MISP/misp-galaxy
6
0
Fork 0
mirror of https://github.com/MISP/misp-galaxy.git synced 2024-11-30 02:37:17 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

chg: [threat-actor] added Curious Gorge

Browse source
This commit is contained in:
Rony 2022-05-07 12:40:35 +05:30 committed by GitHub
parent a315483a22
commit 11eca69ebc
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 26 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

27
clusters/threat-actor.json
View file

@ -9198,7 +9198,32 @@
}, },
"uuid": "bee8b09c-07e5-4c12-94d6-266ebcb1ec24", "uuid": "bee8b09c-07e5-4c12-94d6-266ebcb1ec24",
"value": "UNC3524" "value": "UNC3524"
},
{
"description": "Curious Gorge, a group TAG attributes to China's PLA SSF, has conducted campaigns against government and military organizations in Ukraine, Russia, Kazakhstan, and Mongolia. The actor has remained active against government, military, logistics and manufacturing organizations in Ukraine, Russia and Central Asia. In Russia, long running campaigns against multiple government organizations have continued, including the Ministry of Foreign Affairs. Over the past week, TAG identified additional compromises impacting multiple Russian defense contractors and manufacturers and a Russian logistics company.",
"meta": {
"cfr-suspected-victims":[
"Ukraine",
"Russia",
"Kazakhstan",
"Mongolia"
],
"cfr-target-category": [
"Government",
"Military",
"Logistics",
"Defense Contractor"
],
"cfr-type-of-incident": "Espionage",
"country": "CN",
"refs": [
"https://blog.google/threat-analysis-group/tracking-cyber-activity-eastern-europe",
"https://blog.google/threat-analysis-group/update-on-cyber-activity-in-eastern-europe/"
]
},
"uuid": "6ee284d9-2742-4468-851c-a61366cc9a20",
"value": "Curious Gorge"
} }
], ],
"version": 221 "version": 222
} }