MISP/misp-galaxy
6
0
Fork 0
mirror of https://github.com/MISP/misp-galaxy.git synced 2025-03-11 03:39:47 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

[threat-actors] Add CardinalLizard

Browse source
This commit is contained in:
Mathieu4141 2024-02-05 09:20:11 -08:00
parent 045ec7071f
commit d2586524e3
1 changed files with 11 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

11
clusters/threat-actor.json
View file

@ -14883,6 +14883,17 @@
}, },
"uuid": "624cc006-1131-4e53-a53c-3958cfbe233f", "uuid": "624cc006-1131-4e53-a53c-3958cfbe233f",
"value": "Operation Ghoul" "value": "Operation Ghoul"
},
{
"description": "CardinalLizard, a cyber threat actor linked to China, has targeted entities in Asia since 2018. Their methods include spear-phishing, custom malware with anti-detection features, and potentially shared infrastructure with other actors.",
"meta": {
"country": "CN",
"refs": [
"https://securelist.com/apt-review-of-the-year/89117/"
]
},
"uuid": "97f40858-1582-4a59-a990-866813982830",
"value": "CardinalLizard"
} }
], ],
"version": 299 "version": 299