mirror of
https://github.com/MISP/misp-galaxy.git
synced 2024-11-29 18:27:19 +00:00
add cluster in threat actor
This commit is contained in:
parent
ab577afacd
commit
d8c83cf2d6
1 changed files with 24 additions and 1 deletions
|
@ -2678,6 +2678,29 @@
|
||||||
]
|
]
|
||||||
},
|
},
|
||||||
"uuid": "4defbf2e-4f73-11e8-807f-578d61da7568"
|
"uuid": "4defbf2e-4f73-11e8-807f-578d61da7568"
|
||||||
|
},
|
||||||
|
{
|
||||||
|
"value": "LuckyMouse",
|
||||||
|
"description": "Experts assigned the codename of LuckyMouse to the group behind this hack, but they later realized the attackers were an older Chinese threat actor known under various names in the reports of other cyber-security firms, such as Emissary Panda, APT27, Threat Group 3390, Bronze Union, ZipToken, and Iron Tiger",
|
||||||
|
"meta": {
|
||||||
|
"refs": [
|
||||||
|
"https://www.bleepingcomputer.com/news/security/chinese-cyber-espionage-group-hacked-government-data-center/",
|
||||||
|
"https://www.secureworks.com/research/bronze-union",
|
||||||
|
"http://newsroom.trendmicro.com/blog/operation-iron-tiger-attackers-shift-east-asia-united-states",
|
||||||
|
"https://www.secureworks.com/research/threat-group-3390-targets-organizations-for-cyberespionage",
|
||||||
|
"https://www.threatconnect.com/blog/threatconnect-discovers-chinese-apt-activity-in-europe/",
|
||||||
|
"https://www.nccgroup.trust/uk/about-us/newsroom-and-events/blogs/2018/april/decoding-network-data-from-a-gh0st-rat-variant/"
|
||||||
|
],
|
||||||
|
"synonyms": [
|
||||||
|
"Emissary Panda",
|
||||||
|
"APT27",
|
||||||
|
"Threat Group 3390",
|
||||||
|
"Bronze Union",
|
||||||
|
"ZipToken",
|
||||||
|
"Iron Tiger"
|
||||||
|
]
|
||||||
|
},
|
||||||
|
"uuid": "4af45fea-72d3-11e8-846c-d37699506c8d"
|
||||||
}
|
}
|
||||||
],
|
],
|
||||||
"name": "Threat actor",
|
"name": "Threat actor",
|
||||||
|
@ -2692,5 +2715,5 @@
|
||||||
],
|
],
|
||||||
"description": "Known or estimated adversary groups targeting organizations and employees. Adversary groups are regularly confused with their initial operation or campaign.",
|
"description": "Known or estimated adversary groups targeting organizations and employees. Adversary groups are regularly confused with their initial operation or campaign.",
|
||||||
"uuid": "7cdff317-a673-4474-84ec-4f1754947823",
|
"uuid": "7cdff317-a673-4474-84ec-4f1754947823",
|
||||||
"version": 41
|
"version": 42
|
||||||
}
|
}
|
||||||
|
|
Loading…
Reference in a new issue