MISP/misp-galaxy
6
0
Fork 0
mirror of https://github.com/MISP/misp-galaxy.git synced 2024-11-30 02:37:17 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

Merge pull request #699 from nyx0/main

Browse source 
upd: [clusters] add ref and synonyms for Energetic Bear.
This commit is contained in:
Alexandre Dulaunoy 2022-04-07 22:56:20 +02:00 committed by GitHub
commit 5b68aaebd0
No known key found for this signature in database
GPG key ID: 4AEE18F83AFDEB23
1 changed files with 8 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
clusters/threat-actor.json
View file

@ -2597,7 +2597,7 @@
{ {
"description": "A Russian group that collects intelligence on the energy industry.", "description": "A Russian group that collects intelligence on the energy industry.",
"meta": { "meta": {
"attribution-confidence": "50", "attribution-confidence": "75",
"cfr-suspected-state-sponsor": "Russian Federation", "cfr-suspected-state-sponsor": "Russian Federation",
"cfr-suspected-victims": [ "cfr-suspected-victims": [
"United States", "United States",
@ -2618,6 +2618,7 @@
"cfr-type-of-incident": "Espionage", "cfr-type-of-incident": "Espionage",
"country": "RU", "country": "RU",
"refs": [ "refs": [
"https://www.gov.uk/government/publications/russias-fsb-malign-cyber-activity-factsheet/russias-fsb-malign-activity-factsheet",
"http://www.scmagazineuk.com/iran-and-russia-blamed-for-state-sponsored-espionage/article/330401/", "http://www.scmagazineuk.com/iran-and-russia-blamed-for-state-sponsored-espionage/article/330401/",
"https://paper.seebug.org/papers/APT/APT_CyberCriminal_Campagin/2014/Dragonfly_Threat_Against_Western_Energy_Suppliers.pdf", "https://paper.seebug.org/papers/APT/APT_CyberCriminal_Campagin/2014/Dragonfly_Threat_Against_Western_Energy_Suppliers.pdf",
"http://www.netresec.com/?page=Blog&month=2014-10&post=Full-Disclosure-of-Havex-Trojans", "http://www.netresec.com/?page=Blog&month=2014-10&post=Full-Disclosure-of-Havex-Trojans",
@ -2634,6 +2635,11 @@
"https://www.secureworks.com/research/resurgent-iron-liberty-targeting-energy-sector" "https://www.secureworks.com/research/resurgent-iron-liberty-targeting-energy-sector"
], ],
"synonyms": [ "synonyms": [
"Beserk Bear",
"ALLANITE",
"CASTLE",
"DYMALLOY",
"TG-4192",
"Dragonfly", "Dragonfly",
"Crouching Yeti", "Crouching Yeti",
"Group 24", "Group 24",
@ -9100,5 +9106,5 @@
"value": "Scarab" "value": "Scarab"
} }
], ],
"version": 215 "version": 216
} }