From 73d7c038b2b3446df06411ccce64ee03a312097a Mon Sep 17 00:00:00 2001 From: Delta-Sierra Date: Mon, 9 Oct 2023 09:18:43 +0200 Subject: [PATCH] adding targeted sectors --- clusters/threat-actor.json | 55 ++++++++++++++++++++++++++++++++++++++ 1 file changed, 55 insertions(+) diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json index 67e65e5..55c99a9 100644 --- a/clusters/threat-actor.json +++ b/clusters/threat-actor.json @@ -4689,6 +4689,15 @@ "the Lamberts", "APT-C-39", "PLATINUM TERMINAL" + ], + "targeted-sector": [ + "Telecoms", + "Aerospace", + "Energy", + "Education", + "Government, Administration", + "Finance", + "News - Media" ] }, "related": [ @@ -4723,6 +4732,12 @@ "TA446", "GOSSAMER BEAR", "BlueCharlie" + ], + "targeted-sector": [ + "Government, Administration", + "Military", + "Think Tanks", + "Journalist" ] }, "related": [ @@ -4788,6 +4803,11 @@ "BISMUTH", "ATK17", "G0050" + ], + "targeted-sector": [ + "Dissidents", + "Government, Administration", + "Journalist" ] }, "related": [ @@ -4868,6 +4888,13 @@ "TwoForOne", "G0068", "ATK33" + ], + "targeted-sector": [ + "Defense", + "Government, Administration", + "Diplomacy", + "Intelligence", + "Telecoms" ] }, "related": [ @@ -4902,6 +4929,9 @@ "LeafMiner", "Raspite" ], + "targeted-sector": [ + "Electric" + ], "victimology": "Electric utility sector" }, "uuid": "2c8994ba-367c-46f6-bfb0-390c8760dd9e", @@ -4921,6 +4951,11 @@ "synonyms": [ "ATK113", "G0061" + ], + "targeted-sector": [ + "Entertainment", + "Hospitality", + "Retail" ] }, "related": [ @@ -5121,6 +5156,11 @@ "MANGANESE", "BRONZE FLEETWOOD", "TEMP.Bottle" + ], + "targeted-sector": [ + "Electronic", + "Telecoms", + "Technology" ] }, "related": [ @@ -5174,6 +5214,15 @@ "G0060", "Stalker Taurus", "PLA Unit 61419" + ], + "targeted-sector": [ + "Infrastructure", + "Industrial", + "Manufacturing", + "Diplomacy", + "News - Media", + "Political party", + "Engineering" ] }, "related": [ @@ -5398,6 +5447,12 @@ "https://www.kaspersky.com/about/press-releases/2012_kaspersky-lab-and-seculert-announce--madi--a-newly-discovered-cyber-espionage-campaign-in-the-middle-east", "https://threatpost.com/new-and-improved-madi-spyware-campaign-continues-072512/76849/", "https://web.archive.org/web/20120718173322/https://www.symantec.com/connect/blogs/madi-attacks-series-social-engineering-campaigns" + ], + "targeted-sector": [ + "Infrastructure", + "Engineering", + "Government, Administration", + "Finance" ] }, "uuid": "d5dacda0-12c2-4e80-bdf2-1c5019ec40e2",