Operation Morpheus Disrupts 593 Cobalt Strike Servers Used for Ransomware

Operation Morpheus was a coordinated international takedown led by Europol/EC3 and the UK NCA (with partners including the FBI, Canada, Germany, Netherlands, Poland, Australia and several private firms) that targeted illegal Cobalt Strike deployments; authorities flagged and disrupted ~593 malicious instances across 30 countries, shared ~1.2 million indicators of compromise and ~730 threat intelligence items, aiming to hinder widespread use of Cobalt Strike in ransomware, data theft, and spear-phishing campaigns.