Microsoft finally received the green light to take offensive measures against cybercriminals abusing their software. Working together with the nonprofit Health Information Sharing and Analysis Center (Health-ISAC) and software maker Fortra, Microsoft’s Digital Crime Unit (DCU) will go after cracked legacy copies of Fortra’s Cobalt Strike which has been abused to wreak havoc on the healthcare industry. Cobalt Strike is an adversary simulator and penetration testing software tool utilized by red teams to proactively find vulnerabilities and prepare for attacks, but cybercriminals have exploited older versions of the software for malicious intents such as distributing malware. Malicious infrastructure hosting Cobalt Strike has been detected in China, the United States, Russia, and other parts of the world, having been linked to sixty-eight (68) ransomware attacks across nineteen (19) countries. After issuing hundreds of Digital Millennium Copyright Act (DMCA) violation notices, this court order finally allows these three (3) entities to collectively pursue cybercriminal servers hosting cracked copies of Cobalt Strike. Microsoft will notify internet service providers (ISPs) and computer emergency readiness teams (CERTs) about command-and-control (C2) servers and other malicious infrastructure leveraging their software in order to take them offline. Disrupting these connections between cybercriminals and infected victim’s computers severs the attackers’ distribution method and effectively disrupts the criminal ecosystem that exploits the companies’ software.