Microsoft Fights Back Against Cybercriminals' Misuse of Security Tools.

Microsoft's Digital Crimes Unit (DCU) has obtained a court order in the US to remove illegal copies of Cobalt Strike, a legitimate post-exploitation tool used for adversary simulation, that have been weaponized by cybercriminals to distribute malware, including ransomware. The misuse of Cobalt Strike has been linked to more than 68 ransomware attacks impacting healthcare organizations in over 19 countries. The goal is to hinder the attacks and force the adversaries to rethink their tactics.