article thumbnail

Google provides rules to detect tens of cracked versions of Cobalt Strike

Security Affairs

Cobalt Strike is a paid penetration testing product that allows an attacker to deploy an agent named ‘Beacon’ on the victim machine. Researchers at Google Cloud identified 34 different hacked release versions of the Cobalt Strike tool in the wild.

article thumbnail

How to Stop Ransomware: Breach Prevention vs. Cobalt Strike Backdoor

Security Boulevard

With a year-on-year increase of over 161% , malicious usage of cracked versions of Cobalt Strike (a legitimate penetration test tool) is skyrocketing. Developed in 2012 to give pen testers and red teams the capability to conduct hard-to-spot test attacks, Cobalt Strike is designed to be dynamic and evasive.

Insiders

Sign Up for our Newsletter

This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

article thumbnail

Estonian National charged with helping Russia acquire U.S. hacking tools and electronics

Security Affairs

In 2012, the US government added Shevlyakov to Entity List, a ban list for procuring and delivering export-restricted items to Russia. In May 2020, Shevlyakov used one of his front companies to buy a licensed copy of the penetration testing platform Metasploit Pro. ” continues the press release.

Hacking 88
article thumbnail

DNA testing company fined after customer data theft

Malwarebytes

What happened in the 2021 breach When DDC acquired Orchid Cellmark, a British company also in the DNA testing industry, as part of its business expansion in 2012, the company didn't know that it also inherited legacy databases that kept personally identifiable information (PII) in plain text form.

article thumbnail

Best MSP/MSSP Vulnerability Scanning Tool Options

eSecurity Planet

The following tools provide strong options to support vulnerability scanning and other capabilities and also offer options specifically for service providers: Deployment Options Cloud-based On-Prem Appliance Service Option Carson & SAINT Yes Linux or Windows Yes Yes RapidFire VulScan Hyper-V or VMware Virtual Appliance Hyper-V or VMware Virtual (..)

article thumbnail

A Cobalt Strike flaw exposed attackers’ infrastructure

Security Affairs

According to security experts at Fox-IT, a recently addressed flaw in the Cobalt Strike penetration testing platform could be exploited to identify attacker servers.

article thumbnail

Application Security Testing Evolution and How a Software Bill of Materials Can Help

Veracode Security

Interestingly, a dynamic scan or penetration test of the application would not have found my vulnerability. On the other hand, static application security testing (SAST) or a manual code review would have found it. My first stint at Veracode was in 2012, after six years working as an application security consultant.