Hackers are turning to the Sliver toolkit as an alternative for Cobalt Strike beacon to launch a variety of attacks including ransomware operations. Sliver has been used in several campaigns aimed at a wide range of organizations, including government, research, telecommunications, and higher education.