From 4699f65425d3fcbe32a4729f41a5e76a565272a0 Mon Sep 17 00:00:00 2001
From: Mathieu4141 <mathieu@feedly.com>
Date: Mon, 5 Feb 2024 03:39:17 -0800
Subject: [PATCH] [threat-actors] Add TA2719

---
 clusters/threat-actor.json | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 1d2bc72..2492f2e 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -14774,6 +14774,16 @@
       },
       "uuid": "625c3fb4-16fc-4992-9ff2-4fad869750ac",
       "value": "TA2722"
+    },
+    {
+      "description": "In late March 2020, Proofpoint researchers began tracking a new actor with a penchant for using NanoCore and later AsyncRAT, popular commodity remote access trojans (RATs). Dubbed TA2719 by Proofpoint, the actor uses localized lures with colorful images that impersonate local banks, law enforcement, and shipping services. Proofpoint has observed this actor send low volume campaigns to recipients in Austria, Chile, Greece, Hungary, Italy, North Macedonia, Netherlands, Spain, Sweden, Taiwan, United States, and Uruguay. ",
+      "meta": {
+        "refs": [
+          "https://www.proofpoint.com/us/blog/threat-insight/threat-actor-profile-ta2719-uses-colorful-lures-deliver-rats-local-languages"
+        ]
+      },
+      "uuid": "33bfb09d-c6f4-4403-b434-1d4d4733ec52",
+      "value": "TA2719"
     }
   ],
   "version": 298