MISP/misp-galaxy
6
0
Fork 0
mirror of https://github.com/MISP/misp-galaxy.git synced 2024-11-26 16:57:18 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

[threat-actors] Add NewsPenguin

Browse source
This commit is contained in:
Mathieu4141 2023-11-17 02:59:56 -08:00
parent 5b993d2517
commit a81ac9687f
1 changed files with 11 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
clusters/threat-actor.json
View file

@ -13210,6 +13210,17 @@
}, },
"uuid": "013f56ea-a441-483f-812c-c384c790e474", "uuid": "013f56ea-a441-483f-812c-c384c790e474",
"value": "UAC-0006" "value": "UAC-0006"
},
{
"description": "NewsPenguin is threat actor that has been targeting organizations in Pakistan. They use a complex payload delivery mechanism and exploit the upcoming Pakistan International Maritime Expo & Conference as a lure to trick their victims. The group has been linked to a phishing campaign that leverages spear-phishing emails and weaponized documents to deliver an advanced espionage tool.",
"meta": {
"refs": [
"https://www.rewterz.com/rewterz-news/rewterz-threat-alert-newspenguin-threat-actors-targeting-pakistani-entities-with-malicious-campaign-active-iocs",
"https://blogs.blackberry.com/en/2023/02/newspenguin-a-previously-unknown-threat-actor-targets-pakistan-with-advanced-espionage-tool"
]
},
"uuid": "4c4a8cb7-b4c4-4637-8e41-dfe19a6b40c7",
"value": "NewsPenguin"
} }
], ],
"version": 294 "version": 294