Malware
Covenant
First seen: 2019-01 • Status: active
Currently Active Threat
Covenant is a free alternative to Cobalt Strike. Hackers use it for controlling compromised computers.
Overview
Covenant is a .NET C2 framework designed as a Cobalt Strike alternative. It is open-source and used by both red teams and attackers.
How It Spreads
- • Post-exploitation deployment
What It Does
- • Command and control
- • .NET payloads
Is your business exposed?
Target Platforms
Windows
Detection Tips
- • Monitor for Covenant signatures
MITRE ATT&CK Techniques
T1071, T1059
If You're Infected
- 1.
Full incident response
Related Malware
Is your business exposed?
Check if your company data is circulating on the dark web
Free scan • No credit card required