This commit is contained in:
Delta-Sierra 2023-04-19 15:10:25 +02:00
parent ecb7e79a6e
commit 063ac9fc71

View file

@ -343,10 +343,10 @@
}, },
{ {
"meta": { "meta": {
"country": "CN",
"refs": [ "refs": [
"https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide" "https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide"
], ],
"country": "CN",
"synonyms": [ "synonyms": [
"APT41", "APT41",
"BARIUM" "BARIUM"
@ -357,10 +357,10 @@
}, },
{ {
"meta": { "meta": {
"country": "CN",
"refs": [ "refs": [
"https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide" "https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide"
], ],
"country": "CN",
"synonyms": [ "synonyms": [
"CHROMIUM", "CHROMIUM",
"ControlX" "ControlX"
@ -371,10 +371,10 @@
}, },
{ {
"meta": { "meta": {
"country": "CN",
"refs": [ "refs": [
"https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide" "https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide"
], ],
"country": "CN",
"synonyms": [ "synonyms": [
"DEV-0322" "DEV-0322"
] ]
@ -384,10 +384,10 @@
}, },
{ {
"meta": { "meta": {
"country": "CN",
"refs": [ "refs": [
"https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide" "https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide"
], ],
"country": "CN",
"synonyms": [ "synonyms": [
"APT40", "APT40",
"GADOLINIUM", "GADOLINIUM",
@ -401,10 +401,10 @@
}, },
{ {
"meta": { "meta": {
"country": "CN",
"refs": [ "refs": [
"https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide" "https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide"
], ],
"country": "CN",
"synonyms": [ "synonyms": [
"GALLIUM" "GALLIUM"
] ]
@ -414,10 +414,10 @@
}, },
{ {
"meta": { "meta": {
"country": "CN",
"refs": [ "refs": [
"https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide" "https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide"
], ],
"country": "CN",
"synonyms": [ "synonyms": [
"DEV-0234" "DEV-0234"
] ]
@ -427,10 +427,10 @@
}, },
{ {
"meta": { "meta": {
"country": "CN",
"refs": [ "refs": [
"https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide" "https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide"
], ],
"country": "CN",
"synonyms": [ "synonyms": [
"APT5", "APT5",
"Keyhole Panda", "Keyhole Panda",
@ -443,10 +443,10 @@
}, },
{ {
"meta": { "meta": {
"country": "CN",
"refs": [ "refs": [
"https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide" "https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide"
], ],
"country": "CN",
"synonyms": [ "synonyms": [
"APT15", "APT15",
"NICKEL", "NICKEL",
@ -459,10 +459,10 @@
}, },
{ {
"meta": { "meta": {
"country": "CN",
"refs": [ "refs": [
"https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide" "https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide"
], ],
"country": "CN",
"synonyms": [ "synonyms": [
"APT30", "APT30",
"LotusBlossom", "LotusBlossom",
@ -474,10 +474,10 @@
}, },
{ {
"meta": { "meta": {
"country": "CN",
"refs": [ "refs": [
"https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide" "https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide"
], ],
"country": "CN",
"synonyms": [ "synonyms": [
"HAFNIUM" "HAFNIUM"
] ]
@ -487,10 +487,10 @@
}, },
{ {
"meta": { "meta": {
"country": "CN",
"refs": [ "refs": [
"https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide" "https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide"
], ],
"country": "CN",
"synonyms": [ "synonyms": [
"APT31", "APT31",
"ZIRCONIUM" "ZIRCONIUM"
@ -687,10 +687,10 @@
}, },
{ {
"meta": { "meta": {
"country": "IR",
"refs": [ "refs": [
"https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide" "https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide"
], ],
"country": "IR",
"synonyms": [ "synonyms": [
"NEPTUNIUM", "NEPTUNIUM",
"Vice Leaker" "Vice Leaker"
@ -701,10 +701,10 @@
}, },
{ {
"meta": { "meta": {
"country": "IR",
"refs": [ "refs": [
"https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide" "https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide"
], ],
"country": "IR",
"synonyms": [ "synonyms": [
"CURIUM", "CURIUM",
"TA456", "TA456",
@ -716,10 +716,10 @@
}, },
{ {
"meta": { "meta": {
"country": "IR",
"refs": [ "refs": [
"https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide" "https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide"
], ],
"country": "IR",
"synonyms": [ "synonyms": [
"DEV-0228" "DEV-0228"
] ]
@ -729,10 +729,10 @@
}, },
{ {
"meta": { "meta": {
"country": "IR",
"refs": [ "refs": [
"https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide" "https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide"
], ],
"country": "IR",
"synonyms": [ "synonyms": [
"DEV-0343" "DEV-0343"
] ]
@ -742,10 +742,10 @@
}, },
{ {
"meta": { "meta": {
"country": "IR",
"refs": [ "refs": [
"https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide" "https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide"
], ],
"country": "IR",
"synonyms": [ "synonyms": [
"APT34", "APT34",
"Cobalt Gypsy", "Cobalt Gypsy",
@ -758,10 +758,10 @@
}, },
{ {
"meta": { "meta": {
"country": "IR",
"refs": [ "refs": [
"https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide" "https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide"
], ],
"country": "IR",
"synonyms": [ "synonyms": [
"Fox Kitten", "Fox Kitten",
"PioneerKitten", "PioneerKitten",
@ -774,10 +774,10 @@
}, },
{ {
"meta": { "meta": {
"country": "IR",
"refs": [ "refs": [
"https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide" "https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide"
], ],
"country": "IR",
"synonyms": [ "synonyms": [
"MERCURY", "MERCURY",
"MuddyWater", "MuddyWater",
@ -791,10 +791,10 @@
}, },
{ {
"meta": { "meta": {
"country": "IR",
"refs": [ "refs": [
"https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide" "https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide"
], ],
"country": "IR",
"synonyms": [ "synonyms": [
"DEV-0500", "DEV-0500",
"Moses Staff" "Moses Staff"
@ -805,10 +805,10 @@
}, },
{ {
"meta": { "meta": {
"country": "IR",
"refs": [ "refs": [
"https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide" "https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide"
], ],
"country": "IR",
"synonyms": [ "synonyms": [
"APT35", "APT35",
"Charming Kitten", "Charming Kitten",
@ -820,10 +820,10 @@
}, },
{ {
"meta": { "meta": {
"country": "IR",
"refs": [ "refs": [
"https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide" "https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide"
], ],
"country": "IR",
"synonyms": [ "synonyms": [
"APT33", "APT33",
"HOLMIUM", "HOLMIUM",
@ -835,10 +835,10 @@
}, },
{ {
"meta": { "meta": {
"country": "IR",
"refs": [ "refs": [
"https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide" "https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide"
], ],
"country": "IR",
"synonyms": [ "synonyms": [
"AMERICIUM", "AMERICIUM",
"Agrius", "Agrius",
@ -852,10 +852,10 @@
}, },
{ {
"meta": { "meta": {
"country": "IR",
"refs": [ "refs": [
"https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide" "https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide"
], ],
"country": "IR",
"synonyms": [ "synonyms": [
"DEV-0146", "DEV-0146",
"ZeroCleare" "ZeroCleare"
@ -866,10 +866,10 @@
}, },
{ {
"meta": { "meta": {
"country": "IR",
"refs": [ "refs": [
"https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide" "https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide"
], ],
"country": "IR",
"synonyms": [ "synonyms": [
"BOHRIUM" "BOHRIUM"
] ]
@ -879,10 +879,10 @@
}, },
{ {
"meta": { "meta": {
"country": "LB",
"refs": [ "refs": [
"https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide" "https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide"
], ],
"country": "LB",
"synonyms": [ "synonyms": [
"POLONIUM" "POLONIUM"
] ]
@ -892,10 +892,10 @@
}, },
{ {
"meta": { "meta": {
"country": "KP",
"refs": [ "refs": [
"https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide" "https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide"
], ],
"country": "KP",
"synonyms": [ "synonyms": [
"Labyrinth Chollima", "Labyrinth Chollima",
"Lazarus", "Lazarus",
@ -907,10 +907,10 @@
}, },
{ {
"meta": { "meta": {
"country": "KP",
"refs": [ "refs": [
"https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide" "https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide"
], ],
"country": "KP",
"synonyms": [ "synonyms": [
"Kimsuky", "Kimsuky",
"THALLIUM", "THALLIUM",
@ -922,10 +922,10 @@
}, },
{ {
"meta": { "meta": {
"country": "KP",
"refs": [ "refs": [
"https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide" "https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide"
], ],
"country": "KP",
"synonyms": [ "synonyms": [
"Konni", "Konni",
"OSMIUM" "OSMIUM"
@ -936,10 +936,10 @@
}, },
{ {
"meta": { "meta": {
"country": "KP",
"refs": [ "refs": [
"https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide" "https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide"
], ],
"country": "KP",
"synonyms": [ "synonyms": [
"LAWRENCIUM" "LAWRENCIUM"
] ]
@ -949,10 +949,10 @@
}, },
{ {
"meta": { "meta": {
"country": "KP",
"refs": [ "refs": [
"https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide" "https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide"
], ],
"country": "KP",
"synonyms": [ "synonyms": [
"CERIUM" "CERIUM"
] ]
@ -962,10 +962,10 @@
}, },
{ {
"meta": { "meta": {
"country": "KP",
"refs": [ "refs": [
"https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide" "https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide"
], ],
"country": "KP",
"synonyms": [ "synonyms": [
"BlueNoroff", "BlueNoroff",
"COPERNICIUM", "COPERNICIUM",
@ -977,10 +977,10 @@
}, },
{ {
"meta": { "meta": {
"country": "KP",
"refs": [ "refs": [
"https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide" "https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide"
], ],
"country": "KP",
"synonyms": [ "synonyms": [
"DEV-0530", "DEV-0530",
"H0lyGh0st" "H0lyGh0st"
@ -1047,10 +1047,10 @@
}, },
{ {
"meta": { "meta": {
"country": "RU",
"refs": [ "refs": [
"https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide" "https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide"
], ],
"country": "RU",
"synonyms": [ "synonyms": [
"ACTINIUM", "ACTINIUM",
"Gamaredon", "Gamaredon",
@ -1063,10 +1063,10 @@
}, },
{ {
"meta": { "meta": {
"country": "RU",
"refs": [ "refs": [
"https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide" "https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide"
], ],
"country": "RU",
"synonyms": [ "synonyms": [
"DEV-0586" "DEV-0586"
] ]
@ -1076,10 +1076,10 @@
}, },
{ {
"meta": { "meta": {
"country": "RU",
"refs": [ "refs": [
"https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide" "https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide"
], ],
"country": "RU",
"synonyms": [ "synonyms": [
"APT28", "APT28",
"Fancy Bear", "Fancy Bear",
@ -1091,10 +1091,10 @@
}, },
{ {
"meta": { "meta": {
"country": "RU",
"refs": [ "refs": [
"https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide" "https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide"
], ],
"country": "RU",
"synonyms": [ "synonyms": [
"BROMINE", "BROMINE",
"Crouching Yeti", "Crouching Yeti",
@ -1106,10 +1106,10 @@
}, },
{ {
"meta": { "meta": {
"country": "RU",
"refs": [ "refs": [
"https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide" "https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide"
], ],
"country": "RU",
"synonyms": [ "synonyms": [
"APT29", "APT29",
"Cozy Bear", "Cozy Bear",
@ -1121,10 +1121,10 @@
}, },
{ {
"meta": { "meta": {
"country": "RU",
"refs": [ "refs": [
"https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide" "https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide"
], ],
"country": "RU",
"synonyms": [ "synonyms": [
"IRIDIUM", "IRIDIUM",
"Sandworm" "Sandworm"
@ -1135,10 +1135,10 @@
}, },
{ {
"meta": { "meta": {
"country": "RU",
"refs": [ "refs": [
"https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide" "https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide"
], ],
"country": "RU",
"synonyms": [ "synonyms": [
"Callisto", "Callisto",
"Reuse Team", "Reuse Team",
@ -1150,10 +1150,10 @@
}, },
{ {
"meta": { "meta": {
"country": "RU",
"refs": [ "refs": [
"https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide" "https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide"
], ],
"country": "RU",
"synonyms": [ "synonyms": [
"DEV-0665" "DEV-0665"
] ]
@ -1163,10 +1163,10 @@
}, },
{ {
"meta": { "meta": {
"country": "KR",
"refs": [ "refs": [
"https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide" "https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide"
], ],
"country": "KR",
"synonyms": [ "synonyms": [
"DUBNIUM", "DUBNIUM",
"Dark Hotel", "Dark Hotel",
@ -1178,10 +1178,10 @@
}, },
{ {
"meta": { "meta": {
"country": "TR",
"refs": [ "refs": [
"https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide" "https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide"
], ],
"country": "TR",
"synonyms": [ "synonyms": [
"SILICON", "SILICON",
"Sea Turtle" "Sea Turtle"
@ -1192,10 +1192,10 @@
}, },
{ {
"meta": { "meta": {
"country": "VN",
"refs": [ "refs": [
"https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide" "https://learn.microsoft.com/en-us/microsoft-365/security/intelligence/microsoft-threat-actor-naming?view=o365-worldwide"
], ],
"country": "VN",
"synonyms": [ "synonyms": [
"APT32", "APT32",
"BISMUTH", "BISMUTH",