Nearly 600 servers that were part of an attack infrastructure linked to the Cobalt Strike and utilized by cybercriminal organizations have been taken out by a coordinated law enforcement operation known as MORPHEUS.
According to Europol, the operation focused on earlier, unlicensed iterations of the Cobalt Strike red teaming architecture between June 24 and June 28.
590 of the 690 IP addresses that were reported as being connected to illegal activities to internet service providers across 27 countries are no longer reachable.
Leading the collaborative effort, which started in 2021, were officials from Australia, Canada, Germany, the Netherlands, Poland, and the United States; further support came from officials in Bulgaria, Estonia, Finland, Lithuania, Japan, and South Korea. The U.K. National Crime Agency (NCA) oversaw the operation read more about Global Police Operation Shuts Down 600 Cybercrime Servers Linked to Cobalt Strike.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions.