Hackers exploit three-year-old Telerik flaws to deploy Cobalt Strike
The threat actor known as Blue Mockingbird has been observed by analysts targeting Telerik UI vulnerabilities to compromise servers, install Cobalt Strike beacons, and mine Monero by hijacking system resources.
Sophos Xmrig Directory Group Policy Objects Gpos Blue Mockingbird Cobalt Strike Blue Mockingbird Active Directory Group Policy Objects
Source: bleepingcomputer.com