MISP/misp-galaxy
6
0
Fork 0
mirror of https://github.com/MISP/misp-galaxy.git synced 2024-11-26 08:47:18 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

add Operation Wocao

Browse source
This commit is contained in:
Deborah Servili 2020-01-24 08:27:20 +01:00
parent 8421bde291
commit 58415324c5
No known key found for this signature in database
GPG key ID: 7E3A832850D4D7D1
1 changed files with 9 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

9
clusters/threat-actor.json
View file

@ -7872,6 +7872,15 @@
}, },
"uuid": "c4ce1174-9462-47e9-8038-794f40a184b3", "uuid": "c4ce1174-9462-47e9-8038-794f40a184b3",
"value": "SideWinder" "value": "SideWinder"
},
{
"value": "Operation Wocao",
"description": "Operation Wocao (我操, “Wǒ cāo”, used as “shit” or “damn”) is the name that Fox-IT uses to describe the hacking activities of a Chinese based hacking group.\nThis report details the profile of a publicly underreported threat actor that Fox-IT has dealt with over the past two years. Fox-IT assesses with high confidence that the actor is a Chinese group and that they are likely working to support the interests of the Chinese government and are tasked with obtaining information for espionage purposes. With medium confidence, Fox-IT assesses that the tools, techniques and procedures are those of the actor referred to as APT20 by industry partners. We have identified victims of this actor in more than 10 countries, in government entities, managed service providers and across a wide variety of industries, including Energy, Health Care and High-Tech.",
"meta": {
"refs": [
"https://www.fox-it.com/nl/actueel/whitepapers/operation-wocao-shining-a-light-on-one-of-chinas-hidden-hacking-groups/"
]
}
} }
], ],
"version": 149 "version": 149