Trojan.CobaltStrike
ThreatDown is now the name of the Malwarebytes line of business products. References to Malwarebytes below reflect the amazing technology used to first identify the threat.
Short bio
Trojan.CobaltStrike is Malwarebytes’ detection name for a penetration testing tool which is also used a lot by cyber criminals.
Type of infection
Trojan.CobaltStrike is a paid penetration testing product that allows an attacker to deploy an agent named ‘Beacon’ on the victim machine. Many cybercriminals that operate malware use the Cobalt Strike tool to drop multiple payloads after compromising a network.
Protection
Malwarebytes blocks Trojan.CobaltStrike
Business remediation
How to remove Trojan.CobaltStrike with the Malwarebytes Nebula console
You can use the Malwarebytes Anti-Malware Nebula console to scan endpoints.
Nebula endpoint tasks menu
Choose the Scan + Quarantine option. Afterwards you can check the Detections page to see which threats were found.
On the Quarantine page you can see which threats were quarantined and restore them if necessary.
Home remediation
Malwarebytes can detect and remove Trojan.CobaltStrike without further user interaction.