ShellCodeX Intelligence Brief
HIGH
Cybersecurity
SharkLoader campaign delivers Cobalt Strike Beacon via StrikeShark attacks
Source headline: New SharkLoader Malware Deploys Cobalt Strike in StrikeShark Cyberattacks
Threat level
High
Signal strength
75/100
Source confidence
1 source
Published
2 hours ago
Intelligence Summary
Kaspersky observed a targeted intrusion campaign it tracks as StrikeShark. The activity uses an undocumented loader malware family called SharkLoader. Compromised systems are staged to deploy Cobalt Strike Beacon payloads. The reported targets include a diplomatic organization in Indonesia and government entities in Taiwan. This matters because Cobalt Strike is commonly used for follow-on intrusion, persistence, and command-and-control. Organizations should hunt for SharkLoader indicators and monitor for Cobalt Strike Beacon behavior across endpoints.
Recommended Action
Review affected assets, schedule urgent remediation, and monitor related indicators.
Topics
Original reporting
The Hacker News
New SharkLoader Malware Deploys Cobalt Strike in StrikeShark Cyberattacks
Open original source