{"id":5940,"date":"2019-12-30T13:21:00","date_gmt":"2019-12-30T13:21:00","guid":{"rendered":"https:\/\/fidelissecurity.com\/?post_type=resources_posts&p=5940"},"modified":"2026-09-13T11:39:04","modified_gmt":"2026-09-13T11:39:04","slug":"cobalt-update","status":"publish","type":"resources_posts","link":"https:\/\/fidelissecurity.com\/es\/resource\/report\/cobalt-update\/","title":{"rendered":"Cobalt Group ThreadKit Update"},"content":{"rendered":"

ThreadKit Malware: New Campaigns by Cobalt Group<\/h2>\n

Fidelis Threat Research analysts have discovered a new version of ThreadKit, malware notorious for its use by the cybercrime organization known as Cobalt Group. This report will provide analysis of a campaign, seen October 30th, utilizing the Cobalt Group malware frameworks.<\/p>\n

Cobalt Group was believed to have suffered a hit earlier this year with the reported arrest of one of its members. After the arrest, the campaigns appear to have slowed significantly however despite this, there has been continued development concerning the group\u2019s malware framework.<\/p>\n","protected":false},"excerpt":{"rendered":"

Discover the latest analysis of Cobalt Group’s ThreadKit malware, detailing its evolution and use in cybercrime campaigns post-arrest.<\/p>\n","protected":false},"featured_media":34257,"template":"","resources_categories":[152,151],"resources_tags":[185],"class_list":["post-5940","resources_posts","type-resources_posts","status-publish","has-post-thumbnail","hentry","resources_categories-fidelis-elevate","resources_categories-fidelis-halo","resources_tags-report"],"acf":[],"yoast_head":"\nCobalt Group Malware: ThreadKit Analysis Report | Fidelis Security<\/title>\n<meta name=\"description\" content=\"Discover the latest analysis of Cobalt Group's ThreadKit malware, detailing its evolution and use in cybercrime campaigns post-arrest.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/fidelissecurity.com\/es\/resource\/report\/cobalt-update\/\" \/>\n<meta property=\"og:locale\" content=\"es_ES\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Cobalt Group Malware: ThreadKit Analysis Report | Fidelis Security\" \/>\n<meta property=\"og:description\" content=\"Discover the latest analysis of Cobalt Group's ThreadKit malware, detailing its evolution and use in cybercrime campaigns post-arrest.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/fidelissecurity.com\/es\/resource\/report\/cobalt-update\/\" \/>\n<meta property=\"og:site_name\" content=\"Fidelis Security\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/fideliscyber\/\" \/>\n<meta property=\"article:modified_time\" content=\"2026-09-13T11:39:04+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/fidelissecurity.com\/wp-content\/uploads\/2024\/11\/threat-hunting-and-ir-with-xdr-featured.webp\" \/>\n\t<meta property=\"og:image:width\" content=\"1000\" \/>\n\t<meta property=\"og:image:height\" content=\"750\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/webp\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:site\" content=\"@FidelisCyber\" \/>\n<meta name=\"twitter:label1\" content=\"Tiempo de lectura\" \/>\n\t<meta name=\"twitter:data1\" content=\"1 minuto\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/fidelissecurity.com\\\/es\\\/resource\\\/report\\\/cobalt-update\\\/\",\"url\":\"https:\\\/\\\/fidelissecurity.com\\\/es\\\/resource\\\/report\\\/cobalt-update\\\/\",\"name\":\"Cobalt Group Malware: ThreadKit Analysis Report | Fidelis Security\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/fidelissecurity.com\\\/es\\\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\\\/\\\/fidelissecurity.com\\\/es\\\/resource\\\/report\\\/cobalt-update\\\/#primaryimage\"},\"image\":{\"@id\":\"https:\\\/\\\/fidelissecurity.com\\\/es\\\/resource\\\/report\\\/cobalt-update\\\/#primaryimage\"},\"thumbnailUrl\":\"https:\\\/\\\/fidelissecurity.com\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/threat-hunting-and-ir-with-xdr-featured.webp\",\"datePublished\":\"2019-12-30T13:21:00+00:00\",\"dateModified\":\"2026-09-13T11:39:04+00:00\",\"description\":\"Discover the latest analysis of Cobalt Group's ThreadKit malware, detailing its evolution and use in cybercrime campaigns post-arrest.\",\"breadcrumb\":{\"@id\":\"https:\\\/\\\/fidelissecurity.com\\\/es\\\/resource\\\/report\\\/cobalt-update\\\/#breadcrumb\"},\"inLanguage\":\"es\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\\\/\\\/fidelissecurity.com\\\/es\\\/resource\\\/report\\\/cobalt-update\\\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/fidelissecurity.com\\\/es\\\/resource\\\/report\\\/cobalt-update\\\/#primaryimage\",\"url\":\"https:\\\/\\\/fidelissecurity.com\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/threat-hunting-and-ir-with-xdr-featured.webp\",\"contentUrl\":\"https:\\\/\\\/fidelissecurity.com\\\/wp-content\\\/uploads\\\/2024\\\/11\\\/threat-hunting-and-ir-with-xdr-featured.webp\",\"width\":1000,\"height\":750,\"caption\":\"threat hunting and ir with xdr featured\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/fidelissecurity.com\\\/es\\\/resource\\\/report\\\/cobalt-update\\\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/fidelissecurity.com\\\/es\\\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Resources Posts\",\"item\":\"https:\\\/\\\/fidelissecurity.com\\\/es\\\/threatgeek\\\/resources_posts\\\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"Report\",\"item\":\"https:\\\/\\\/fidelissecurity.com\\\/threatgeek\\\/resources_tags\\\/report\\\/\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"Cobalt Group ThreadKit Update\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/fidelissecurity.com\\\/es\\\/#website\",\"url\":\"https:\\\/\\\/fidelissecurity.com\\\/es\\\/\",\"name\":\"Fidelis Security\",\"description\":\"Unified Threat Detection and Response Platform\",\"publisher\":{\"@id\":\"https:\\\/\\\/fidelissecurity.com\\\/es\\\/#organization\"},\"alternateName\":\"Fidelis\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\\\/\\\/fidelissecurity.com\\\/es\\\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"es\"},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/fidelissecurity.com\\\/es\\\/#organization\",\"name\":\"Fidelis Security\",\"alternateName\":\"Fidelis\",\"url\":\"https:\\\/\\\/fidelissecurity.com\\\/es\\\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"es\",\"@id\":\"https:\\\/\\\/fidelissecurity.com\\\/es\\\/#\\\/schema\\\/logo\\\/image\\\/\",\"url\":\"https:\\\/\\\/fidelissecurity.com\\\/wp-content\\\/uploads\\\/2024\\\/08\\\/Fidelis-Security-Logo-SVG.svg\",\"contentUrl\":\"https:\\\/\\\/fidelissecurity.com\\\/wp-content\\\/uploads\\\/2024\\\/08\\\/Fidelis-Security-Logo-SVG.svg\",\"width\":500,\"height\":500,\"caption\":\"Fidelis Security\"},\"image\":{\"@id\":\"https:\\\/\\\/fidelissecurity.com\\\/es\\\/#\\\/schema\\\/logo\\\/image\\\/\"},\"sameAs\":[\"https:\\\/\\\/www.facebook.com\\\/fideliscyber\\\/\",\"https:\\\/\\\/x.com\\\/FidelisCyber\",\"https:\\\/\\\/www.linkedin.com\\\/company\\\/fideliscybersecurity\",\"https:\\\/\\\/www.youtube.com\\\/c\\\/FidelisCybersecurity\",\"https:\\\/\\\/www.gartner.com\\\/reviews\\\/market\\\/network-detection-and-response\\\/vendor\\\/fidelis-security\",\"https:\\\/\\\/www.g2.com\\\/sellers\\\/fidelis-cybersecurity#profiles\"]}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Cobalt Group Malware: ThreadKit Analysis Report | Fidelis Security","description":"Discover the latest analysis of Cobalt Group's ThreadKit malware, detailing its evolution and use in cybercrime campaigns post-arrest.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/fidelissecurity.com\/es\/resource\/report\/cobalt-update\/","og_locale":"es_ES","og_type":"article","og_title":"Cobalt Group Malware: ThreadKit Analysis Report | Fidelis Security","og_description":"Discover the latest analysis of Cobalt Group's ThreadKit malware, detailing its evolution and use in cybercrime campaigns post-arrest.","og_url":"https:\/\/fidelissecurity.com\/es\/resource\/report\/cobalt-update\/","og_site_name":"Fidelis Security","article_publisher":"https:\/\/www.facebook.com\/fideliscyber\/","article_modified_time":"2026-09-13T11:39:04+00:00","og_image":[{"width":1000,"height":750,"url":"https:\/\/fidelissecurity.com\/wp-content\/uploads\/2024\/11\/threat-hunting-and-ir-with-xdr-featured.webp","type":"image\/webp"}],"twitter_card":"summary_large_image","twitter_site":"@FidelisCyber","twitter_misc":{"Tiempo de lectura":"1 minuto"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/fidelissecurity.com\/es\/resource\/report\/cobalt-update\/","url":"https:\/\/fidelissecurity.com\/es\/resource\/report\/cobalt-update\/","name":"Cobalt Group Malware: ThreadKit Analysis Report | Fidelis Security","isPartOf":{"@id":"https:\/\/fidelissecurity.com\/es\/#website"},"primaryImageOfPage":{"@id":"https:\/\/fidelissecurity.com\/es\/resource\/report\/cobalt-update\/#primaryimage"},"image":{"@id":"https:\/\/fidelissecurity.com\/es\/resource\/report\/cobalt-update\/#primaryimage"},"thumbnailUrl":"https:\/\/fidelissecurity.com\/wp-content\/uploads\/2024\/11\/threat-hunting-and-ir-with-xdr-featured.webp","datePublished":"2019-12-30T13:21:00+00:00","dateModified":"2026-09-13T11:39:04+00:00","description":"Discover the latest analysis of Cobalt Group's ThreadKit malware, detailing its evolution and use in cybercrime campaigns post-arrest.","breadcrumb":{"@id":"https:\/\/fidelissecurity.com\/es\/resource\/report\/cobalt-update\/#breadcrumb"},"inLanguage":"es","potentialAction":[{"@type":"ReadAction","target":["https:\/\/fidelissecurity.com\/es\/resource\/report\/cobalt-update\/"]}]},{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/fidelissecurity.com\/es\/resource\/report\/cobalt-update\/#primaryimage","url":"https:\/\/fidelissecurity.com\/wp-content\/uploads\/2024\/11\/threat-hunting-and-ir-with-xdr-featured.webp","contentUrl":"https:\/\/fidelissecurity.com\/wp-content\/uploads\/2024\/11\/threat-hunting-and-ir-with-xdr-featured.webp","width":1000,"height":750,"caption":"threat hunting and ir with xdr featured"},{"@type":"BreadcrumbList","@id":"https:\/\/fidelissecurity.com\/es\/resource\/report\/cobalt-update\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/fidelissecurity.com\/es\/"},{"@type":"ListItem","position":2,"name":"Resources Posts","item":"https:\/\/fidelissecurity.com\/es\/threatgeek\/resources_posts\/"},{"@type":"ListItem","position":3,"name":"Report","item":"https:\/\/fidelissecurity.com\/threatgeek\/resources_tags\/report\/"},{"@type":"ListItem","position":4,"name":"Cobalt Group ThreadKit Update"}]},{"@type":"WebSite","@id":"https:\/\/fidelissecurity.com\/es\/#website","url":"https:\/\/fidelissecurity.com\/es\/","name":"Fidelis Security","description":"Unified Threat Detection and Response Platform","publisher":{"@id":"https:\/\/fidelissecurity.com\/es\/#organization"},"alternateName":"Fidelis","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/fidelissecurity.com\/es\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"es"},{"@type":"Organization","@id":"https:\/\/fidelissecurity.com\/es\/#organization","name":"Fidelis Security","alternateName":"Fidelis","url":"https:\/\/fidelissecurity.com\/es\/","logo":{"@type":"ImageObject","inLanguage":"es","@id":"https:\/\/fidelissecurity.com\/es\/#\/schema\/logo\/image\/","url":"https:\/\/fidelissecurity.com\/wp-content\/uploads\/2024\/08\/Fidelis-Security-Logo-SVG.svg","contentUrl":"https:\/\/fidelissecurity.com\/wp-content\/uploads\/2024\/08\/Fidelis-Security-Logo-SVG.svg","width":500,"height":500,"caption":"Fidelis Security"},"image":{"@id":"https:\/\/fidelissecurity.com\/es\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/fideliscyber\/","https:\/\/x.com\/FidelisCyber","https:\/\/www.linkedin.com\/company\/fideliscybersecurity","https:\/\/www.youtube.com\/c\/FidelisCybersecurity","https:\/\/www.gartner.com\/reviews\/market\/network-detection-and-response\/vendor\/fidelis-security","https:\/\/www.g2.com\/sellers\/fidelis-cybersecurity#profiles"]}]}},"_links":{"self":[{"href":"https:\/\/fidelissecurity.com\/es\/wp-json\/wp\/v2\/resources_posts\/5940","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/fidelissecurity.com\/es\/wp-json\/wp\/v2\/resources_posts"}],"about":[{"href":"https:\/\/fidelissecurity.com\/es\/wp-json\/wp\/v2\/types\/resources_posts"}],"version-history":[{"count":1,"href":"https:\/\/fidelissecurity.com\/es\/wp-json\/wp\/v2\/resources_posts\/5940\/revisions"}],"predecessor-version":[{"id":46995,"href":"https:\/\/fidelissecurity.com\/es\/wp-json\/wp\/v2\/resources_posts\/5940\/revisions\/46995"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/fidelissecurity.com\/es\/wp-json\/wp\/v2\/media\/34257"}],"wp:attachment":[{"href":"https:\/\/fidelissecurity.com\/es\/wp-json\/wp\/v2\/media?parent=5940"}],"wp:term":[{"taxonomy":"resources_categories","embeddable":true,"href":"https:\/\/fidelissecurity.com\/es\/wp-json\/wp\/v2\/resources_categories?post=5940"},{"taxonomy":"resources_tags","embeddable":true,"href":"https:\/\/fidelissecurity.com\/es\/wp-json\/wp\/v2\/resources_tags?post=5940"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}