MISP/misp-galaxy
6
0
Fork 0
mirror of https://github.com/MISP/misp-galaxy.git synced 2024-11-23 07:17:17 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

add OSX malwares

Browse source
This commit is contained in:
Deborah Servili 2018-12-18 16:26:49 +01:00
parent cb4345adf9
commit e6fa06f178
No known key found for this signature in database
GPG key ID: 7E3A832850D4D7D1
1 changed files with 32 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

33
clusters/tool.json
View file

@ -7477,7 +7477,38 @@
}, },
"uuid": "48753e22-6c22-409c-b274-68f822c7ef57", "uuid": "48753e22-6c22-409c-b274-68f822c7ef57",
"value": "SpicyOmelette" "value": "SpicyOmelette"
},
{
"description": "When LamePyre runs on the system, users see the generic Automator icon in the menu bar, which is typical for any script of this sort.\nThe script decodes a payload written in Python and runs it on the victim host. It then starts to take pictures and upload them to the attacker's command and control (C2) server.",
"meta": {
"refs": [
"https://www.bleepingcomputer.com/news/security/new-lamepyre-macos-malware-sends-screenshots-to-attacker/"
],
"synonyms": [
"OSX.LamePyre"
]
},
"uuid": "ca044d42-000e-4366-ace9-e536f8c57440",
"value": "LamePyre"
},
{
"meta": {
"refs": [
"https://www.bleepingcomputer.com/news/security/new-lamepyre-macos-malware-sends-screenshots-to-attacker/"
]
},
"uuid": "34688253-fea5-4770-bf96-55f45077c347",
"value": "DarthMiner"
},
{
"meta": {
"refs": [
"https://www.bleepingcomputer.com/news/security/new-lamepyre-macos-malware-sends-screenshots-to-attacker/"
]
},
"uuid": "0147c0fd-ed74-4d38-a823-130542d894a3",
"value": "OSX.BadWord"
} }
], ],
"version": 106 "version": 107
} }