MISP/misp-galaxy
6
0
Fork 0
mirror of https://github.com/MISP/misp-galaxy.git synced 2024-11-22 23:07:19 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Set country to LB instead of IR based on operational activity.

Browse source
This commit is contained in:
Thomas Dupuy 2022-07-12 16:21:41 +00:00
parent 1a8835bcae
commit 90da0d798f
1 changed files with 2 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

4
clusters/threat-actor.json
View file

@ -9547,7 +9547,7 @@
"description": "Microsoft successfully detected and disabled attack activity abusing OneDrive by a previously undocumented Lebanon-based activity group Microsoft Threat Intelligence Center (MSTIC) tracks as POLONIUM.",
"meta": {
"attribution-confidence": "75",
"cfr-suspected-state-sponsor": "Iran",
"cfr-suspected-state-sponsor": "Lebanon",
"cfr-suspected-victims": [
"Israel"
],
@ -9562,7 +9562,7 @@
"Transportation systems"
],
"cfr-type-of-incident": "Espionage",
"country": "IR",
"country": "LB",
"refs": [
"https://www.microsoft.com/security/blog/2022/06/02/exposing-polonium-activity-and-infrastructure-targeting-israeli-organizations/"
]