MISP/misp-galaxy
6
0
Fork 0
mirror of https://github.com/MISP/misp-galaxy.git synced 2024-11-30 02:37:17 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

[threat-actors] Add CostaRicto

Browse source
This commit is contained in:
Mathieu4141 2023-11-20 09:29:07 -08:00
parent 4c9063b772
commit 00ca4c865f
1 changed files with 11 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
clusters/threat-actor.json
View file

@ -13329,6 +13329,17 @@
}, },
"uuid": "3baec27f-3827-4a38-82c8-7195a18193f9", "uuid": "3baec27f-3827-4a38-82c8-7195a18193f9",
"value": "Storm Cloud" "value": "Storm Cloud"
},
{
"description": "CostaRicto is a cyber-espionage threat actor that operates as a mercenary group, offering its services to various clients globally. They use bespoke malware tools and sophisticated techniques like VPN proxy and SSH tunnelling. While their targets are scattered across different regions, there is a concentration in South Asia.",
"meta": {
"refs": [
"https://blogs.blackberry.com/en/2020/11/the-costaricto-campaign-cyber-espionage-outsourced",
"https://www.cybersecurityintelligence.com/blog/outsourced-cyber-spying-5335.html"
]
},
"uuid": "5587f082-349b-46ab-9e6f-303d9bfd1e1b",
"value": "CostaRicto"
} }
], ],
"version": 294 "version": 294