From 1a706d11eaa6c10b17f51a33a77f14a21e1ef12f Mon Sep 17 00:00:00 2001 From: Mathieu4141 Date: Thu, 9 Jan 2025 03:10:46 -0800 Subject: [PATCH] [threat-actors] Add Natohub --- clusters/threat-actor.json | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json index 65a8ebd..a8ddf4a 100644 --- a/clusters/threat-actor.json +++ b/clusters/threat-actor.json @@ -17624,6 +17624,16 @@ }, "uuid": "fba00660-d18c-4af7-831c-25757e495907", "value": "Wassonite" + }, + { + "description": "Natohub is a hacker who claimed to have stolen 42,000 documents from the UN’s International Civil Aviation Organization and is offering the data for sale on underground forums. The compromised documents allegedly contain personal records of ICAO staff and others associated with the agency. While ICAO is investigating the potential breach, Natohub has also made unverified claims about accessing personal data on thousands of UN delegates. The actor's track record of leaks is limited, raising questions about the credibility of their assertions.", + "meta": { + "refs": [ + "https://cisoseries.com/cyber-security-news-cyber-trust-label-uk-deepfake-laws-treasury-attack-details/" + ] + }, + "uuid": "43e2a6bc-0b62-456a-b5ae-a40770b8b8e1", + "value": "Natohub" } ], "version": 322