Back to today’s briefing

Story perspectives

Cobalt Strike Variant Hits 1,000 South Korean Domains

3/19/2025

23 4

Summary

Story summary

A publicly exposed server became a launchpad for a Rust-compiled Windows executable, unleashing a variant of Cobalt Strike on over 1,000 South Korean domains, including government sites. The attackers employed sophisticated tools like SQLMap and Web-SurvivalScan, showcasing advanced evasion tactics. However, the extent of the damage inflicted on the targeted systems is still uncertain.

1 of 1

Story summary

A publicly exposed server became a launchpad for a Rust-compiled Windows executable, unleashing a variant of Cobalt Strike on over 1,000 South Korean domains, including government sites. The attackers employed sophisticated tools like SQLMap and Web-SurvivalScan, showcasing advanced evasion tactics. However, the extent of the damage inflicted on the targeted systems is still uncertain.