Cobalt: tactics and tools update

PT ESC analysis of the Cobalt group documents active targeted campaigns against financial institutions and details technical analysis of their tooling (CobInt, COM-DLL-Dropper, more_eggs), delivery methods (fake ECB phishing site, malicious VHD attachments, Excel 4.0 macros), advanced obfuscation/encryption and anti-analysis techniques, persistence and C2 mechanisms, and provides IoCs (domains, IPs, file hashes) and mapped MITRE TTPs for detection and mitigation.