MISP/misp-galaxy
6
0
Fork 0
mirror of https://github.com/MISP/misp-galaxy.git synced 2024-11-26 16:57:18 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

fix: [threat-actor] replace aliases -> synonyms + version updated

Browse source
This commit is contained in:
Alexandre Dulaunoy 2023-11-07 16:08:19 +01:00
parent a1f64c63de
commit 32062206be
Signed by: adulau
GPG key ID: 09E2CD4944E6CBCD
1 changed files with 8 additions and 8 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

16
clusters/threat-actor.json
View file

@ -12544,14 +12544,14 @@
{
"description": "Prodaft researchers have published a report on Paperbug, a cyber-espionage campaign carried out by suspected Russian-speaking group Nomadic Octopus and which targeted entities in Tajikistan. According to Prodaft, known compromised victims included high-ranking government officials, telcos, and public service infrastructures. Compromised devices also included OT devices, besides your typical computers, servers, and mobile devices. In typical Prodaft fashion, the company also gained access to one of the group's C&C server backend panels.",
"meta": {
"aliases": [
"Nomadic Octopus"
],
"country": "RU",
"refs": [
"https://securelist.com/octopus-infested-seas-of-central-asia/88200/",
"https://www.prodaft.com/m/reports/PAPERBUG_TLPWHITE-1.pdf",
"https://www.virusbulletin.com/conference/vb2018/abstracts/nomadic-octopus-cyber-espionage-central-asia/"
],
"synonyms": [
"Nomadic Octopus"
]
},
"uuid": "7b227f41-efea-4dc0-8a2a-148893795ce4",
@ -12675,20 +12675,20 @@
{
"description": "TraderTraitor targets blockchain companies through spear-phishing messages. The group sends these messages to employees, particularly those in system administration or software development roles, on various communication platforms, intended to gain access to these start-up and high-tech companies. TraderTraitor may be the work of operators previously responsible for APT38 activity.",
"meta": {
"aliases": [
"Jade Sleet",
"UNC4899"
],
"country": "KP",
"refs": [
"https://www.mandiant.com/resources/blog/north-korea-supply-chain",
"https://us-cert.cisa.gov/ncas/alerts/aa22-108a",
"https://www.mandiant.com/resources/blog/north-korea-cyber-structure-alignment-2023"
],
"synonyms": [
"Jade Sleet",
"UNC4899"
]
},
"uuid": "825abfd9-7238-4438-a9e7-c08791f4df4e",
"value": "TraderTraitor"
}
],
"version": 292
"version": 293
}