Login
From:
The DFIR Report
(Uncensored)
subscribe
Cobalt Strike and a Pair of SOCKS Lead to LockBit Ransomware – The DFIR Report
https://thedfirreport.com/2025/01/27/cobalt-strike-and-a-pair-of-socks-lead-to-lockbit-ransomware/
links
backlinks
Tagged with:
ransomware
lockbit
cobaltstrike
Roast topics
Find topics
Find it!
Key Takeaways This intrusion began with the download and execution of a Cobalt Strike beacon that impersonated a Windows Media Configuration Utility. The threat actor used Rclone to exfiltrate data…
