From 9f09699047d497c52e8b28597dd72684b254eb33 Mon Sep 17 00:00:00 2001 From: Mathieu Beligon Date: Mon, 13 Feb 2023 16:47:38 -0800 Subject: [PATCH] [threat-actors] Fix: country was in the wrong place --- clusters/threat-actor.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json index 9befd77..8ba3032 100644 --- a/clusters/threat-actor.json +++ b/clusters/threat-actor.json @@ -10195,9 +10195,9 @@ "value": "TA577" }, { - "country": "NG", "description": "TA2536, which has been active since at least 2015, is likely Nigerian based on its unique linguistic style, tactics and tools. It uses keyloggers such as HawkEye and distinctive stylometric features in typo-squatted domains that resemble legitimate names and the use of recurring names and substrings in email addresses.", "meta": { + "country": "NG", "references": [ "https://www.proofpoint.com/us/blog/threat-insight/dtpacker-net-packer-curious-password-1" ]