Vshell: A Chinese-Language Alternative to Cobalt Strike
A Go-based C2 tool used in threat operations. Learn about its Cobalt Strike parallels, evolution, and threat intelligence insights.**
Topic
Cobalt Strike
5 posts
Recap of a Suspicious Surge in Cobalt Strike
Censys research reveals a massive burst of Cobalt Strike servers across AS138415 and AS133199 in December 2025, linked to suspicious infrastructure and shell companies. Read the full threat intelligence analysis.
Using Cobalt Strike to Find (More) Cobalt Strike
Discover techniques to uncover hidden Cobalt Strike C2 servers by pivoting from known infrastructure using TLS certificates, Censys scan data, and threat intelligence methods.
2025 State of the Internet Report: Open Directories Time to Live
Discover how open directories are used for malicious purposes. Research reveals 50% vanish within a day. Learn why real-time threat intelligence is critical.
2025 State of the Internet: C2 Time to Live
Discover how long Cobalt Strike and Viper C2 servers survive online. Censys threat intelligence reveals TTL lifespans, port trends, and key insights for defenders.