MISP/misp-galaxy
6
0
Fork 0
mirror of https://github.com/MISP/misp-galaxy.git synced 2024-11-27 01:07:18 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

adding and updating clusters

Browse source
This commit is contained in:
Deborah Servili 2018-09-13 09:03:41 +02:00
parent 039fc91bd6
commit 0843fdfb23
No known key found for this signature in database
GPG key ID: 7E3A832850D4D7D1
2 changed files with 28 additions and 3 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

16
clusters/botnet.json
View file

@ -579,7 +579,8 @@
"meta": { "meta": {
"date": "August 2016", "date": "August 2016",
"refs": [ "refs": [
"https://en.wikipedia.org/wiki/Mirai_(malware)" "https://en.wikipedia.org/wiki/Mirai_(malware)",
"https://researchcenter.paloaltonetworks.com/2018/09/unit42-multi-exploit-iotlinux-botnets-mirai-gafgyt-target-apache-struts-sonicwall/"
] ]
}, },
"related": [ "related": [
@ -800,7 +801,18 @@
}, },
"uuid": "07815089-e2c6-4084-9a62-3ece7210f33f", "uuid": "07815089-e2c6-4084-9a62-3ece7210f33f",
"value": "Bamital" "value": "Bamital"
},
{
"value": "Gafgyt",
"description": "Linux.Gafgyt is a Trojan horse that opens a back door on the compromised computer and steals information. The new Gafgyt version targets a newly disclosed vulnerability affecting older, unsupported versions of SonicWall’s Global Management System (GMS).",
"meta": {
"refs": [
"https://researchcenter.paloaltonetworks.com/2018/09/unit42-multi-exploit-iotlinux-botnets-mirai-gafgyt-target-apache-struts-sonicwall/",
"https://www.symantec.com/security-center/writeup/2014-100222-5658-99"
]
},
"uuid": "40795af6-b721-11e8-9fcb-570c0b384135"
} }
], ],
"version": 9 "version": 10
} }

15
clusters/tool.json
View file

@ -5731,7 +5731,20 @@
] ]
}, },
"uuid": "69ed8a69-8b33-4195-9b21-a1f4cd76acde" "uuid": "69ed8a69-8b33-4195-9b21-a1f4cd76acde"
},
{
"value": "Sirefef",
"description": "This family of malware uses stealth to hide its presence on your PC. Trojans in this family can do different things, including: -Downloading and running other files -Contacting remote hosts -Disabling security features\nMembers of the family can also change search results, which can generate money for the hackers who use Sirefef.",
"meta": {
"refs": [
"https://www.microsoft.com/en-us/wdsi/threats/malware-encyclopedia-description?Name=Win32%2Fsirefef"
],
"synonyms": [
"Win32/Sirefef"
]
},
"uuid": "641464a6-b690-11e8-976e-bffc9a17c6a4"
} }
], ],
"version": 86 "version": 87
} }