From 41afab1c0698e75d37a9519753092c21b2d7bbab Mon Sep 17 00:00:00 2001 From: Daniel Plohmann Date: Tue, 18 Apr 2023 20:11:57 +0200 Subject: [PATCH] adding Trend Micro alias Earth Smilodon for APT27 --- clusters/threat-actor.json | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json index 63bc59e..31fc78c 100644 --- a/clusters/threat-actor.json +++ b/clusters/threat-actor.json @@ -841,7 +841,8 @@ "https://unit42.paloaltonetworks.com/atoms/iron-taurus/", "https://www.mandiant.com/resources/insights/apt-groups", "https://www.pwc.co.uk/cyber-security/pdf/pwc-cyber-threats-2020-a-year-in-retrospect.pdf", - "https://www.welivesecurity.com/2021/03/10/exchange-servers-under-siege-10-apt-groups/" + "https://www.welivesecurity.com/2021/03/10/exchange-servers-under-siege-10-apt-groups/", + "https://www.trendmicro.com/en_us/research/21/d/iron-tiger-apt-updates-toolkit-with-evolved-sysupdate-malware-va.html" ], "synonyms": [ "GreedyTaotie", @@ -856,7 +857,8 @@ "BRONZE UNION", "Lucky Mouse", "G0027", - "Iron Taurus" + "Iron Taurus", + "Earth Smilodon" ] }, "related": [