MISP/misp-galaxy
6
0
Fork 0
mirror of https://github.com/MISP/misp-galaxy.git synced 2024-11-26 08:47:18 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

[threat-actors] Add Webworm

Browse source
This commit is contained in:
Mathieu4141 2023-11-20 09:29:05 -08:00
parent 32a78f3d26
commit 2ac369ac61
1 changed files with 16 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

16
clusters/threat-actor.json
View file

@ -13248,6 +13248,22 @@
}, },
"uuid": "a413c605-0e0a-41ca-bae2-5623908fda3a", "uuid": "a413c605-0e0a-41ca-bae2-5623908fda3a",
"value": "PerSwaysion" "value": "PerSwaysion"
},
{
"description": "Space Pirates is a cybercrime group that has been active since at least 2017. They primarily target Russian companies and have been observed using various malware, including Deed RAT and ShadowPad. The group uses a combination of publicly available tools and their own protocols to communicate with their command-and-control servers.",
"meta": {
"country": "CN",
"refs": [
"http://symantec-enterprise-blogs.security.com/blogs/threat-intelligence/webworm-espionage-rats",
"https://www.ptsecurity.com/ww-en/analytics/pt-esc-threat-intelligence/space-pirates-a-look-into-the-group-s-unconventional-techniques-new-attack-vectors-and-tools/",
"https://blog.polyswarm.io/space-pirates-target-russian-aerospace"
],
"synonyms": [
"Space Pirates"
]
},
"uuid": "ee306b4d-1b2b-4872-a8f1-d07e7fbab2f0",
"value": "Webworm"
} }
], ],
"version": 294 "version": 294