MISP/misp-galaxy
6
0
Fork 0
mirror of https://github.com/MISP/misp-galaxy.git synced 2024-11-22 23:07:19 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Add FlexiSPY + jq

Browse source
This commit is contained in:
Deborah Servili 2019-12-05 10:05:21 +01:00
parent a049009453
commit 12530db5a8
No known key found for this signature in database
GPG key ID: 7E3A832850D4D7D1
2 changed files with 80 additions and 60 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

87
clusters/surveillance-vendor.json
View file

@ -9,63 +9,80 @@
"type": "surveillance-vendor",
"uuid": "c3631f86-14f1-11ea-88b0-d37ade2e3f89",
"values": [
{
"value": "Kape Technologies",
"description": "Kape Technologies is better known by the name under which they were formerly incorporated - \"Crossrider\" but make no mistake they are the same company which became notorious as an adware/malware producer. \nKape Technologies was originally known as Crossrider until the name change in 2018. The reason for that was, as CEO Ido Erlichman put it, “strong association to the past activities of the company.” Perhaps that refers to infecting users’ devices with malware and adware, considered “high-risk” by Symantec and Malwarebytes.\nIf that wasn’t enough, Crossrider’s Founder and first CEO Koby Menachemi, was part of Unit 8200 – something that can be called Israel’s NSA. Another key person, Teddy Sagi, who is the main investor in both Crossrider and Kape Technologies, is mentioned in the Panama Papers.",
"meta": {
"refs": [
"https://telegra.ph/Private-Internet-Access-VPN-acquired-by-malware-business-founded-by-former-Israeli-spies-12-01"],
"synonyms": [
"Kape",
"Crossrider"
],
{
"description": "Kape Technologies is better known by the name under which they were formerly incorporated - \"Crossrider\" but make no mistake they are the same company which became notorious as an adware/malware producer. \nKape Technologies was originally known as Crossrider until the name change in 2018. The reason for that was, as CEO Ido Erlichman put it, “strong association to the past activities of the company.” Perhaps that refers to infecting users’ devices with malware and adware, considered “high-risk” by Symantec and Malwarebytes.\nIf that wasn’t enough, Crossrider’s Founder and first CEO Koby Menachemi, was part of Unit 8200 – something that can be called Israel’s NSA. Another key person, Teddy Sagi, who is the main investor in both Crossrider and Kape Technologies, is mentioned in the Panama Papers.",
"meta": {
"official-refs": [
"https://www.kape.com/",
"http://crossrider.com/"
],
"refs": [
"https://telegra.ph/Private-Internet-Access-VPN-acquired-by-malware-business-founded-by-former-Israeli-spies-12-01"
],
"synonyms": [
"Kape",
"Crossrider"
]
}
},
{
"value": "NSO group",
},
"uuid": "e42be649-b098-44c7-9275-5874daf3b81a",
"value": "Kape Technologies"
},
{
"description": "NSO Group Technologies is an Israeli technology firm known for its Pegasus spyware enabling the remote surveillance of smartphones. It was founded in 2010 by Niv Carmi, Omri Lavie, and Shalev Hulio. It reportedly employed almost 500 people as of 2017, and is based in Herzliya, near Tel Aviv.",
"meta": {
"refs": ["https://en.wikipedia.org/wiki/NSO_Group"]
"refs": [
"https://en.wikipedia.org/wiki/NSO_Group"
]
},
"official-refs": ["https://www.nsogroup.com/"]
},
{
"value":"Hacking Team",
"official-refs": [
"https://www.nsogroup.com/"
],
"uuid": "49d8e89f-401d-4d3d-9155-5758a346a4a1",
"value": "NSO group"
},
{
"description": "HackingTeam is a Milan-based information technology company that sells offensive intrusion and surveillance capabilities to governments, law enforcement agencies and corporations. Its \"Remote Control Systems\" enable governments and corporations to monitor the communications of internet users, decipher their encrypted files and emails, record Skype and other Voice over IP communications, and remotely activate microphones and camera on target computers. The company has been criticized for providing these capabilities to governments with poor human rights records, though HackingTeam states that they have the ability to disable their software if it is used unethically. The Italian government has restricted their license to do business with countries outside Europe.\nHackingTeam employs around 40 people in its Italian office, and has subsidiary branches in Annapolis, Washington, D.C., and Singapore. Its products are in use in dozens of countries across six continents.",
"meta": {
"refs":[
"official-refs": [
"http://www.mem3nt0.com/about.php"
],
"refs": [
"https://en.wikipedia.org/wiki/Hacking_Team"
],
"synonyms": [
"Memento Labs"
],
"official-refs":[
"http://www.mem3nt0.com/about.php"
]
}
},
{
"value":"Gamma Group",
},
"uuid": "76c054fd-3f5e-4ea1-ad04-1cffb605c6ed",
"value": "Hacking Team"
},
{
"description": "Gamma Group is an Anglo-German technology company that sells surveillance software to governments and police forces around the world. The company has been strongly criticised by human rights organisations for selling its FinFisher software to undemocratic regimes such as Egypt and Bahrain. ",
"meta": {
"refs":[
"official-refs": [
"https://www.gammagroup.com/",
"https://gamma-international.com/"
],
"refs": [
"https://en.wikipedia.org/wiki/Gamma_Group"
],
"synonyms": [
"Gamma International"
],
"official-refs":[
"https://www.gammagroup.com/",
"https://gamma-international.com/"
]
},
"uuid": "3786c4c1-c2fc-448d-86a2-9473e699d203",
"value": "Gamma Group"
},
{
"description": "Flexispy is an application that can be considered as a trojan, based on Symbian. The program sends all information received and sent from the smartphone to a Flexispy server. It was originally created to protect children and spy on adulterous spouses.",
"meta": {
"official-refs": [
"https://www.flexispy.com/"
]
},
"uuid": "2017228c-57eb-42aa-8397-e88d92d1502e",
"value": "FlexiSPY"
}
}
],
"version": 1
}

9
clusters/tool.json
View file

@ -7889,14 +7889,17 @@
"value": "DePriMon"
},
{
"value": "Private Internet Access",
"description": "Private Internet Access provides state of the art, multi-layered security with advanced privacy protection using VPN tunneling. ",
"meta": {
"refs": [
"https://www.privateinternetaccess.com/"
],
"synonyms": ["PIA"]
}
"synonyms": [
"PIA"
]
},
"uuid": "68cd6cbf-6629-4e02-98b6-128978f44546",
"value": "Private Internet Access"
}
],
"version": 128