MISP/misp-galaxy
6
0
Fork 0
mirror of https://github.com/MISP/misp-galaxy.git synced 2024-11-26 16:57:18 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

[threat-actors] Add AeroBlade

Browse source
This commit is contained in:
Mathieu Beligon 2023-12-06 17:42:33 -08:00
parent 69a94b6c1e
commit 3719022d91
1 changed files with 10 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
clusters/threat-actor.json
View file

@ -13661,6 +13661,16 @@
},
"uuid": "697cb051-5315-4026-bf4c-553b49f817a9",
"value": "UNC2659"
},
{
"description": "AeroBlade is a previously unknown threat actor that has been targeting an aerospace organization in the United States. Their objective appears to be conducting commercial and competitive cyber espionage. They employ spear-phishing as a delivery mechanism, using weaponized documents with embedded remote template injection techniques and malicious VBA macro code. The attacks have been ongoing since September 2022, with multiple phases identified in the attack chain. The origin and precise objective of AeroBlade remain unknown.",
"meta": {
"refs": [
"https://blogs.blackberry.com/en/2023/11/aeroblade-on-the-hunt-targeting-us-aerospace-industry"
]
},
"uuid": "47739f40-c80c-435a-bedc-0d2b38e87ddc",
"value": "AeroBlade"
}
],
"version": 295