diff --git a/clusters/microsoft-activity-group.json b/clusters/microsoft-activity-group.json index 40605ab..f4f568b 100644 --- a/clusters/microsoft-activity-group.json +++ b/clusters/microsoft-activity-group.json @@ -222,6 +222,13 @@ "estimative-language:likelihood-probability=\"likely\"" ], "type": "similar" + }, + { + "dest-uuid": "e400b6c5-77cf-453d-ba0f-44575583ac6c", + "tags": [ + "estimative-language:likelihood-probability=\"almost-certain\"" + ], + "type": "similar" } ], "uuid": "6085aad0-1d95-11ea-a140-078d42aced40", @@ -241,6 +248,13 @@ "estimative-language:likelihood-probability=\"likely\"" ], "type": "uses" + }, + { + "dest-uuid": "4245e4cd-a57a-4e0b-9853-acaa549d495d", + "tags": [ + "estimative-language:likelihood-probability=\"almost-certain\"" + ], + "type": "similar" } ], "uuid": "00edb40d-2fed-4d36-98b1-c85fc2bb1168", @@ -263,6 +277,15 @@ "https://www.microsoft.com/security/blog/2021/03/02/hafnium-targeting-exchange-servers/" ] }, + "related": [ + { + "dest-uuid": "4f05d6c1-3fc1-4567-91cd-dd4637cc38b5", + "tags": [ + "estimative-language:likelihood-probability=\"almost-certain\"" + ], + "type": "similar" + } + ], "uuid": "fbb66d6c-0faa-49cc-8aa3-2f9bd4e9c298", "value": "HAFNIUM" }, @@ -1328,5 +1351,5 @@ "value": "Zigzag Hail" } ], - "version": 16 + "version": 17 } diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json index cdbeb69..b8cde50 100644 --- a/clusters/threat-actor.json +++ b/clusters/threat-actor.json @@ -8056,6 +8056,13 @@ "estimative-language:likelihood-probability=\"almost-certain\"" ], "type": "similar" + }, + { + "dest-uuid": "6085aad0-1d95-11ea-a140-078d42aced40", + "tags": [ + "estimative-language:likelihood-probability=\"almost-certain\"" + ], + "type": "similar" } ], "uuid": "e400b6c5-77cf-453d-ba0f-44575583ac6c", @@ -8301,6 +8308,15 @@ "Red Dev 13" ] }, + "related": [ + { + "dest-uuid": "fbb66d6c-0faa-49cc-8aa3-2f9bd4e9c298", + "tags": [ + "estimative-language:likelihood-probability=\"almost-certain\"" + ], + "type": "similar" + } + ], "uuid": "4f05d6c1-3fc1-4567-91cd-dd4637cc38b5", "value": "HAFNIUM" }, @@ -9815,6 +9831,13 @@ "estimative-language:likelihood-probability=\"likely\"" ], "type": "uses" + }, + { + "dest-uuid": "00edb40d-2fed-4d36-98b1-c85fc2bb1168", + "tags": [ + "estimative-language:likelihood-probability=\"almost-certain\"" + ], + "type": "similar" } ], "uuid": "4245e4cd-a57a-4e0b-9853-acaa549d495d", @@ -10710,5 +10733,5 @@ "value": "Anonymous Sudan" } ], - "version": 265 + "version": 266 }