MALWARE-CNC Win.Trojan.CobaltStrike CNC outbound connection

IPS-SWG

1 SID: 63772

Description

Detects command and control traffic from a compromised host tied to the Win.Trojan.CobaltStrike post-exploitation framework.

Related malware families

Related blogs

RedTiger: New Red Teaming Tool in the Wild Targeting Gamers and Discord Accounts

RedTiger: New Red Teaming Tool in the Wild Targeting Gamers and Discord Accounts

October 23, 202510 min read

New DOGE Big Balls Ransomware Tools in the Wild

New DOGE Big Balls Ransomware Tools in the Wild

May 7, 20259 min read

Analyzing Elysium, a Variant of the Ghost (Cring) Ransomware Family

Analyzing Elysium, a Variant of the Ghost (Cring) Ransomware Family

March 11, 20254 min read

New Bumblebee Loader Infection Chain Signals Possible Resurgence

New Bumblebee Loader Infection Chain Signals Possible Resurgence

October 18, 20244 min read

DCRat Targets Users with HTML Smuggling

DCRat Targets Users with HTML Smuggling

September 26, 20245 min read

Netskope Threat Coverage: Microsoft Quick Assist Ransomware Attacks

Netskope Threat Coverage: Microsoft Quick Assist Ransomware Attacks

May 21, 20241 min read

Netskope Threat Labs Stats for December 2023

January 22, 20245 min read

New DarkGate Variant Uses a New Loading Approach

New DarkGate Variant Uses a New Loading Approach

November 1, 20236 min read

Threat Labs News Roundup: April 2023

May 8, 20234 min read

Netskope Threat Coverage: Apache Log4j RCE (CVE-2021-44228)

Netskope Threat Coverage: Apache Log4j RCE (CVE-2021-44228)

December 13, 20213 min read