From f0de8603ca82fa26b9a797f5f3f070d1ecdebc1f Mon Sep 17 00:00:00 2001
From: Mathieu4141 <mathieu@feedly.com>
Date: Fri, 20 Dec 2024 02:55:33 -0800
Subject: [PATCH] [threat-actors] Add INDOHAXSEC TEAM

---
 clusters/threat-actor.json | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json
index c13287a..c01742b 100644
--- a/clusters/threat-actor.json
+++ b/clusters/threat-actor.json
@@ -17484,6 +17484,17 @@
       },
       "uuid": "e6afdfb4-a5ac-4be1-9cd0-c1801a7f7083",
       "value": "Storm-2077"
+    },
+    {
+      "description": "INDOHAXSEC TEAM is an Indonesian group that claims to have developed a web-based version of WannaCry, asserting the ability to encrypt websites and demand Bitcoin as ransom. However, their technical capabilities remain uncertain, as creating ransomware of this scale requires significant expertise. The group's claims may be exaggerated for attention, and verified evidence is needed to assess their true capabilities.",
+      "meta": {
+        "country": "ID",
+        "refs": [
+          "https://socradar.io/dark-peep-17-dark-web-hacker-forums-ransomware/"
+        ]
+      },
+      "uuid": "c4ff73cd-858a-4e84-b2cd-929532f8c320",
+      "value": "INDOHAXSEC TEAM"
     }
   ],
   "version": 321