MALWARE-CNC Cobalt Strike amazon.db.search traffic detected

IPS-SWG

1 SID: 150727

Stats

First seen: February 2024
Last seen: March 2025

Description

Detects malicious activity tied to the Cobalt Strike amazon.db.search post-exploitation framework.

Related malware families

Related blogs

RedTiger: New Red Teaming Tool in the Wild Targeting Gamers and Discord Accounts

RedTiger: New Red Teaming Tool in the Wild Targeting Gamers and Discord Accounts

October 23, 202510 min read

New DOGE Big Balls Ransomware Tools in the Wild

New DOGE Big Balls Ransomware Tools in the Wild

May 7, 20259 min read

Analyzing Elysium, a Variant of the Ghost (Cring) Ransomware Family

Analyzing Elysium, a Variant of the Ghost (Cring) Ransomware Family

March 11, 20254 min read

New Bumblebee Loader Infection Chain Signals Possible Resurgence

New Bumblebee Loader Infection Chain Signals Possible Resurgence

October 18, 20244 min read

DCRat Targets Users with HTML Smuggling

DCRat Targets Users with HTML Smuggling

September 26, 20245 min read

Netskope Threat Coverage: Microsoft Quick Assist Ransomware Attacks

Netskope Threat Coverage: Microsoft Quick Assist Ransomware Attacks

May 21, 20241 min read

Netskope Threat Labs Stats for December 2023

January 22, 20245 min read

New DarkGate Variant Uses a New Loading Approach

New DarkGate Variant Uses a New Loading Approach

November 1, 20236 min read

Threat Labs News Roundup: April 2023

May 8, 20234 min read

Threat Labs News Roundup: February 2023

March 7, 20234 min read