Claim

The D.R. Incident INVOLVES Cobalt Strike

A compromised system downloaded Cobalt Strike, and a later Cobalt Strike implant communicated with Conti's command-and-control infrastructure.

Episode
EP 135 — The D.R. Incident
Origin
Explicit
Confidence
99% (extractor score, not a fact score)
Speaker
Jack Rhysider
Attributed source
—

Transcript evidence

“a system did get infected and it reached out to the command and control server to download Cobalt Strike”

Jack Rhysider · offsets 15514–15618

“they now downloaded or installed a second malware, which was a Cobalt Strike implant which was communicating to Conti’s C2”

Omar Avilez · offsets 22416–22538

Read the official transcript

Extraction provenance

Model gpt-5.6-luna · prompt 1.5.19 · schema 1.5.19 · 2026-09-13T07:56:50.306609+00:00

claim:ep135:c02f566d511e