Cobalt Strike is quietly distributed through 3 new loaders
Palo Alto Unit 42 researchers have described 3 new Cobalt Strike loaders, each of which loads different types of implants - SMB Beacon, DLL Beacon and Cobalt Strike Stager.SMB Beacon (KoboldLoader)To bypass sandboxes that only hook high-level user-mode functions, it calls built-in API functions. To...