THREATOPS

THREAT OPS › Threat News › [Security Blog] StrikeShark Campaign Exploits Known Vulnerabilities to Deploy Cobalt Strike via SharkLoader

[Security Blog] StrikeShark Campaign Exploits Known Vulnerabilities to Deploy Cobalt Strike via SharkLoader

medhkcertPublished 2026-07-15

&lt;p&gt;&lt;img alt=&quot;&quot; class=&quot;respon-img&quot; src=&quot;/preview/f/blog/914525/919292/0p0/c9e5c5a1-5a82-46ee-9ae7-7cf19e60bebb.png&quot; /&gt;&lt;img alt=&quot;&quot; class=&quot;respon-img&quot; src=&quot;/preview/f/blog/914480/919264/700p467/sharkloader-attack-chain.png&quot; style=&quot;height:467px; width:

MITRE ATT&CK techniques

SharepointT1213.002
VulnerabilitiesT1588.006
CredentialsT1589.001
Generative AIAML.T0016.002

Indicators of compromise

CVE-2021-26855cve
CVE-2021-27076cve
CVE-2023-32315cve
CVE-2024-36401cve
CVE-2016-4437cve
CVE-2021-36260cve
CVE-2022-27925cve
CVE-2022-41082cve
CVE-2023-46747cve
CVE-2022-40684cve
CVE-2024-21762cve
CVE-2023-20198cve
CVE-2024-23897cve
CVE-2023-23752cve
CVE-2025-55182cve

Original source: https://www.hkcert.org/blog/strikeshark-campaign-exploits-known-vulnerabilities-to-deploy-cobalt-strike-via-sharkloader