MISP/misp-galaxy
6
0
Fork 0
mirror of https://github.com/MISP/misp-galaxy.git synced 2024-11-22 23:07:19 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Merge pull request #1021 from r0ny123/🧂🌀
Some checks failed
Python application / build (3.10) (push) Has been cancelled
Details
Python application / build (3.8) (push) Has been cancelled
Details
Python application / build (3.9) (push) Has been cancelled
Details

Browse source 
Updates regarding Salt Typhoon
This commit is contained in:
Alexandre Dulaunoy 2024-09-27 18:37:42 +02:00 committed by GitHub
commit b1e00264b1
No known key found for this signature in database
GPG key ID: B5690EEEBB952194
1 changed files with 30 additions and 2 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

32
clusters/threat-actor.json
View file

@ -12795,6 +12795,15 @@
"https://www.sentinelone.com/labs/cyber-soft-power-chinas-continental-takeover/" "https://www.sentinelone.com/labs/cyber-soft-power-chinas-continental-takeover/"
] ]
}, },
"related": [
{
"dest-uuid": "3c3ca8f3-c6ab-4c5d-9bd0-be6677d6cdeb",
"tags": [
"estimative-language:likelihood-probability=\"likely\""
],
"type": "similar"
}
],
"uuid": "1f7f4a51-c4a8-4365-ade3-83b222e7cb67", "uuid": "1f7f4a51-c4a8-4365-ade3-83b222e7cb67",
"value": "Earth Estries" "value": "Earth Estries"
}, },
@ -15233,10 +15242,29 @@
"meta": { "meta": {
"country": "CN", "country": "CN",
"refs": [ "refs": [
"https://www.mandiant.com/resources/blog/unc4841-post-barracuda-zero-day-remediation", "https://securelist.com/ghostemperor-from-proxylogon-to-kernel-mode/104407/",
"https://securelist.com/ghostemperor-from-proxylogon-to-kernel-mode/104407/" "https://media.kasperskycontenthub.com/wp-content/uploads/sites/43/2021/09/30094337/GhostEmperor_technical-details_PDF_eng.pdf",
"https://www.welivesecurity.com/2021/09/23/famoussparrow-suspicious-hotel-guest/",
"https://www.ncsc.gov.uk/files/NCSC-MAR-SparrowDoor.pdf",
"https://cloud.google.com/blog/topics/threat-intelligence/unc4841-post-barracuda-zero-day-remediation",
"https://www.sygnia.co/blog/ghost-emperor-demodex-rootkit/",
"https://www.wsj.com/politics/national-security/china-cyberattack-internet-providers-260bd835"
],
"synonyms": [
"FamousSparrow",
"UNC2286",
"Salt Typhoon"
] ]
}, },
"related": [
{
"dest-uuid": "1f7f4a51-c4a8-4365-ade3-83b222e7cb67",
"tags": [
"estimative-language:likelihood-probability=\"likely\""
],
"type": "similar"
}
],
"uuid": "3c3ca8f3-c6ab-4c5d-9bd0-be6677d6cdeb", "uuid": "3c3ca8f3-c6ab-4c5d-9bd0-be6677d6cdeb",
"value": "GhostEmperor" "value": "GhostEmperor"
}, },