By visiting our site, you agree to our privacy policy regarding cookies, tracking statistics, etc.
Apply to join the new European Cybersecurity PhD Accelerator. Limited places available now!
Apply to join the new European Cybersecurity PhD Accelerator
Read our new Monthly Cyber & Tech Digest in Substack
Monthly Cyber & Tech Digest now in in Substack
Apply now for free support from our Cybersecurity Services Centre
Apply for free cybersecurity support
Older, unlicensed versions of the Cobalt Strike red teaming tool were targeted during a week of action coordinated from Europol’s headquarters between 24 and 28 June.
Cooperation with the private sector was instrumental in the success of this disruptive action.
Throughout the week, law enforcement flagged known IP addresses associated with criminal activity, along with a range of domain names used by criminal groups, for online service providers to disable unlicensed versions of the tool. A total of 690 IP addresses were flagged to online service providers in 27 countries. By the end of the week, 593 of these addresses had been taken down.