|
74e660a2c4
|
new: [movie] Added movie galaxy for training exercise
|
2021-02-09 16:01:45 +01:00 |
|
|
cb9bff18e8
|
Merge pull request #542 from Delta-Sierra/master
add speculoos bakdoor
|
2020-04-28 16:01:24 +02:00 |
|
Deborah Servili
|
1d331a9ab1
|
Merge branch 'master' into master
|
2020-04-28 15:19:38 +02:00 |
|
|
3c2d863cbc
|
Merge pull request #541 from nyx0/master
Add DenesRAT/METALJACK
|
2020-04-28 09:20:48 +02:00 |
|
Thomas Dupuy
|
46a6d9fcb1
|
Add DenesRAT/METALJACK
|
2020-04-28 01:08:50 -04:00 |
|
|
07145a4759
|
Merge branch 'intezer-fix/reports'
|
2020-04-27 15:04:05 +02:00 |
|
|
2a70893352
|
chg: [jq] JSON fixed
|
2020-04-27 15:03:25 +02:00 |
|
de Rosen
|
a428ad565e
|
Added misp info
|
2020-04-27 15:16:33 +03:00 |
|
Deborah Servili
|
f6fd07fbc9
|
add speculoos bakdoor
|
2020-04-27 09:36:23 +02:00 |
|
|
86157a6b96
|
Merge pull request #539 from r0ny123/MergingTA
Adding alias Thallium and merging STOLEN PENCIL
|
2020-04-26 21:16:56 +02:00 |
|
Rony
|
112f9e4a08
|
Adding alias Thallium and merging STOLEN PENCIL
Pretty much confirmed from the crowdstrike talk at ATT&CKon 2.0.
And also Netscout named the campaign as STOLEN PENCIL.
|
2020-04-26 23:47:37 +05:30 |
|
|
c2fe21f3b7
|
Merge branch 'rvs1st-patch-1'
|
2020-04-26 14:27:48 +02:00 |
|
|
de71a444f8
|
chg: [json] add missing comma
|
2020-04-26 14:23:59 +02:00 |
|
rvs1st
|
d449eb94fc
|
Update threat-actor.json
Added on line 1403: Trident per campaign malicious RTF documents to exploit CVE-2017-11882 and CVE-2012-0158
|
2020-04-24 09:03:58 -05:00 |
|
|
4234d44052
|
Merge pull request #537 from danielplohmann/patch-28
Adding Nazar APT as described by JAGS in his OPCDE talk yesterday.
|
2020-04-24 15:33:47 +02:00 |
|
|
cac034064a
|
Merge pull request #536 from danielplohmann/patch-27
adding VOYEUR as alias (used by NSA) for MAGIC KITTEN (source referen…
|
2020-04-24 15:33:30 +02:00 |
|
Daniel Plohmann
|
858621ebdc
|
Adding Nazar APT as described by JAGS in his OPCDE talk yesterday.
|
2020-04-23 15:47:35 +02:00 |
|
Daniel Plohmann
|
b0f0bbae33
|
adding VOYEUR as alias (used by NSA) for MAGIC KITTEN (source reference included)
|
2020-04-23 14:52:08 +02:00 |
|
|
13348879cc
|
Merge pull request #535 from ITAYC0HEN/feature/AddDarkUniverseActor
Add ItaDuke/DarkUniverse actor
|
2020-04-23 11:22:39 +02:00 |
|
Deborah Servili
|
6b49d81b13
|
Merge branch 'master' of https://github.com/MISP/misp-galaxy
|
2020-04-23 10:06:04 +02:00 |
|
itayc0hen
|
667d5b8850
|
Add ItaDuke/DarkUniverse actor
|
2020-04-22 19:44:38 +03:00 |
|
|
2a5ea5f521
|
Merge pull request #534 from danielplohmann/fin1
adding FIN1
|
2020-04-20 14:59:54 +02:00 |
|
pnx@pyrite
|
974ece3a7c
|
adding FIN1
|
2020-04-20 14:20:22 +02:00 |
|
|
f0257aed12
|
Merge pull request #533 from r0ny123/MergingTA
fix
|
2020-04-20 07:59:30 +02:00 |
|
Rony
|
aa34775390
|
typo
thanks to @patricksvgr
|
2020-04-19 23:17:44 +05:30 |
|
Rony
|
ddfa280672
|
Update threat-actor.json
|
2020-04-19 23:06:57 +05:30 |
|
Rony
|
7ac2648dbc
|
more fix
|
2020-04-19 23:00:42 +05:30 |
|
Rony
|
573b4807ee
|
fix broken links
|
2020-04-19 16:03:21 +05:30 |
|
Rony
|
42a4820823
|
dead link
|
2020-04-19 11:45:45 +05:30 |
|
Rony
|
0aa34187e9
|
add link
|
2020-04-19 11:29:36 +05:30 |
|
Rony
|
d6bf42254f
|
Merging APT23 & Tropic Trooper
|
2020-04-18 13:22:25 +05:30 |
|
|
74ea81f2b6
|
Merge pull request #531 from r0ny123/patch-3
Update threat-actor.json
|
2020-04-15 19:11:29 +02:00 |
|
Rony
|
c161080175
|
Update threat-actor.json
|
2020-04-15 21:36:48 +05:30 |
|
Deborah Servili
|
e8edc9cafc
|
Merge branch 'master' of https://github.com/MISP/misp-galaxy
|
2020-04-15 11:27:01 +02:00 |
|
Deborah Servili
|
b01e64eb1f
|
add Operation Shadow Forece
|
2020-04-08 14:53:19 +02:00 |
|
|
f6fb062aae
|
Merge pull request #529 from danielplohmann/patch-26
fixing/removing some more dead links
|
2020-04-07 08:53:56 +02:00 |
|
Daniel Plohmann
|
aba625dee5
|
removed duplicate entry
|
2020-04-07 08:49:33 +02:00 |
|
Daniel Plohmann
|
e15a4a6525
|
fixing/removing some more dead links
|
2020-04-06 15:25:22 +02:00 |
|
|
b91547e911
|
Merge pull request #528 from Delta-Sierra/master
UPdate Ransomware Galaxy
|
2020-04-03 16:46:09 +02:00 |
|
Deborah Servili
|
7859c8dbd7
|
Add coronavirus ransomware
|
2020-04-03 16:19:45 +02:00 |
|
Deborah Servili
|
8a3422acb4
|
add Pyta ransomnotes
|
2020-04-03 11:58:02 +02:00 |
|
Deborah Servili
|
c566c89f2a
|
add pyza ransomware
|
2020-03-27 14:22:34 +01:00 |
|
|
c7104e8819
|
chg: [country] jq all
|
2020-03-23 13:09:14 +01:00 |
|
iglocska
|
777c3188db
|
new: [country] galaxy added
|
2020-03-23 12:10:16 +01:00 |
|
|
35a57c36bf
|
Merge pull request #526 from Delta-Sierra/master
PARINACOTA group
|
2020-03-12 23:23:05 +01:00 |
|
Deborah Servili
|
a706b8ef2e
|
PARINACOTA group
|
2020-03-12 13:11:46 +01:00 |
|
|
e37f320df5
|
Merge pull request #523 from danielplohmann/patch-24
adding aliases MERCURY, HOLMIUM
|
2020-03-09 21:56:27 +01:00 |
|
|
47881a1edd
|
Merge pull request #524 from danielplohmann/patch-25
Kimsuki -> Black Banshee
|
2020-03-09 21:55:54 +01:00 |
|
Daniel Plohmann
|
ab49ef3c1a
|
Kimsuki -> Black Banshee
PWC refers to Kimsuki as Black Banshee (https://www.pwc.co.uk/issues/cyber-security-data-privacy/research/tracking-kimsuky-north-korea-based-cyber-espionage-group-part-2.html)
|
2020-03-09 18:20:56 +01:00 |
|
Daniel Plohmann
|
1260ab156a
|
adding aliases MERCURY, HOLMIUM
Muddywater->MERCURY: https://twitter.com/moranned/status/1234071210822184960
APT33->HOLMIUM: https://www.zdnet.com/article/microsoft-notified-10000-victims-of-nation-state-attacks/
|
2020-03-09 08:50:08 +01:00 |
|