Threat actor
Cobalt Group
Tracked by CyberSIXT since 27 Aug 2025
- Articlesall time
- 1
- Articleslast 30 days
- 0
- CVEs exploitedattributed · all time
- 0
- Research reportsall time
- 2
One article so far, 27 Aug 2025. A pattern appears once more outlets cover Cobalt Group.
Names and sources
- Cobalt
- CyberSIXT coverage, Malpedia, MISP Galaxy
- Cobalt Group
- CyberSIXT coverage, Malpedia, MISP Galaxy, MITRE ATT&CK®
- COBALT SPIDER
- Malpedia, MISP Galaxy, MITRE ATT&CK®
- Cobalt Gang
- Malpedia, MISP Galaxy, MITRE ATT&CK®
- G0080
- Malpedia, MISP Galaxy
- GOLD KINGSWOOD
- Malpedia, MISP Galaxy, MITRE ATT&CK®
- Mule Libra
- Malpedia, MISP Galaxy
Malware and tools
MITRE ATT&CK® · G0080 6
MITRE ATT&CK® techniques
34 techniques · 0 tacticsFrom MITRE ATT&CK® · G0080 · showing 12 of 34
Tactics pending refresh 12
- T1021.001
- Remote Desktop Protocol
- T1027.010
- Command Obfuscation
- T1037.001
- Logon Script (Windows)
- T1046
- Network Service Discovery
- T1053.005
- Scheduled Task
- T1055
- Process Injection
- T1059.001
- PowerShell
- T1059.003
- Windows Command Shell
- T1059.005
- Visual Basic
- T1059.007
- JavaScript
- T1068
- Exploitation for Privilege Escalation
- T1070.004
- File Deletion
© 2026 The MITRE Corporation. This work is reproduced and distributed with the permission of The MITRE Corporation. All techniques on MITRE ATT&CK
- When Hackers are Quicker than Antiviruses: Cobalt Group Bypasses Antivirus Protectiongroup-ib.com · first in our coverage