---
id: 6280
title: "Tricks, Treats, and Threats: Cobalt Strike & the Goblin Lurking in Plain Sight"
source_domain: hunt.io
source_url: "https://hunt.io/blog/tricks-treats-threats-cobalt-strike-the-goblin-lurking-in-plain-sight"
published_at: "2024-10-31T00:00:00Z"
tags: ["credential-theft", "phishing", "cobalt-strike", "open-directories", "browserghost", "goblin"]
phying_url: "https://phying.com/item/6280"
lang: en
---

# Tricks, Treats, and Threats: Cobalt Strike & the Goblin Lurking in Plain Sight

## Summary

A Halloween-themed open directory on a Hong Kong host exposed Cobalt Strike 4.2, exploit code, the BrowserGhost tool and a Goblin phishing kit aimed at Chinese-speaking education platforms.

## Intelligence Metadata

- **Sources:** hunt.io
- **Published:** 2024-10-31T00:00:00Z
- **Original:** https://hunt.io/blog/tricks-treats-threats-cobalt-strike-the-goblin-lurking-in-plain-sight
- **Phying News:** https://phying.com/item/6280