From fc27aa88a3bcca0427baab3d536848c9f3df76b0 Mon Sep 17 00:00:00 2001 From: Mathieu4141 Date: Fri, 20 Dec 2024 02:55:34 -0800 Subject: [PATCH] [threat-actors] Add APT28 aliases --- clusters/threat-actor.json | 6 ++++-- 1 file changed, 4 insertions(+), 2 deletions(-) diff --git a/clusters/threat-actor.json b/clusters/threat-actor.json index 8942b0a..4406ed1 100644 --- a/clusters/threat-actor.json +++ b/clusters/threat-actor.json @@ -2401,7 +2401,8 @@ "https://blog.google/threat-analysis-group/continued-cyber-activity-in-eastern-europe-observed-by-tag", "https://blog.google/threat-analysis-group/fog-of-war-how-the-ukraine-conflict-transformed-the-cyber-threat-landscape/", "https://www.bsi.bund.de/DE/Themen/Unternehmen-und-Organisationen/Cyber-Sicherheitslage/Analysen-und-Prognosen/Threat-Intelligence/Aktive_APT-Gruppen/aktive-apt-gruppen_node.html", - "https://bluepurple.binaryfirefly.com/p/bluepurple-pulse-week-ending-june-64e" + "https://bluepurple.binaryfirefly.com/p/bluepurple-pulse-week-ending-june-64e", + "https://www.volexity.com/blog/2024/11/22/the-nearest-neighbor-attack-how-a-russian-apt-weaponized-nearby-wi-fi-networks-for-covert-access/" ], "synonyms": [ "Pawn Storm", @@ -2429,7 +2430,8 @@ "Sofacy", "Forest Blizzard", "BlueDelta", - "Fancy Bear" + "Fancy Bear", + "GruesomeLarch" ], "targeted-sector": [ "Military",