By visiting our site, you agree to our privacy policy regarding cookies, tracking statistics, etc.
Apply now for free support from our Cybersecurity Services Centre
Apply for free cybersecurity support
Attend the Ransomware Defence Summer Bootcamp in Amsterdam, June 2026
Attend our free summer bootcamp on ransomware defence
Enroll in the Foundations of Cybersecurity and AI online live course
Learn online about the foundations of cybersecurity and AI
Older, unlicensed versions of the Cobalt Strike red teaming tool were targeted during a week of action coordinated from Europol’s headquarters between 24 and 28 June.
Cooperation with the private sector was instrumental in the success of this disruptive action.
Throughout the week, law enforcement flagged known IP addresses associated with criminal activity, along with a range of domain names used by criminal groups, for online service providers to disable unlicensed versions of the tool. A total of 690 IP addresses were flagged to online service providers in 27 countries. By the end of the week, 593 of these addresses had been taken down.