies, links the tool to multiple major ransomware families, and notes takedown limitations and ongoing litigation.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.