From d0162e654eff42ed733f64bbed0b3e5151d1b43c Mon Sep 17 00:00:00 2001 From: Mathieu4141 Date: Thu, 6 Jun 2024 01:27:06 -0700 Subject: [PATCH] [threat-actors] Add APT28 aliases --- clusters/threat-actor.json | 7 +++++-- 1 file changed, 5 insertions(+), 2 deletions(-) diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json index e76a6a6..4263776 100644 --- a/clusters/threat-actor.json +++ b/clusters/threat-actor.json @@ -2397,7 +2397,8 @@ "https://unit42.paloaltonetworks.com/atoms/fighting-ursa/", "https://blog.google/threat-analysis-group/continued-cyber-activity-in-eastern-europe-observed-by-tag", "https://blog.google/threat-analysis-group/fog-of-war-how-the-ukraine-conflict-transformed-the-cyber-threat-landscape/", - "https://www.bsi.bund.de/DE/Themen/Unternehmen-und-Organisationen/Cyber-Sicherheitslage/Analysen-und-Prognosen/Threat-Intelligence/Aktive_APT-Gruppen/aktive-apt-gruppen_node.html" + "https://www.bsi.bund.de/DE/Themen/Unternehmen-und-Organisationen/Cyber-Sicherheitslage/Analysen-und-Prognosen/Threat-Intelligence/Aktive_APT-Gruppen/aktive-apt-gruppen_node.html", + "https://bluepurple.binaryfirefly.com/p/bluepurple-pulse-week-ending-june-64e" ], "synonyms": [ "Pawn Storm", @@ -2423,7 +2424,9 @@ "UAC-0028", "FROZENLAKE", "Sofacy", - "Forest Blizzard" + "Forest Blizzard", + "BlueDelta", + "Fancy Bear" ], "targeted-sector": [ "Military",