Cobalt Strike and a Pair of SOCKS Lead to LockBit Ransomware

Author(s): MittenSec, MyDFIR, r3nzsec
Organization: The DFIR Report

Open article directly Open article on Archive.org

2025-05-19 ⋅ The DFIR Report ⋅ 0xtornado, pcsc0ut, Randy Pargman
Another Confluence Bites the Dust: Falling to ELPACO-team Ransomware
Mimic Ransomware MimiKatz

2024-09-30 ⋅ The DFIR Report ⋅ The DFIR Report
Nitrogen Campaign Drops Sliver and Ends With BlackCat Ransomware
BlackCat Nitrogen Loader Sliver

2024-08-26 ⋅ The DFIR Report ⋅ The DFIR Report
BlackSuit Ransomware
BlackSuit Cobalt Strike SystemBC

Propose Change Cobalt Strike and a Pair of SOCKS Lead to LockBit Ransomware