Date of First Publication: April 06, 2023

Plaintiffs Microsoft Corporation (“Microsoft”), Fortra LLC, and Health-ISAC, Inc. (“H-ISAC”) have sued Defendants John Does 1-16 associated with the IP addresses and domains listed in the documents set forth herein. Plaintiffs allege that Defendants have violated Federal and state law by hosting a cybercriminal operation through these IP addresses and domains, gaining control of their victims’ machines and moving laterally through the connected network to find other victims and install malware subsequently causing unlawful intrusion into Plaintiffs customers’ and member organizations’ computers and computing devices; and intellectual property violations to the injury of Plaintiffs and Plaintiffs’ customers and member organizations. Plaintiffs seek a preliminary injunction directing the hosting companies associated with these IP addresses and domains to take all steps necessary to disable access to and operation of these IP addresses and domains to ensure that changes or access to the IP addresses and domains cannot be made absent a court order and that all content and material associated with these IP addresses and domains are to be isolated and preserved pending resolution of the dispute. Plaintiffs seek a permanent injunction, other equitable relief and damages. Full copies of the pleading documents are available at www.noticeofpleadings.com/crackedcobaltstrike.

NOTICE TO DEFENDANTS: READ THESE PAPERS CAREFULLY! You must “appear” in this case or the other side will win automatically. To “appear” you must file with the court a legal document called a “motion” or “answer.” The “motion” or “answer” must be given to the court clerk or administrator within 21 days of the date of first publication specified herein. It must be in proper form and have proof of service on Microsoft's attorney, Gabriel M. Ramsey at Crowell & Moring, LLP, 3 Embarcadero Center, 26th Floor, San Francisco, CA 94111. If you have questions, you should consult with your own attorney immediately.