diff --git a/elements/adversary-groups.json b/elements/adversary-groups.json index 09aac5a..52a30dd 100644 --- a/elements/adversary-groups.json +++ b/elements/adversary-groups.json @@ -87,7 +87,8 @@ "Stealth Falcon", "Pacifier APT", "HummingBad", - "Dropping Elephant" + "Dropping Elephant", + "Operation Transparent Tribe" ], "details": [ { @@ -857,6 +858,13 @@ "Chinastrats", "Patchwork" ] + }, + { + "group": "Operation Transparent Tribe", + "description" : "Proofpoint researchers recently uncovered evidence of an advanced persistent threat (APT) against Indian diplomatic and military resources. Our investigation began with malicious emails sent to Indian embassies in Saudi Arabia and Kazakstan but turned up connections to watering hole sites focused on Indian military personnel and designed to drop a remote access Trojan (RAT) with a variety of data exfiltration functions.", + "refs": [ + "https://www.proofpoint.com/sites/default/files/proofpoint-operation-transparent-tribe-threat-insight-en.pdf" + ] } ] }