diff --git a/elements/adversary-groups.json b/elements/adversary-groups.json index 85109bc..e85a712 100644 --- a/elements/adversary-groups.json +++ b/elements/adversary-groups.json @@ -84,7 +84,8 @@ "Threat Group-2889", "Codoso", "Nitro", - "Stealth Falcon" + "Stealth Falcon", + "Pacifier APT" ], "details": [ { @@ -827,6 +828,13 @@ "Operation Daybreak", "Operation Erebus" ] + }, + { + "description": "Bitdefender detected and blocked an ongoing cyber-espionage campaign against Romanian institutions and other foreign targets. The attacks started in 2014, with the latest reported occurrences in May of 2016. The APT, dubbed Pacifier by Bitdefender researchers, makes use of malicious .doc documents and .zip files distributed via spear phishing e-mail.", + "group": "Pacifier APT", + "refs": [ + "http://download.bitdefender.com/resources/files/News/CaseStudies/study/115/Bitdefender-Whitepaper-PAC-A4-en-EN1.pdf" + ] } ] }