---
id: 6273
title: "Rare Watermark Links Cobalt Strike 4.10 Team Servers to Ongoing Suspicious Activity"
source_domain: hunt.io
source_url: "https://hunt.io/blog/rare-watermark-links-cobalt-strike-team-servers-to-ongoing-suspicious-activity"
published_at: "2024-12-03T00:00:00Z"
tags: ["threat-hunting", "phishing", "cobalt-strike", "c2-infrastructure", "watermark"]
phying_url: "https://phying.com/item/6273"
lang: en
---

# Rare Watermark Links Cobalt Strike 4.10 Team Servers to Ongoing Suspicious Activity

## Summary

Hunt.io finds Cobalt Strike 4.10 team servers carrying a rare watermark (688983459) seen on only five other IPs, with brand-impersonating domains suggesting phishing-focused operations.

## Intelligence Metadata

- **Sources:** hunt.io
- **Published:** 2024-12-03T00:00:00Z
- **Original:** https://hunt.io/blog/rare-watermark-links-cobalt-strike-team-servers-to-ongoing-suspicious-activity
- **Phying News:** https://phying.com/item/6273