cobalt strike – Page 2 – Computer Security Articles

A vulnerability in Atlassian Confluence was found by performing an incident response investigation on a compromised server. The vulnerability is not yet patched.

The post [updated]Unpatched Atlassian Confluence vulnerability is actively exploited appeared first on Malwarebytes Labs.

MalwareBytes Security

Unpatched Atlassian Confluence vulnerability is actively exploited

June 3, 2022 admin atlassian, behinder, China Chopper, cobalt strike, confluence, cve-2022-26134, Exploits and vulnerabilities, Meterpreter, Web Shell

Credit to Author: Pieter Arntz| Date: Fri, 03 Jun 2022 14:41:58 +0000

A vulnerability in Atlassian Confluence was found by performing an incident response investigation on a compromised server. The vulnerability is not yet patched.

The post Unpatched Atlassian Confluence vulnerability is actively exploited appeared first on Malwarebytes Labs.

Independent Krebs

Conti Ransomware Group Diaries, Part III: Weaponry

March 4, 2022 admin A Little Sunshine, alarm, bentley, bio, bloodrush, chainalysis, cobalt strike, conti, grant, kaktus, lemans corporation, Ne'er-Do-Well News, pin, ransomware, reshaev, revers, salamandra, skippy, the spaniard, tramp, trickbotleaks, Trump

Credit to Author: BrianKrebs| Date: Fri, 04 Mar 2022 20:20:29 +0000

Part I of this series examined newly-leaked internal chats from the Conti ransomware group, and how the crime gang dealt with its own internal breaches. Part II explored what it’s like to be an employee of Conti’s sprawling organization. Today’s Part III looks at how Conti abused a panoply of popular commercial security services to undermine the security of their targets, as well as how the team’s leaders strategized for the upper hand in ransom negotiations with victims.

Security Sophos

Conti and Karma actors attack healthcare provider at same time through ProxyShell exploits

February 28, 2022 admin bazar, cobalt strike, conti, Featured, karma, proxyshell, ransomware, SophosLabs Uncut, threat research

Credit to Author: gallagherseanm| Date: Mon, 28 Feb 2022 12:30:19 +0000

An unpatched Microsoft Exchange Server let both ransomware actors in; Karma just stole data, while Conti encrypted.

Security Sophos

How I learned to stop worrying and love ‘grey hat’ tools

February 25, 2020 admin cobalt strike, empire, evasion, hercules, hydra thc, kali, koadic, metasploit, nishang, Phantom, Powershell, shelter, SophosLabs Uncut, thefatrat, veilevasion

Credit to Author: Tad Heppner| Date: Tue, 25 Feb 2020 13:45:19 +0000

A comprehensive security solution needs a sense of subtlety: not all machine code lends itself to be classified easily as malicious. As with most things in life, there’s a grey area in malware detection that includes hacking tools, poorly designed or easily exploitable applications, or borderline adware that provides little benefit to the unfortunate user […]<img src=”http://feeds.feedburner.com/~r/sophos/dgdY/~4/TR1pieWZO1k” height=”1″ width=”1″ alt=””/>