update Lazarus group cluster

This commit is contained in:
Deborah Servili 2018-09-20 15:38:32 +02:00
parent 6d43d52731
commit 1cee9d71e0
No known key found for this signature in database
GPG key ID: 7E3A832850D4D7D1

View file

@ -2568,13 +2568,17 @@
"Germany", "Germany",
"Brazil", "Brazil",
"Thailand", "Thailand",
"Australia" "Australia",
"Cryptocurrency exchanges in South Korea"
], ],
"cfr-target-category": [ "cfr-target-category": [
"Government", "Government",
"Private sector" "Private sector"
], ],
"cfr-type-of-incident": "Espionage", "cfr-type-of-incident": [
"Espionage",
"Sabotage"
],
"country": "KP", "country": "KP",
"refs": [ "refs": [
"https://threatpost.com/operation-blockbuster-coalition-ties-destructive-attacks-to-lazarus-group/116422/", "https://threatpost.com/operation-blockbuster-coalition-ties-destructive-attacks-to-lazarus-group/116422/",
@ -2587,7 +2591,8 @@
"https://www.bleepingcomputer.com/news/security/north-korean-hackers-are-up-to-no-good-again/", "https://www.bleepingcomputer.com/news/security/north-korean-hackers-are-up-to-no-good-again/",
"https://www.cfr.org/interactive/cyber-operations/lazarus-group", "https://www.cfr.org/interactive/cyber-operations/lazarus-group",
"https://www.cfr.org/interactive/cyber-operations/operation-ghostsecret", "https://www.cfr.org/interactive/cyber-operations/operation-ghostsecret",
"https://securelist.com/operation-applejeus/87553/" "https://securelist.com/operation-applejeus/87553/",
"https://www.cfr.org/interactive/cyber-operations/compromise-cryptocurrency-exchanges-south-korea"
], ],
"synonyms": [ "synonyms": [
"Operation DarkSeoul", "Operation DarkSeoul",