What Is the New Cobalt Strike?

Black Boss said they started seeing cracked versions of the software in June or July. It's very possible, and this is purely conjecture, that the Quackbot that they were using was designed to be used with brute retail. The data within the payload looks very, very suspicious and it will happen to go to an IP address in Miami.