From b47863f1c1c09ac60b54dd24b11ecb49bca2d69d Mon Sep 17 00:00:00 2001 From: Deborah Servili Date: Wed, 29 May 2019 16:18:50 +0200 Subject: [PATCH] update threat actors --- clusters/threat-actor.json | 15 ++++++++++++++- 1 file changed, 14 insertions(+), 1 deletion(-) diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json index a3f87a8..52241f2 100644 --- a/clusters/threat-actor.json +++ b/clusters/threat-actor.json @@ -4325,11 +4325,24 @@ "https://www.helpnetsecurity.com/2016/11/22/cobalt-hackers-synchronized-atm-heists/", "https://www.bleepingcomputer.com/news/security/cobalt-hacking-group-tests-banks-in-russia-and-romania/", "https://www.secureworks.com/blog/cybercriminals-increasingly-trying-to-ensnare-the-big-financial-fish", - "https://www.crowdstrike.com/blog/meet-crowdstrikes-adversary-of-the-month-for-september-cobalt-spider/" + "https://www.crowdstrike.com/blog/meet-crowdstrikes-adversary-of-the-month-for-september-cobalt-spider/", + "https://www.group-ib.com/blog/cobalt", + "https://www.reuters.com/article/us-taiwan-cyber-atms/taiwan-atm-heist-linked-to-european-hacking-spree-security-firm-idUSKBN14P0CX", + "https://www.proofpoint.com/us/threat-insight/post/microsoft-word-intruder-integrates-cve-2017-0199-utilized-cobalt-group-target", + "https://blog.trendmicro.com/trendlabs-security-intelligence/cobalt-spam-runs-use-macros-cve-2017-8759-exploit/", + "https://www.riskiq.com/blog/labs/cobalt-strike/", + "https://www.riskiq.com/blog/labs/cobalt-group-spear-phishing-russian-banks/", + "https://unit42.paloaltonetworks.com/unit42-new-techniques-uncover-attribute-cobalt-gang-commodity-builders-infrastructure-revealed/", + "https://www.europol.europa.eu/newsroom/news/mastermind-behind-eur-1-billion-cyber-bank-robbery-arrested-in-spain", + "https://www.computerweekly.com/news/252446153/Three-Carbanak-cyber-heist-gang-members-arrested", + "https://www.ptsecurity.com/upload/corporate/ww-en/analytics/Cobalt-2017-eng.pdf", + "https://attack.mitre.org/groups/G0080/" ], "synonyms": [ "Cobalt group", + "Cobalt Group", "Cobalt gang", + "Cobalt Gang", "GOLD KINGSWOOD", "Cobalt Spider" ]