MISP/misp-galaxy
6
0
Fork 0
mirror of https://github.com/MISP/misp-galaxy.git synced 2024-11-26 16:57:18 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

[threat-actors] Add TetrisPhantom

Browse source
This commit is contained in:
Mathieu Beligon 2023-11-03 11:13:11 +01:00
parent 78472ee3f5
commit 4a521eec3b
1 changed files with 11 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
clusters/threat-actor.json
View file

@ -12194,6 +12194,17 @@
}, },
"uuid": "4f1c43a4-3788-4035-a99c-e510f89edd0f", "uuid": "4f1c43a4-3788-4035-a99c-e510f89edd0f",
"value": "Redfly" "value": "Redfly"
},
{
"description": "TetrisPhantom relies on compromising of certain type of secure USB drives that provide hardware encryption and is commonly used by government organizations. While investigating this threat, experts identified an entire spying campaign that uses a range of malicious modules to execute commands, collect files and information from compromised computers and transfer them to other machines also using secure USB drives.",
"meta": {
"refs": [
"https://usa.kaspersky.com/blog/sas-2023-research/29254/",
"https://securelist.com/apt-trends-report-q3-2023/110752/"
]
},
"uuid": "5368c0a2-eb79-420c-b808-85ae719efccd",
"value": "TetrisPhantom"
} }
], ],
"version": 288 "version": 288