From 5a077cf838e6c8c9b801797e1f8692027e62a15e Mon Sep 17 00:00:00 2001 From: Nils Kuhnert Date: Thu, 7 Feb 2019 08:26:10 +0100 Subject: [PATCH 1/2] Added Cobalt Spider as Synonym for Cobalt --- clusters/threat-actor.json | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json index ddbc741..fde49b5 100644 --- a/clusters/threat-actor.json +++ b/clusters/threat-actor.json @@ -4124,7 +4124,8 @@ "synonyms": [ "Cobalt group", "Cobalt gang", - "GOLD KINGSWOOD" + "GOLD KINGSWOOD", + "Cobalt Spider" ] }, "uuid": "01967480-c49b-4d4a-a7fa-aef0eaf535fe", From 9778bea81e59a9829216100aadc35ab73b607cdb Mon Sep 17 00:00:00 2001 From: Nils Kuhnert Date: Thu, 7 Feb 2019 08:41:00 +0100 Subject: [PATCH 2/2] Added Cobalt Spider reference --- clusters/threat-actor.json | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json index fde49b5..bc1fced 100644 --- a/clusters/threat-actor.json +++ b/clusters/threat-actor.json @@ -4119,7 +4119,8 @@ "refs": [ "https://www.helpnetsecurity.com/2016/11/22/cobalt-hackers-synchronized-atm-heists/", "https://www.bleepingcomputer.com/news/security/cobalt-hacking-group-tests-banks-in-russia-and-romania/", - "https://www.secureworks.com/blog/cybercriminals-increasingly-trying-to-ensnare-the-big-financial-fish" + "https://www.secureworks.com/blog/cybercriminals-increasingly-trying-to-ensnare-the-big-financial-fish", + "https://www.crowdstrike.com/blog/meet-crowdstrikes-adversary-of-the-month-for-september-cobalt-spider/" ], "synonyms": [ "Cobalt group",