We take this issue very seriously and we absolutely condemn any such illegal use of our technology... [W]e regularly, robustly vet everyone who legitimately purchases Cobalt Strike technology and our code of compliance and ethics is central to our philosophy and sales approach when engaging with new and existing customers. (https://www.cobaltstrike.com/help-corp-compliance-ethics).

However, inevitably there will always be situations where adversaries and attack groups, like Ocean Lotus, utilize our tools illegally to infiltrate a target by obtaining pirated versions of our software...

This is one of the reasons we always recommend layering defenses to neutralize any potential external threats. It is important for organizations and individuals to defend against a broader set of techniques, such as these, used by adversaries whose sophistication continues to evolve at pace.