Cybercriminals Lose: 80% Fewer Unauthorized Cobalt Strikes

Summary: A coalition led by Microsoft’s Digital Crimes Unit, Fortra, and Health-ISAC has successfully reduced the availability of unauthorized Cobalt Strike copies by 80%, curtailing cybercriminal activities, especially in the healthcare sector. This unprecedented reduction was achieved through a combination of legal and technical strategies including Operation MORPHEUS, which flagged and took down numerous malicious IP addresses globally. Ongoing efforts to bolster security controls and enhance reaction times continue to be a priority for Fortra and its partners.

Affected: Cybersecurity, Healthcare Sector

Keypoints :

• 80% reduction in unauthorized Cobalt Strike copies observed since 2023.
• Operation MORPHEUS led to the flagging of 690 IP addresses and the takedown of 593 malicious addresses across 27 countries.
• Average dwell time between detection and takedown has been reduced to less than one week in the U.S. and less than two weeks worldwide.
• Fortra is committed to continuous takedown efforts, monitoring, and developing regulations for cyber intrusion tools.
• Collaboration among organizations is highlighted as essential for advancing overall cybersecurity.