MISP/misp-galaxy
6
0
Fork 0
mirror of https://github.com/MISP/misp-galaxy.git synced 2024-11-26 16:57:18 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

[threat-actors] Add DEV-0928

Browse source
This commit is contained in:
Mathieu4141 2023-11-17 02:59:55 -08:00
parent ed0d3c6f57
commit 68f70a1831
1 changed files with 10 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

10
clusters/threat-actor.json
View file

@ -13149,6 +13149,16 @@
}, },
"uuid": "5d0aee14-f18a-44da-a44d-28d950f06b9c", "uuid": "5d0aee14-f18a-44da-a44d-28d950f06b9c",
"value": "CL-STA-0043" "value": "CL-STA-0043"
},
{
"description": "DEV-0928 is a threat actor that has been tracked by Microsoft since September 2022. They are known for their involvement in high-volume phishing campaigns, using tools offered by DEV-1101. DEV-0928 sends phishing emails to targets and has been observed launching campaigns involving millions of emails. They also utilize evasion techniques, such as redirection to benign pages, to avoid detection.",
"meta": {
"refs": [
"http://www.microsoft.com/en-us/security/blog/2023/03/13/dev-1101-enables-high-volume-aitm-campaigns-with-open-source-phishing-kit/"
]
},
"uuid": "8345dd24-7884-48e3-b231-4791d31afe3d",
"value": "DEV-0928"
} }
], ],
"version": 294 "version": 294