[threat-actors] Add APT45

clusters/threat-actor.json

@@ -16444,6 +16444,17 @@
       },
       "uuid": "7dd2e8ee-4232-43f5-9866-006160f19aea",
       "value": "UAC-0102"
+    },
+    {
+      "description": "APT45 is a North Korean cyber threat actor that has been active since at least 2009. They have conducted espionage campaigns targeting government agencies and defense industries, as well as financially-motivated operations, including ransomware development. APT45 has targeted critical infrastructure, financial organizations, nuclear research facilities, and healthcare and pharmaceutical companies. They use a mix of publicly available tools, modified malware, and custom malware families in their operations.",
+      "meta": {
+        "country": "KP",
+        "refs": [
+          "https://cloud.google.com/blog/topics/threat-intelligence/apt45-north-korea-digital-military-machine"
+        ]
+      },
+      "uuid": "02768be6-853c-4239-8fb1-823427489a86",
+      "value": "APT45"
     }
   ],
   "version": 312