Cobalt Strike: Favorite Tool from APT to Crimeware

Proofpoint · 29 Jun 2021 · github.com · Licence: CC-BY-SA-4.0; sources/annoctr/LICENSE.txt

CVEs this report names

1 CVE

CVE-2017-0199Microsoft Office and WordPad Remote Code Execution Vulnerability
Microsoft · Office and WordPadKEVRansomwarePublic exploitHigh · 7.8T1204.002Malicious File T1203Exploitation for Client Execution12 reports
99.5%Top 0.06%
88.4priority

2017 – [Microsoft Word Intruder Integrates CVE-2017-0199, Utilized by Cobalt Group to Target Financial

None

No passage in this report has been tied to an ATT&CK technique.