From 971b17b79f20a4b2f7b60dc6a984344a2f9b22d0 Mon Sep 17 00:00:00 2001
From: Mathieu4141 <mathieu@feedly.com>
Date: Mon, 6 Nov 2023 05:26:25 -0800
Subject: [PATCH] [threat-actors] Add NB65

---
 clusters/threat-actor.json | 17 +++++++++++++++++
 1 file changed, 17 insertions(+)

diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index 00bd751..219d4cd 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -12386,6 +12386,23 @@
       },
       "uuid": "202f5481-7bae-4a0b-b117-0642ea1dbe65",
       "value": "Witchetty"
+    },
+    {
+      "description": "Network Battalion 65 is an hactivist group with ties to Anonymous, known for attacking Russian companies and performing hack-and-leak operations.",
+      "meta": {
+        "aliases": [
+          "Network Battalion 65"
+        ],
+        "refs": [
+          "https://www.rewterz.com/rewterz-news/rewterz-threat-alert-leaked-conti-ransomware-used-to-target-russia-active-iocs",
+          "https://www.trellix.com/en-us/about/newsroom/stories/threat-labs/growling-bears-make-thunderous-noise.html",
+          "https://securelist.com/reassessing-cyberwarfare-lessons-learned-in-2022/108328/",
+          "https://www.rewterz.com/articles/russian-ukrainian-cyber-warfare-rewterz-threat-intelligence-rollup",
+          "https://www.hackread.com/anonymous-affiliate-nb65-russia-broadcaster-data-breach/"
+        ]
+      },
+      "uuid": "e1941666-dcde-4f31-8a56-8041ac82bb99",
+      "value": "NB65"
     }
   ],
   "version": 289