ThreatDown
Get a demo
  • Nebula support
  • OneView support
  • Nebula sign in
  • OneView sign in
  • Partner Portal sign in
ThreatDown
  • Products

  • Endpoint Detection & Response (EDR)
  • Identity Threat Detection & Response (ITDR)
  • Endpoint Protection
  • Vulnerability Assessment
  • Patch Management
  • Application Block
  • DNS Filtering
  • Mobile Security
  • Email Security
  • Services

  • Managed Detection & Response (MDR)
  • Managed Threat Hunting
  • Premium Support
  • Features

  • Browser Phishing Protection
  • Firewall Management
  • Security Advisor
  • Platforms

  • Nebula
  • Manage your organization’s endpoint security in a single-tenant console

    Nebula customer sign in >

  • OneView
  • Provides MSPs centralized visibility and management capabilities across customer sites

    OneView customer sign in >

  • Explore Partnerships
  • Review program benefits, innovative technology, channel first mentality

  • Managed Service Providers
  • Everything MSPs need to run their business seamlessly

  • Technology Partners
  • Explore our technology integrations

  • Resellers
  • Build growth, profitability, and customer loyalty

  • Retain and grow your business with tools, education, and support in the partner experience center.

    Sign in to PXC >

  • Find a partner
  • Threat Center
  • Learn about the latest threat news

  • Reports
  • Threat Detections
  • Executive POV
  • Glossary
  • Blog
  • Resource Center
  • Learn more about ThreatDown

  • ThreatDown News
  • Case Studies
  • Reviews
  • Cybersecurity Tips & Tricks
  • Webinars
  • The real cost of DIY security

    Building an internal SOC is expensive.
    Leaving your business exposed is far worse.

    abstract promo graphic

    Discover how much risk you’re carrying and what 24/7 MDR protection can save you.

    Calculate your investment >

  • Why ThreatDown

  • About Us
  • ThreatDown vs. Competition
  • Case Studies
  • ThreatDown named Product of the Year by MRG Effitas.

    Learn more >

Pricing
Get a demo
Home > Blog

Cobalt Strike

Powershell

How the Black Basta ransomware gang hides Cobalt Strike beacons with PowerShell

Ransomware gangs love PowerShell.
4 minutes
Cobalt Strike

Law enforcement takes out hundreds of malicious Cobalt Strike servers

International law enforcement agencies have revealed a three-year operation to combat Cobalt Strike servers used by cybercriminals.
1 minute
Word document

GrimResource MSC attack uses 5-year-old vulnerability

Cybercriminals' search for an alternative to Office macros has brought them to MSC files used by the Microsoft Management Console.
2 minutes
file transfer illustration

Update now! GoAnywhere MFT zero-day patched

2 minutes
man holding a finger across his lips

Silence is golden partner for Truebot and Clop ransomware

3 minutes
Cobalt Strikes again: UAC-0056 continues to target Ukraine in its latest campaign

Cobalt Strikes again: UAC-0056 continues to target Ukraine in its latest campaign

7 minutes
Unpatched Atlassian Confluence vulnerability is actively exploited

[updated]Unpatched Atlassian Confluence vulnerability is actively exploited

4 minutes
A multi-stage PowerShell based attack targets Kazakhstan

A multi-stage PowerShell based attack targets Kazakhstan

5 minutes
Multi-stage APT attack drops Cobalt Strike using Malleable C2 feature

Multi-stage APT attack drops Cobalt Strike using Malleable C2 feature

69 minutes

Categories

Breaches
Product News
Ransomware
Threat Intelligence
Vulnerabilities
LinkedIn
X
YouTube
Facebook
ThreatDown

Products & Services

Endpoint Detection & Response
Endpoint Protection
Managed Detection & Response
Pricing

Partners

MSP Partner Program
Reseller Partner Program
Technology Partners
Become a Partner

Managed Services Terms & Conditions

Managed Service Terms
MTH Service Description
MDR Service Description

Resources

Threat Center
Resource Center
Blog
Glossary

Support

Nebula Support
OneView Support

Company

About Us
Press
Careers

Privacy and Consent

My Privacy Choices

Get in Touch

Contact Us
Schedule a Meeting
Request a Demo

ThreatDown Newsletter

LinkedIn
X
YouTube
Facebook
Read ThreatDown reviews on G2
  • Legal
  • Privacy
  • Terms of Service
  • Accessibility
  • Vulnerability Disclosure
  • © 2026 All Rights Reserved