Exploit Kit Vulnerability Exposes C2s – Security Byte

Cobalt Strike is an exploit kit, similar to Metasploit but slightly less popular. Months ago, the researchers at Fox-IT noticed that a vulnerability in the exploit kit’s web server allowed them to track malicious command and control (C2) servers. In today’s video, learn more about the vulnerability in this semi-popular exploit kit, and how it allowed researchers to find and track almost 8000 malicious servers.

Episode Runtime: 3:18

Direct YouTube Link: https://www.youtube.com/watch?v=hl-IPYxklyo

EPISODE REFERENCES:

• Vulnerability exposes thousands of malicious C2 servers – ZDNet
• How researchers exploited a Cobolt Strike flaw to track criminals – Fox-IT

—Corey Nachreiner, CISSP (@SecAdept)