MISP/misp-galaxy
6
0
Fork 0
mirror of https://github.com/MISP/misp-galaxy.git synced 2024-11-30 02:37:17 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Merge pull request #303 from Delta-Sierra/master

Browse source 
add several references for Emotet and others
This commit is contained in:
Deborah Servili 2018-11-22 09:05:55 +01:00 committed by GitHub
commit 2612eb5437
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
3 changed files with 17 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
clusters/banker.json
View file

@ -379,7 +379,8 @@
"https://blog.malwarebytes.com/threat-analysis/2016/10/trick-bot-dyrezas-successor/", "https://blog.malwarebytes.com/threat-analysis/2016/10/trick-bot-dyrezas-successor/",
"https://blog.malwarebytes.com/threat-analysis/2017/08/trickbot-comes-with-new-tricks-attacking-outlook-and-browsing-data/", "https://blog.malwarebytes.com/threat-analysis/2017/08/trickbot-comes-with-new-tricks-attacking-outlook-and-browsing-data/",
"http://www.pwc.co.uk/issues/cyber-security-data-privacy/research/trickbots-bag-of-tricks.html", "http://www.pwc.co.uk/issues/cyber-security-data-privacy/research/trickbots-bag-of-tricks.html",
"https://www.flashpoint-intel.com/blog/new-version-trickbot-adds-worm-propagation-module/" "https://www.flashpoint-intel.com/blog/new-version-trickbot-adds-worm-propagation-module/",
"https://www.bleepingcomputer.com/news/security/trickbot-banking-trojan-starts-stealing-windows-problem-history/"
], ],
"synonyms": [ "synonyms": [
"Trickster", "Trickster",
@ -477,7 +478,11 @@
"date": "Discovered ~Summer 2014", "date": "Discovered ~Summer 2014",
"refs": [ "refs": [
"https://feodotracker.abuse.ch/", "https://feodotracker.abuse.ch/",
"http://blog.trendmicro.com/trendlabs-security-intelligence/new-banking-malware-uses-network-sniffing-for-data-theft/" "http://blog.trendmicro.com/trendlabs-security-intelligence/new-banking-malware-uses-network-sniffing-for-data-theft/",
"https://www.bleepingcomputer.com/news/security/emotet-banking-trojan-loves-usa-internet-providers/",
"https://www.bleepingcomputer.com/news/security/emotet-returns-with-thanksgiving-theme-and-better-phishing-tricks/",
"https://www.forcepoint.com/blog/security-labs/thanks-giving-emotet",
"https://cofense.com/major-us-financial-institutions-imitated-advanced-geodo-emotet-phishing-lures-appear-authentic-containing-proofpoint-url-wrapped-links/"
], ],
"synonyms": [ "synonyms": [
"Feodo Version C", "Feodo Version C",
@ -1176,5 +1181,5 @@
"value": "CamuBot" "value": "CamuBot"
} }
], ],
"version": 15 "version": 16
} }

6
clusters/threat-actor.json
View file

@ -5921,7 +5921,9 @@
"refs": [ "refs": [
"https://www.bleepingcomputer.com/news/security/british-airways-fell-victim-to-card-scraping-attack/", "https://www.bleepingcomputer.com/news/security/british-airways-fell-victim-to-card-scraping-attack/",
"https://www.bleepingcomputer.com/news/security/feedify-hacked-with-magecart-information-stealing-script/", "https://www.bleepingcomputer.com/news/security/feedify-hacked-with-magecart-information-stealing-script/",
"https://www.bleepingcomputer.com/news/security/magecart-group-compromises-plugin-used-in-thousands-of-stores-makes-rookie-mistake/" "https://www.bleepingcomputer.com/news/security/magecart-group-compromises-plugin-used-in-thousands-of-stores-makes-rookie-mistake/",
"https://www.bleepingcomputer.com/news/security/visiondirect-data-breach-caused-by-magecart-attack/",
"https://www.bleepingcomputer.com/news/security/magecart-group-sabotages-rival-to-ruin-data-and-reputation/"
] ]
}, },
"uuid": "0768fd50-c547-11e8-9aa5-776183769eab", "uuid": "0768fd50-c547-11e8-9aa5-776183769eab",
@ -6027,5 +6029,5 @@
"value": "INDRIK SPIDER" "value": "INDRIK SPIDER"
} }
], ],
"version": 79 "version": 80
} }

7
clusters/tool.json
View file

@ -1994,7 +1994,10 @@
{ {
"meta": { "meta": {
"refs": [ "refs": [
"https://securelist.com/analysis/publications/69560/the-banking-trojan-emotet-detailed-analysis/" "https://securelist.com/analysis/publications/69560/the-banking-trojan-emotet-detailed-analysis/",
"https://www.forcepoint.com/blog/security-labs/thanks-giving-emotet",
"https://www.bleepingcomputer.com/news/security/emotet-returns-with-thanksgiving-theme-and-better-phishing-tricks/",
"https://cofense.com/major-us-financial-institutions-imitated-advanced-geodo-emotet-phishing-lures-appear-authentic-containing-proofpoint-url-wrapped-links/"
], ],
"synonyms": [ "synonyms": [
"Geodo" "Geodo"
@ -7404,5 +7407,5 @@
"value": "China Chopper" "value": "China Chopper"
} }
], ],
"version": 100 "version": 101
} }