MISP/misp-galaxy
6
0
Fork 0
mirror of https://github.com/MISP/misp-galaxy.git synced 2024-11-26 16:57:18 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Merge pull request #637 from sebdraven/main

Browse source 
Add RedEcho Threat Actor
This commit is contained in:
Alexandre Dulaunoy 2021-03-30 13:59:44 +02:00 committed by GitHub
commit 0fa78c6543
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 11 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
clusters/threat-actor.json
View file

@ -8501,6 +8501,17 @@
},
"uuid": "4f05d6c1-3fc1-4567-91cd-dd4637cc38b5",
"value": "HAFNIUM"
},
{
"description": "RedEcho: The group made heavy use of AXIOMATICASYMPTOTE — a term we use to track infrastructure that comprises ShadowPad C2s, which is shared between several Chinese threat activity groups",
"meta": {
"refs": [
"https://www.recordedfuture.com/redecho-targeting-indian-power-sector/",
"https://therecord.media/redecho-group-parks-domains-after-public-exposure/"
]
},
"uuid": "986fcc3f-5f36-4975-bf5f-c42524466bbd",
"value": "RedEcho"
}
],
"version": 199