From 5efe48385826a7ec473e29e77ae0761a9863794c Mon Sep 17 00:00:00 2001 From: Delta-Sierra Date: Fri, 15 Sep 2023 15:49:43 +0200 Subject: [PATCH] adding targeted sectors --- clusters/threat-actor.json | 25 ++++++++++++++++++++++++- 1 file changed, 24 insertions(+), 1 deletion(-) diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json index 0e95119..d4c61ba 100644 --- a/clusters/threat-actor.json +++ b/clusters/threat-actor.json @@ -4266,6 +4266,11 @@ "meta": { "refs": [ "https://citizenlab.ca/2015/12/packrat-report/" + ], + "targeted-sector": [ + "Activists", + "Journalist", + "Political party" ] }, "uuid": "fe344665-d153-4d31-a32a-1509efde1ca7", @@ -4314,6 +4319,10 @@ "synonyms": [ "Lion Soldiers Team", "Phantom Turk" + ], + "targeted-sector": [ + "Government, Administration", + "News - Media" ] }, "uuid": "23410d3f-c359-422d-9a4e-45f8fdf0c84a", @@ -4455,6 +4464,13 @@ "https://unit42.paloaltonetworks.com/unit42-oilrig-uses-ismdoor-variant-possibly-linked-greenbug-threat-group/", "https://threatpost.com/shamoon-collaborator-greenbug-adopts-new-communication-tool/125383/", "https://www.clearskysec.com/greenbug/" + ], + "targeted-sector": [ + "Education", + "Energy", + "Investment", + "Aerospace", + "Government, Administration" ] }, "related": [ @@ -4584,6 +4600,10 @@ "Operation Mermaid", "Prince of Persia", "Foudre" + ], + "targeted-sector": [ + "Activists", + "Civil society" ] }, "uuid": "1671be1b-c844-48f5-84c8-54ac4fe4d71e", @@ -4635,6 +4655,9 @@ "country": "UA", "refs": [ "http://www.welivesecurity.com/2016/05/18/groundbait" + ], + "targeted-sector": [ + "Separatists" ] }, "uuid": "8ed5e3f0-ed30-4eb8-bbee-4e221bd76d73", @@ -11720,5 +11743,5 @@ "value": "MoustachedBouncer" } ], - "version": 281 + "version": 282 }