{"id":677506,"date":"2023-04-07T05:30:05","date_gmt":"2023-04-07T07:30:05","guid":{"rendered":"https:\/\/teknomers.com\/fr\/microsoft-intente-une-action-en-justice-pour-perturber-lutilisation-illegale-de-loutil-cobalt-strike-par-les-cybercriminels\/"},"modified":"2023-04-07T05:30:08","modified_gmt":"2023-04-07T07:30:08","slug":"microsoft-intente-une-action-en-justice-pour-perturber-lutilisation-illegale-de-loutil-cobalt-strike-par-les-cybercriminels","status":"publish","type":"post","link":"https:\/\/teknomers.com\/fr\/microsoft-intente-une-action-en-justice-pour-perturber-lutilisation-illegale-de-loutil-cobalt-strike-par-les-cybercriminels\/","title":{"rendered":"Microsoft intente une action en justice pour perturber l&#8217;utilisation ill\u00e9gale de l&#8217;outil Cobalt Strike par les cybercriminels"},"content":{"rendered":"<p> <br \/>\n<\/p>\n<div>\n<p><span class=\"p-author\"><i class=\"icon-font icon-calendar\">\ue802<\/i><span class=\"author\">07 avril 2023<\/span><i class=\"icon-font icon-user\">\ue804<\/i><span class=\"author\">Ravie Lakshmanan<\/span><\/span><\/p>\n<\/div>\n<div id=\"articlebody\">\n<div class=\"separator\" style=\"clear: both;\"><\/div>\n<p>Microsoft a d\u00e9clar\u00e9 s&#8217;\u00eatre associ\u00e9 \u00e0 Fortra et au Health Information Sharing and Analysis Center (Health-ISAC) pour lutter contre l&#8217;abus de Cobalt Strike par les cybercriminels afin de distribuer des logiciels malveillants, y compris des ransomwares.<\/p>\n<p>\u00c0 cette fin, l&#8217;unit\u00e9 des crimes num\u00e9riques (DCU) du g\u00e9ant de la technologie a r\u00e9v\u00e9l\u00e9 qu&#8217;elle avait obtenu un <a rel=\"nofollow noopener\" href=\"https:\/\/noticeofpleadings.com\/crackedcobaltstrike\/\" target=\"_blank\">ordonnance du tribunal<\/a> aux \u00c9tats-Unis pour &#8220;supprimer les anciennes copies ill\u00e9gales de Cobalt Strike afin qu&#8217;elles ne puissent plus \u00eatre utilis\u00e9es par les cybercriminels&#8221;.<\/p>\n<p>Alors que Cobalt Strike, d\u00e9velopp\u00e9 et maintenu par Fortra (anciennement HelpSystems), est un outil de post-exploitation l\u00e9gitime utilis\u00e9 pour la simulation d&#8217;adversaires, des versions ill\u00e9gales pirat\u00e9es du logiciel ont \u00e9t\u00e9 militaris\u00e9es par des acteurs de la menace au fil des ans.<\/p>\n<p>Les acteurs du ransomware, en particulier, ont tir\u00e9 parti de Cobalt Strike apr\u00e8s avoir obtenu un acc\u00e8s initial \u00e0 un environnement cible pour \u00e9lever les privil\u00e8ges, se d\u00e9placer lat\u00e9ralement sur le r\u00e9seau et d\u00e9ployer des logiciels malveillants de cryptage de fichiers.<\/p>\n<div class=\"separator\" style=\"clear: both;\"><img decoding=\"async\" src=\"https:\/\/teknomers.com\/fr\/wp-content\/uploads\/2023\/04\/1680852605_94_Microsoft-intente-une-action-en-justice-pour-perturber-lutilisation-illegale.png\" alt=\"Frappe de cobalt\" border=\"0\" data-original-height=\"344\" data-original-width=\"728\" title=\"Frappe de cobalt\"\/><\/div>\n<div class=\"separator\" style=\"clear: both;\"><img decoding=\"async\" src=\"https:\/\/teknomers.com\/fr\/wp-content\/uploads\/2023\/04\/1680852605_656_Microsoft-intente-une-action-en-justice-pour-perturber-lutilisation-illegale.png\" alt=\"Frappe de cobalt\" border=\"0\" data-original-height=\"346\" data-original-width=\"728\" title=\"Frappe de cobalt\"\/><\/div>\n<p>&#8220;Les familles de ransomwares associ\u00e9es ou d\u00e9ploy\u00e9es par des copies pirat\u00e9es de Cobalt Strike ont \u00e9t\u00e9 li\u00e9es \u00e0 plus de 68 attaques de ransomwares affectant des organisations de sant\u00e9 dans plus de 19 pays \u00e0 travers le monde&#8221;, a d\u00e9clar\u00e9 Amy Hogan-Burney, directrice g\u00e9n\u00e9rale de DCU, <a rel=\"nofollow noopener\" href=\"https:\/\/blogs.microsoft.com\/on-the-issues\/2023\/04\/06\/stopping-cybercriminals-from-abusing-security-tools\/\" target=\"_blank\">a dit<\/a>.<\/p>\n<p>En perturbant l&#8217;utilisation des copies h\u00e9rit\u00e9es de Cobalt Strike et des logiciels Microsoft compromis, l&#8217;objectif est d&#8217;entraver les attaques et de forcer les adversaires \u00e0 repenser leurs tactiques, a ajout\u00e9 la soci\u00e9t\u00e9. <\/p>\n<div class=\"ad_two clear\" style=\"margin: 20px 10px 30px 0;background: rgb(249 251 255);color: rgb(22, 7, 85);padding: 0px 5%;border: 2px solid rgb(217 222 255);border-radius: 10px;text-align: left;box-shadow: 10px 10px 0 #e2ebff;border-top-left-radius: 50px;border-bottom-right-radius: 50px;\"> <span style=\"font-size:14px;margin:25px 0 0 0;font-weight:900;background: #dbdefc;display:inline-block;padding: 3px 20px;border-radius: 100px;letter-spacing: 0.5px;color: #596cec;\">WEBINAIRE \u00c0 VENIR<\/span><\/p>\n<p>Apprenez \u00e0 s\u00e9curiser le p\u00e9rim\u00e8tre d&#8217;identit\u00e9 &#8211; Strat\u00e9gies \u00e9prouv\u00e9es<\/p>\n<p style=\"text-align:left;font-size:17px;line-height:30px;margin: 10px 0;color: #4e6a8d;\">Am\u00e9liorez la s\u00e9curit\u00e9 de votre entreprise gr\u00e2ce \u00e0 notre prochain webinaire sur la cybers\u00e9curit\u00e9 dirig\u00e9 par des experts\u00a0: Explorez les strat\u00e9gies de p\u00e9rim\u00e8tre d&#8217;identit\u00e9\u00a0!<\/p>\n<p><a rel=\"nofollow noopener\" href=\"https:\/\/thehacker.news\/identity-perimeter?source=inside2\" target=\"_blank\" style=\"padding: 10px 20px;border-radius: 8px;background-color: #4469f5;font-size:16px;display:inline-block;color:#fff;border:0;line-height:inherit;text-decoration:none;cursor:pointer;MARGIN: 10px 0 25px 0;float:left;font-weight:500;letter-spacing: 0.2px;\">Ne manquez rien &#8211; R\u00e9servez votre si\u00e8ge\u00a0!<\/a><\/div>\n<p>Redmond a en outre not\u00e9 l&#8217;utilisation abusive de Cobalt Strike par des groupes d&#8217;\u00c9tats-nations dont les op\u00e9rations s&#8217;alignent sur celles de la Russie, de la Chine, du Vietnam et de l&#8217;Iran, ajoutant qu&#8217;il a d\u00e9tect\u00e9 une infrastructure malveillante h\u00e9bergeant Cobalt Strike \u00e0 travers le monde, en comptant la Chine, les \u00c9tats-Unis et la Russie.<\/p>\n<p>La r\u00e9pression l\u00e9gale intervient des mois apr\u00e8s que Google Cloud a identifi\u00e9 34 versions pirat\u00e9es diff\u00e9rentes de l&#8217;outil Cobalt Strike dans la nature dans le but de &#8220;rendre plus difficile l&#8217;abus par les m\u00e9chants&#8221;.<\/p>\n<p><\/p>\n<div class=\"cf note-b\">Vous avez trouv\u00e9 cet article int\u00e9ressant ?  Suivez-nous sur <a rel=\"nofollow noopener\" href=\"https:\/\/twitter.com\/thehackersnews\" target=\"_blank\">Twitter <i class=\"icon-font icon-twitter\">\uf099<\/i><\/a>  et <a rel=\"nofollow noopener\" href=\"https:\/\/www.linkedin.com\/company\/thehackernews\/\" target=\"_blank\">LinkedIn<\/a> pour lire plus de contenu exclusif que nous publions.<\/div>\n<\/div>\n<p><script async src=\"https:\/\/platform.twitter.com\/widgets.js\" charset=\"utf-8\"><\/script><br \/>\n<br \/><br \/>\n<br \/><a href=\"https:\/\/thehackernews.com\/2023\/04\/microsoft-takes-legal-action-to-disrupt.html\" rel=\"nofollow noopener\" target=\"_blank\">ttn-fr-57<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\ue80207 avril 2023\ue804Ravie Lakshmanan Microsoft a d\u00e9clar\u00e9 s&#8217;\u00eatre associ\u00e9 \u00e0 Fortra et au Health Information Sharing and Analysis Center (Health-ISAC) pour lutter contre l&#8217;abus de Cobalt Strike par les cybercriminels afin de distribuer des logiciels malveillants, y compris des ransomwares. \u00c0 cette fin, l&#8217;unit\u00e9 des crimes num\u00e9riques (DCU) du g\u00e9ant de la technologie a r\u00e9v\u00e9l\u00e9 [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":677507,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[1063,5056,4168,4158,4165,4161,37976,17075,27856,460,4157,4159,4171,4170,65,4167,5665,7953,8362,4160,4163,4162,164,42743,185,4172,4169,8544,196,4166,4164],"class_list":["post-677506","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-technologie","tag-action","tag-cobalt","tag-comment-pirater","tag-cyber-actualites","tag-cyber-attaques","tag-cyber-mises-a-jour","tag-cybercriminels","tag-illegale","tag-intente","tag-justice","tag-lactualite-de-la-cybersecurite","tag-lactualite-de-la-cybersecurite-aujourdhui","tag-lactualite-des-hackers","tag-la-securite-des-informations","tag-les","tag-logiciel-malveillant-de-ransomware","tag-loutil","tag-lutilisation","tag-microsoft","tag-mises-a-jour-de-la-cybersecurite","tag-nouvelles-de-piratage","tag-nouvelles-de-pirates","tag-par","tag-perturber","tag-pour","tag-securite-informatique","tag-securite-internet","tag-strike","tag-une","tag-violation-de-donnees","tag-vulnerabilite-logicielle"],"_links":{"self":[{"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/posts\/677506","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/comments?post=677506"}],"version-history":[{"count":0,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/posts\/677506\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/media\/677507"}],"wp:attachment":[{"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/media?parent=677506"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/categories?post=677506"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/teknomers.com\/fr\/wp-json\/wp\/v2\/tags?post=677506"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}