TLDR InfoSec · ATTACKS & VULNERABILITIES

SOUTH KOREAN ORGANIZATIONS TARGETED BY COBALT STRIKE ‘CAT' DELIVERED BY A RUST BEACON

hunt.io6 min read

Summary from the TLDR InfoSec newsletter

Researchers found server hosting tools for cyber attacks on South Korean entities, notably using Cobalt Strike Cat. The attacker targeted government and commercial organizations with open-source tools like SQLMap and Web-SurvivalScan. The malware campaign utilized Rust-compiled loaders and a modified Cobalt Strike for post-exploitation.