MISP/misp-galaxy
6
0
Fork 0
mirror of https://github.com/MISP/misp-galaxy.git synced 2024-11-26 16:57:18 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

add Operation Shadow Forece

Browse source
This commit is contained in:
Deborah Servili 2020-04-08 14:53:19 +02:00
parent 7859c8dbd7
commit b01e64eb1f
No known key found for this signature in database
GPG key ID: 7E3A832850D4D7D1
1 changed files with 11 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
clusters/threat-actor.json
View file

@ -8102,6 +8102,17 @@
}, },
"uuid": "86b4e2f3-8bbf-48fd-9d27-034d3ac3b187", "uuid": "86b4e2f3-8bbf-48fd-9d27-034d3ac3b187",
"value": "VENOM SPIDER" "value": "VENOM SPIDER"
},
{
"description": "Operation Shadow Force is a group of malware that is representative of Shadow Force and Wgdrop from 2013 to 2020, and is a group activity that attacks Korean companies and organizations. The group's first confirmed attack was in March 2013, but considering the date of malware creation, it is likely to have been active before 2012. Since the malware used mainly by them is Shadow Force, it was named Operation Shadow Force, and it has not been confirmed whether the attacker is associated with a known group.",
"meta": {
"refs": [
"https://www.ahnlab.com/kr/site/securityinfo/secunews/secuNewsView.do?curPage=1&menu_dist=2&seq=29129",
"https://mobile.twitter.com/mstoned7/status/1247361687570673664"
]
},
"uuid": "f628b544-48b6-44e2-b794-950713353cf1",
"value": "Operation Shadow Force"
} }
], ],
"version": 157 "version": 157