1215 commits

Author	SHA1	Message	Date
Deborah Servili	b2e1d5551f	add SPOILER vulnerability + other minor changes	2019-03-20 11:47:58 +01:00
Alexandre Dulaunoy	b2538a1f8a	chg: [threat-actor] change attribution confidence to be a string by default	2019-03-19 16:51:41 +01:00
Alexandre Dulaunoy	095b0a4d81	chg: [attck4fraud] updated	2019-03-19 16:33:27 +01:00
Alexandre Dulaunoy	3cf53b670e	chg: [attck4fraud] completed	2019-03-19 16:02:08 +01:00
Alexandre Dulaunoy	2b619dd9b7	chg: [attck4fraud] Assets Transfer added	2019-03-19 15:52:33 +01:00
Alexandre Dulaunoy	75b4a3a951	chg: [attck4fraud] Obtain Fraudulent Assets added	2019-03-19 15:44:16 +01:00
Alexandre Dulaunoy	bf6a605f6d	chg: [attck4fraud] Perform fraud added	2019-03-19 15:33:46 +01:00
Alexandre Dulaunoy	e398cc3ef2	chg: [attck4fraud] Target compromise updated	2019-03-19 15:17:25 +01:00
Alexandre Dulaunoy	e26918d749	chg: [attck4fraud] more techniques	2019-03-19 15:08:44 +01:00
Alexandre Dulaunoy	4f454493b7	chg: [threat-actor] BRONZE UNION is also uppercase	2019-03-19 14:47:03 +01:00
Alexandre Dulaunoy	9a6b597387	chg: [threat-actor] updated the version to avoid the past issue with 0 value for integer values	2019-03-19 14:44:49 +01:00
Alexandre Dulaunoy	c2f10410f5	chg: [sector] typo fixed - reported in #364	2019-03-19 12:36:19 +01:00
Alexandre Dulaunoy	e56cb33097	chg: [attck4fraud] fix the type issue	2019-03-19 10:03:33 +01:00
Alexandre Dulaunoy	a80283672c	chg: [attck4fraud] uuid fixed	2019-03-19 08:39:08 +01:00
Alexandre Dulaunoy	2419a33807	chg: [attck4fraud] ATM Shimming added	2019-03-19 08:33:08 +01:00
Alexandre Dulaunoy	779bc4a6a0	chg: [attck4fraud] description fixed for FT1003	2019-03-19 08:11:33 +01:00
Alexandre Dulaunoy	3c067c42a8	Merge branch 'master' of github.com:MISP/misp-galaxy	2019-03-19 08:10:36 +01:00
Alexandre Dulaunoy	824465d879	add: [attck4fraud] initial attck-like matrix for fraud from https://github.com/burritoblue/attck4fraud (WiP)	2019-03-19 08:09:23 +01:00
Alexandre Dulaunoy	78b886b2f0	Merge pull request #363 from Delta-Sierra/master ... add H-worm RAT	2019-03-19 07:31:04 +01:00
Deborah Servili	3294091600	add H-worm RAT	2019-03-18 16:24:55 +01:00
Bart	dff2a827d6	Update preventive-measure.json ... Add ACL	2019-03-17 21:47:54 +00:00
Deborah Servili	5ce8aae89e	add Operation Comando - hit version 100	2019-03-15 15:04:29 +01:00
ismasma	379ed61c34	Add payment method and price	2019-03-14 17:12:42 +01:00
Alexandre Dulaunoy	5db30ba974	chg: [threat-actor] SandCat added	2019-03-14 06:18:10 +01:00
Thomas Dupuy	60d79b0153	add synonym, no need for uppercase in the name :)	2019-03-13 23:07:10 +01:00
Deborah Servili	ecf76178e7	add attribution-confidence attribute to threat-actor	2019-03-11 11:18:12 +01:00
Deborah Servili	7576d0db02	relations between SLUB Backdoor	2019-03-11 09:01:12 +01:00
Deborah Servili	a65688ec02	Merge branch 'master' of https://github.com/Delta-Sierra/misp-galaxy	2019-03-11 08:51:47 +01:00
Deborah Servili	33dbda1e1e	Merge branch 'master' of https://github.com/MISP/misp-galaxy	2019-03-11 08:51:16 +01:00
Deborah Servili	59ee8a9f13	Merge branch 'master' into master	2019-03-11 08:40:38 +01:00
Deborah Servili	ddab5f7006	Merge branch 'master' into master	2019-03-11 08:40:11 +01:00
Alexandre Dulaunoy	139e6c32ed	chg: [threat-actor] new attribution-confidence level introduced	2019-03-11 08:37:49 +01:00
Alexandre Dulaunoy	eb665e2883	chg: [threat-actor] jq all the things	2019-03-10 11:15:13 +01:00
Alexandre Dulaunoy	bebcc0eb5a	Merge branch 'master' of github.com:MISP/misp-galaxy	2019-03-10 10:48:31 +01:00
Alexandre Dulaunoy	6fb1303570	chg: [threat-actor] IRIDIUM added ... Ref: https://resecurity.com/blog/parliament_races/	2019-03-10 10:47:34 +01:00
Raphaël Vinot	4f3e6335b5	fix: Wrong (duplicate) value.	2019-03-09 06:29:26 +01:00
Deborah Servili	2815e48610	add StealthWorker malware	2019-03-08 15:57:30 +01:00
Deborah Servili	ee034babba	add SLUB backdoor	2019-03-08 14:39:34 +01:00
Alexandre Dulaunoy	769e0002ef	chg: [tools] jq all the things	2019-03-08 08:10:42 +01:00
Daniel Plohmann	1d8ada33a0	Update threat-actor.json ... another actor described by 360TIC.	2019-03-07 17:50:46 +01:00
Alexandre Dulaunoy	63419046d4	Merge branch 'master' of github.com:MISP/misp-galaxy	2019-03-07 15:51:44 +01:00
Alexandre Dulaunoy	31ba566c18	chg: [tool] SLUB Backdoor added	2019-03-07 15:51:16 +01:00
Deborah Servili	7afd311abc	add Jokeroo RaaS	2019-03-07 15:23:30 +01:00
Daniel Plohmann	cfb807861a	FireEye upgraded TEMP.Periscope to APT40	2019-03-07 14:34:14 +01:00
Deborah Servili	eb0a33eab6	add operation Kabar Cobra	2019-03-06 15:52:49 +01:00
Deborah Servili	ae49090845	add ref for garrantydecrypt	2019-03-04 16:34:52 +01:00
Deborah Servili	6ffb8dd437	add relation between Lazarus Group and Operation SharpShooter	2019-03-04 12:03:05 +01:00
Deborah Servili	19c4fe4d11	add Rising Sun Backdoor	2019-03-04 10:11:26 +01:00
Deborah Servili	bd3fce00e1	add Razdel	2019-02-25 16:35:06 +01:00
Alexandre Dulaunoy	f7367ef887	chg: [tool] Xbash description updated	2019-02-23 09:25:14 +01:00
Alexandre Dulaunoy	f2159bfaa3	chg: [threat-actor] format fixed	2019-02-22 22:50:42 +01:00
Alexandre Dulaunoy	f621b40263	chg: [threat-actor] jq all the things late in the night	2019-02-22 22:47:25 +01:00
Alexandre Dulaunoy	d5df0d1064	chg: [threat-actor] uuid fixed	2019-02-22 22:45:28 +01:00
Alexandre Dulaunoy	f2c80cbcdd	chg: [tool] BabyShark added	2019-02-22 22:44:44 +01:00
Alexandre Dulaunoy	38283f0f86	chg: [threat-actor] STOLEN PENCIL added	2019-02-22 22:41:06 +01:00
Alexandre Dulaunoy	243a6280e0	Merge pull request #350 from bartblaze/master ... Add more info on Lotus Blossom	2019-02-21 23:39:33 +01:00
Bart	06553bbec2	Add more info on Lotus Blossom ... Add 2 more references, fix typo - Trend calls it "Esile", not "Eslie" as mistakenly stated by CFR. The backdoor itself is commonly referred to as Elise.	2019-02-21 22:31:14 +00:00
Alexandre Dulaunoy	08e8aafcf7	chg: [cert-eu-govsector] version fixed	2019-02-21 07:19:04 +01:00
Alexandre Dulaunoy	ed132cb1b8	chg: [threat-actor] version fixed	2019-02-21 07:18:16 +01:00
Daniel Plohmann	0cd79994cc	Two more actor names from GTR2019 ... I found two more actor names while going again over the crowdstrike's report and updating the cross-references to malpedia.	2019-02-19 22:38:11 +01:00
Daniel Plohmann	85ec27b4c4	Added missing actors from CrowdStrike GTR2019	2019-02-19 18:26:01 +01:00
Itay Cohen	7d9dc1ec9d	Fix 404'd reference of BuhTrap	2019-02-17 11:33:11 +02:00
Alexandre Dulaunoy	9ad8a76a38	chg: [ransomware] no related object in meta	2019-02-15 10:30:20 +01:00
mokaddem	34042abe23	new: Added draft of the election guildelines galaxy	2019-02-15 08:44:33 +01:00
Deborah Servili	5bf18ffd23	Merge branch 'master' into master	2019-02-14 16:29:04 +01:00
Deborah Servili	9c450a80d4	add Gallmaker and other clusters	2019-02-14 16:04:54 +01:00
Deborah Servili	2794a20589	add OSX/Shlayer and some refs	2019-02-14 12:42:28 +01:00
Alexandre Dulaunoy	ad0ef66b0a	chg: [tool] jq jq jq jq jq jq jq jq	2019-02-12 21:41:33 +01:00
Thomas Dupuy	95a70d09a5	add ANEL/UPPERCUT in tool cluster	2019-02-12 12:19:23 -05:00
Deborah Servili	8aeed60a24	Add Siesta campaign	2019-02-11 16:30:46 +01:00
João Neto	662cc5a012	Updated "Iran" name ... This extra space leads to an unnecessary key error when parsing the json file	2019-02-08 16:50:22 +01:00
Nils Kuhnert	fc16f4f69c	Added Velvet Chollima as synonym to Kimsuki	2019-02-08 08:50:05 +01:00
Christophe Vandeplas	e5f74c8fdc	Merge pull request #336 from 3c7/synonym/static-kitten ... Added static kitten as synonym for MuddyWater	2019-02-07 08:54:49 +01:00
Alexandre Dulaunoy	2bbb8a6a43	Merge pull request #334 from 3c7/synonym/cobalt-spider ... Added Cobalt Spider as Synonym for Cobalt	2019-02-07 08:53:19 +01:00
Nils Kuhnert	9778bea81e	Added Cobalt Spider reference	2019-02-07 08:41:00 +01:00
Nils Kuhnert	523a52c4db	Added static kitten as synonym for MuddyWater	2019-02-07 08:38:52 +01:00
Nils Kuhnert	0049acd81c	Added Turbine Panda as synonym for APT 26	2019-02-07 08:28:48 +01:00
Nils Kuhnert	5a077cf838	Added Cobalt Spider as Synonym for Cobalt	2019-02-07 08:26:10 +01:00
Nils Kuhnert	a171d5aa9d	Added Ocean Buffalo synonym for Ocean Lotus	2019-02-03 21:36:21 +01:00
Alexandre Dulaunoy	b9f1317941	Merge pull request #332 from Delta-Sierra/master ... Add APT39 & LockerGoga	2019-02-01 18:36:12 +01:00
Nils Kuhnert	0b04046d91	Added Quilted Tiger as Synonym for Patchwork/Dropping Elephant.	2019-02-01 13:17:43 +01:00
Deborah Servili	233b7f3aff	add APT39	2019-01-31 18:48:19 +01:00
Deborah Servili	b4751d396a	add LockerGoga ransomware	2019-01-30 12:07:19 +01:00
Nils Kuhnert	d45a32e9e2	Added Shadow Crane as synonym for Dark Hotel.	2019-01-30 08:22:46 +01:00
Nils Kuhnert	42ecbd801c	Added "Stardust Chollima" as synonym for Lazarus.	2019-01-29 08:36:12 +01:00
Alexandre Dulaunoy	898bdaf7f8	Merge pull request #328 from Delta-Sierra/master ... add Silence Group	2019-01-25 16:43:08 +01:00
Deborah Servili	c11a31b12a	add Silence Group	2019-01-25 16:19:51 +01:00
Thomas Dupuy	d38fb407ec	add alternative name for DarkHydrus	2019-01-21 23:14:34 -05:00
Deborah Servili	45ed56cd61	add LoJax ref	2019-01-17 10:49:23 +01:00
Deborah Servili	3bdbd6646b	add Cold River Threat actor	2019-01-17 09:44:09 +01:00
Deborah Servili	5d61a75886	fix versions	2019-01-14 16:34:28 +01:00
Deborah Servili	61093f6f07	add several ransomware and threat actors	2019-01-14 16:28:15 +01:00
Deborah Servili	90d2bf7bc1	add drakhydrus ref	2019-01-11 10:17:07 +01:00
Deborah Servili	cddfd5fcd1	TA505 threat actorand affiliates malwares	2019-01-11 09:53:08 +01:00
Deborah Servili	4547b09f49	add hidenad synonym	2019-01-10 11:53:30 +01:00
Deborah Servili	a10a417b0a	add Cryptomix variants refs	2019-01-10 10:03:22 +01:00
Deborah Servili	d3ae9e1e14	update version	2019-01-09 15:54:09 +01:00
Deborah Servili	90e3602db6	add AndroidOS_HidenAd	2019-01-09 15:33:34 +01:00
Deborah Servili	cc0bd96527	Merge branch 'master' of https://github.com/MISP/misp-galaxy	2019-01-09 14:54:33 +01:00
Christophe Vandeplas	0ba220987d	chg: [mitre] bump to latest MITRE ATT&CK dataset	2018-12-29 18:40:21 +01:00
Christophe Vandeplas	50c817a1fd	MITRE galaxy regeneration + updated migration script	2018-12-29 18:14:47 +01:00
Nils Kuhnert	1e4ebdd560	Added OilRig synonym "Helix Kitten".	2018-12-27 09:10:21 +01:00
Kafeine	5766cd68f8	zTDS	2018-12-22 11:51:40 +01:00
Kafeine	ce94cb8458	novidade,taurus	2018-12-22 10:19:52 +01:00
Deborah Servili	91b8da1e9e	add ransomwares	2018-12-20 00:37:49 +01:00
Alexandre Dulaunoy	de66295539	Merge pull request #316 from danielplohmann/master ... New name SNAKEMACKEREL for APT28 by Accenture	2018-12-19 14:06:38 +01:00
Gerard Wagener	7b347017e2	Removed Puplishing industry	2018-12-19 11:45:31 +01:00
Daniel Plohmann	cc22da1200	Microsoft alias for apt29 is YTTRIUM	2018-12-19 11:28:44 +01:00
Daniel Plohmann	c9e15b0c08	new name SNAKEMACKEREL for APT28 by Accenture	2018-12-19 10:46:58 +01:00
Alexandre Dulaunoy	27f6b19570	Merge pull request #315 from Delta-Sierra/master ... add OSX malwares	2018-12-18 17:43:34 +01:00
Deborah Servili	e6fa06f178	add OSX malwares	2018-12-18 16:26:49 +01:00
Alexandre Dulaunoy	a04790ac41	chg: [malpedia] updated to the latest version ... Ref: https://malpedia.caad.fkie.fraunhofer.de/api/get/misp	2018-12-14 19:00:18 +01:00
Deborah Servili	cb4345adf9	add operation sharpshooter	2018-12-13 13:47:54 +01:00
Deborah Servili	a9265d9858	update toll version	2018-12-13 09:44:09 +01:00
Deborah Servili	9f29f297d2	add shamoon synonym	2018-12-13 09:43:20 +01:00
Deborah Servili	3a2ac48faa	fix tool version	2018-12-12 15:39:34 +01:00
Deborah Servili	3ef58f7b21	fix exploit-kit version	2018-12-12 15:38:39 +01:00
Deborah Servili	70d68a312c	add some clusters or info	2018-12-12 15:26:54 +01:00
Deborah Servili	169d69871a	add Goden Chickens and affiliates	2018-12-12 13:52:55 +01:00
Deborah Servili	3183a4d1ff	add ransomwares	2018-12-12 09:27:27 +01:00
Christophe Vandeplas	1a65dfb9f4	chg: [mitre] re-generated galaxies and values using the MITRE sources ... and also using the MISP version to keep manually created relationships and such	2018-12-09 09:16:03 +01:00
Christophe Vandeplas	39ff6b4bbc	MITRE sorted ... While dicts were sorted, lists were not yet sorted. This current sort algo is not yet the best, but is a good start. A good sort is needed for better comparison afterwards with automated tools. In a next stage tt will also be needed in the validate_all scripts.	2018-12-09 08:32:48 +01:00
Deborah Servili	bf77e1125a	add Operation Poison Needles	2018-12-07 16:32:09 +01:00
Deborah Servili	79828d7411	add clusters	2018-12-07 13:25:56 +01:00
Deborah Servili	5a725e71ef	add several clusters	2018-12-06 16:13:51 +01:00
Alexandre Dulaunoy	ac2b5dbe05	fix: [ransomware] more duplicates removed	2018-12-02 12:00:17 +01:00
Alexandre Dulaunoy	2e8f139daa	fix: [ransomware] removed duplicate values	2018-12-02 11:54:34 +01:00
Deborah Servili	be9b4ff40f	add DNSpionage cluster	2018-11-29 16:38:06 +01:00
Deborah Servili	ef54489ea9	add everbe rasomnotes	2018-11-29 15:33:39 +01:00
Deborah Servili	6382857ee3	add ransomwares	2018-11-29 15:23:57 +01:00
Deborah Servili	c81f128d98	add ransomwares	2018-11-27 15:59:26 +01:00
Deborah Servili	6f255c0999	add Aurora Ransomware metadata	2018-11-26 09:30:54 +01:00
Deborah Servili	e5487305f1	add Aurora Ransomware synonym	2018-11-26 08:33:11 +01:00
Deborah Servili	9f5e10abf6	fix version	2018-11-23 16:16:58 +01:00
Deborah Servili	b6b1c7171a	Add Rotexy	2018-11-23 16:15:48 +01:00
Deborah Servili	dac1c08491	update version	2018-11-23 12:42:41 +01:00
Deborah Servili	b50c8bd805	add PNG Dropper	2018-11-23 10:38:36 +01:00
Deborah Servili	1be4a1cedb	add reference for Emotet/Geodo	2018-11-22 09:00:43 +01:00
Deborah Servili	2bf5d46cc4	Merge branch 'master' of https://github.com/Delta-Sierra/misp-galaxy	2018-11-22 08:59:53 +01:00
Deborah Servili	2f5031b845	add several references for Emotet and others	2018-11-22 08:37:45 +01:00
Deborah Servili	de38e7249c	Merge branch 'master' into master	2018-11-19 15:23:45 +01:00
Deborah Servili	ce61b2d2dd	update oilrig related clusters + others	2018-11-19 14:56:13 +01:00
Alexandre Dulaunoy	eec7693081	chg: uuid fixed	2018-11-18 06:31:04 +01:00
Alexandre Dulaunoy	d324a1c39b	Merge branch 'master' of https://github.com/Delta-Sierra/misp-galaxy into Delta-Sierra-master	2018-11-18 06:29:50 +01:00
Deborah Servili	eb6f6a3f49	fix rat galaxy version	2018-11-16 16:40:23 +01:00
Deborah Servili	77b556d702	jq and add ref in tool galaxy -hit version 100-	2018-11-16 13:11:55 +01:00
Deborah Servili	faa16879da	add TheOneSpy	2018-11-16 13:10:21 +01:00
Alexandre Dulaunoy	c9fd60d14b	chg: [threat-actor] INDRIK SPIDER added	2018-11-14 20:46:06 +01:00
Deborah Servili	ca33f1c2ce	Merge branch 'master' of https://github.com/MISP/misp-galaxy	2018-11-13 15:25:34 +01:00
Deborah Servili	f55277b682	add several rqansomware and HookAds campaign	2018-11-13 12:20:37 +01:00
Alexandre Dulaunoy	a505995b79	fix: [ransomware] duplicate removed	2018-11-13 07:12:36 +01:00
Alexandre Dulaunoy	51d3af11fc	chg: [ransomware] duplicate removed	2018-11-13 07:08:49 +01:00
Alexandre Dulaunoy	a4c916c916	Merge branch 'master' of github.com:MISP/misp-galaxy	2018-11-13 07:01:56 +01:00
Benoit Sevens	8f8c69134e	Update threat-actor.json ... Add LuckyMouse link	2018-11-12 13:12:14 +01:00
Deborah Servili	46dba06e40	add/update ransomawares	2018-11-09 16:34:00 +01:00
Deborah Servili	14444e4321	add several tools and refs	2018-11-08 10:39:32 +01:00
Daniel Plohmann	1f6b606f75	added APT38 as (FireEye) alias for Lazarus ... cross-references in https://content.fireeye.com/apt/rpt-apt38 suggest the link to Lazarus.	2018-11-07 17:19:50 +01:00
Deborah Servili	954264c084	Merge pull request #296 from Delta-Sierra/master ... update ransomware galaxy	2018-11-07 09:19:23 +01:00
Deborah Servili	d41a279c73	update ransomware galaxy	2018-11-05 16:23:10 +01:00
Alexandre Dulaunoy	8ae3214cd1	Merge pull request #295 from Delta-Sierra/master ... update Red Alert 2 Android Banking Trojan	2018-11-05 12:37:29 +01:00
Deborah Servili	050a94a2c0	jq fix	2018-11-05 11:01:57 +01:00
Deborah Servili	ae24b71f45	update version	2018-11-05 10:45:54 +01:00
Deborah Servili	5fd4cfa4ee	update Red Alert 2 Android Banking Trojan	2018-11-05 09:50:10 +01:00
Deborah Servili	7813a29460	Merge pull request #294 from Delta-Sierra/master ... add ransomwares	2018-10-31 16:05:18 +01:00
Deborah Servili	ad07b70a03	add ransomwares	2018-10-31 14:52:40 +01:00
Alexandre Dulaunoy	2465235817	Merge pull request #293 from Delta-Sierra/master ... add Operation EvilTraffic	2018-10-30 21:02:59 +01:00
Deborah Servili	e6b1eec329	add Chalubo botnet (+ jqallthethings)	2018-10-30 14:39:13 +01:00
Deborah Servili	41942d0daf	add Operation EvilTraffic	2018-10-30 13:28:46 +01:00
Deborah Servili	74ff4b957a	add Operation EvilTraffic	2018-10-30 13:28:27 +01:00
Nils Kuhnert	bc0bf1ca9f	Corrected DarkHotel threat actor entry	2018-10-29 09:03:30 +01:00
Deborah Servili	6e8abc0712	fix duplicate ref	2018-10-23 15:37:51 +02:00
Deborah Servili	af6020077e	add August Stealer	2018-10-23 15:25:37 +02:00
Deborah Servili	4a54044de6	add NukeSped reference	2018-10-22 14:50:57 +02:00
Deborah Servili	32d90a27e1	add GhostMiner	2018-10-22 14:46:44 +02:00
Deborah Servili	bd68ee280e	Merge branch 'master' of https://github.com/MISP/misp-galaxy	2018-10-22 11:09:37 +02:00
Deborah Servili	504570a298	add tools from https://github.com/misterch0c/shadowbroker	2018-10-22 11:06:25 +02:00
Deborah Servili	4564c5eb37	add DarkPulsar and affiliates + update some refs	2018-10-22 10:14:30 +02:00
Christophe Vandeplas	4232f0b737	chg: further categorization of galaxies	2018-10-19 14:15:20 +02:00
Christophe Vandeplas	9dddc4427c	jq	2018-10-19 10:23:09 +02:00
Christophe Vandeplas	6a9a9b7e1b	Merge remote-tracking branch 'MISP/master'	2018-10-19 10:18:45 +02:00
Christophe Vandeplas	ddccac58c8	chg: categorization of galaxies ... This allows relationships to be created.	2018-10-19 10:18:14 +02:00
Alexandre Dulaunoy	0ecf34f06e	fix: [malpedia] version	2018-10-18 11:23:48 +02:00
Alexandre Dulaunoy	83c6e6bef1	fix: [malpedia] broken reference has been fixed	2018-10-18 11:17:19 +02:00
Alexandre Dulaunoy	3771c21218	Merge pull request #287 from cvandeplas/master ... fixes an important bug in the gen_relations	2018-10-18 11:15:17 +02:00
Andras Iklody	66ded6d935	Some minor fixes	2018-10-17 20:59:08 +02:00
Christophe Vandeplas	ccebd86eed	fix: add missing relations from commit 78c1f07359	2018-10-17 19:18:16 +02:00
Christophe Vandeplas	2b24efb14a	fix: add missing relations from commit b857be9cab	2018-10-17 19:15:57 +02:00
Christophe Vandeplas	76b1429f10	fix: add missing relations from commit a81bbe288f	2018-10-17 19:13:35 +02:00
Christophe Vandeplas	84af053761	fix: add missing relations from commit 29beb01dc3	2018-10-17 19:07:01 +02:00
Christophe Vandeplas	873bc873b4	Merge remote-tracking branch 'MISP/master'	2018-10-17 18:28:44 +02:00
Christophe Vandeplas	1e90cac717	fix: intrusion is an actor and not a tool	2018-10-17 18:17:33 +02:00
Alexandre Dulaunoy	9129724343	Merge pull request #286 from Delta-Sierra/master ... Several clusters, refs, others.	2018-10-17 17:32:45 +02:00
Deborah Servili	c8cbb609a2	add GreyEnergy	2018-10-17 16:05:51 +02:00
Christophe Vandeplas	ca6c1caa8f	fix: jq all the things	2018-10-17 08:26:45 +02:00
Christophe Vandeplas	2bb4df134b	chg: removal of older unused relationships	2018-10-17 08:20:12 +02:00
Christophe Vandeplas	c51ba2e868	chg: MITRE relationships included in the respective cluster.	2018-10-17 08:08:58 +02:00
Deborah Servili	2ea560f9a7	add refs & synonyms	2018-10-15 12:02:21 +02:00
Deborah Servili	c134035a6d	add several refs	2018-10-15 11:33:37 +02:00
Deborah Servili	8d0c87c830	add several refs	2018-10-15 11:28:01 +02:00
Deborah Servili	11a27df82d	add roaming mantis group	2018-10-12 15:50:52 +02:00
Deborah Servili	b3109f6aea	Merge branch 'master' of https://github.com/MISP/misp-galaxy	2018-10-12 13:55:01 +02:00
Christophe Vandeplas	f26a4f2806	fix: minor newline difference after jq_all_the	2018-10-12 12:31:29 +02:00
Christophe Vandeplas	f14d616e22	chg: magical mapping with malpedia	2018-10-12 11:00:00 +02:00
Christophe Vandeplas	65eb66a739	fix: automatically fix missing uuids	2018-10-12 10:55:24 +02:00
Christophe Vandeplas	2fbd8ce485	jq sort keys ... Allows automation to edit the files	2018-10-12 10:35:31 +02:00
Alexandre Dulaunoy	4ff2a45cbb	chg: [malpedia] duplicate urls removed	2018-10-10 22:18:32 +02:00
Alexandre Dulaunoy	2d2749ccea	jq all the things	2018-10-10 22:12:59 +02:00
Steffen Enders	125f676d17	Updated malpedia.json to the current state ... Fetched the new malpedia galaxy cluster from https://malpedia.caad.fkie.fraunhofer.de/api/get/misp - this includes an additional ~120 new families.	2018-10-10 17:31:27 +02:00
Deborah Servili	4c367737ac	add magecart ref	2018-10-10 14:52:16 +02:00
Deborah Servili	ec6b04cf6a	add SAVEfiles ransomware	2018-10-10 14:05:24 +02:00
Deborah Servili	ed5aa150a7	update version	2018-10-09 11:35:17 +02:00
Deborah Servili	510a37084c	update matrix ransomware	2018-10-08 16:26:58 +02:00
Deborah Servili	5fb9db8282	add Triout Android Malware	2018-10-05 16:21:01 +02:00
Deborah Servili	655b1619e4	Merge branch 'master' of https://github.com/MISP/misp-galaxy	2018-10-05 16:06:25 +02:00
Deborah Servili	58a86e4e26	fix failed copy-paste	2018-10-05 15:53:03 +02:00
Alexandre Dulaunoy	8149960aa3	Merge pull request #276 from Delta-Sierra/master ... add CoalaBot + Kraken Cryptor Ransmware + refs	2018-10-05 15:52:04 +02:00
Davide Arcuri	253fbed356	Added Malpedia Galaxy ... based on malpedia git repo Co-Authored-By: garanews <garanews@users.noreply.github.com>	2018-10-05 14:30:31 +02:00
Deborah Servili	80bf2f5556	jq	2018-10-05 12:04:13 +02:00
Deborah Servili	06c4869125	add CoalaBot + Kraken Cryptor Ransmware + refs	2018-10-05 11:09:54 +02:00
Deborah Servili	9225666b92	add CoalaBot + Kraken Cryptor Ransmware + refs	2018-10-05 11:09:45 +02:00
Alexandre Dulaunoy	ecba2dbdbf	Merge pull request #274 from Delta-Sierra/master ... Refs updates	2018-10-04 17:24:57 +02:00
Deborah Servili	7cf37a57f1	add Persirai botnet	2018-10-04 14:17:16 +02:00
Deborah Servili	50fecccf39	update Torii botnet	2018-10-04 13:44:32 +02:00
Deborah Servili	138a4e6f9e	add ref for Torii botnet	2018-10-04 13:41:27 +02:00
Deborah Servili	b45b4ce0b1	add refs	2018-10-04 12:01:26 +02:00
Alexandre Dulaunoy	276992f180	Merge pull request #273 from Delta-Sierra/master ... update synonyms & attributions	2018-10-04 11:17:19 +02:00
Deborah Servili	2893d715d6	Add ZEBROCY tool	2018-10-04 10:52:40 +02:00
Deborah Servili	5bcf34a953	update regarding https://twitter.com/adulau/status/1047764090410737664	2018-10-04 10:28:22 +02:00
Deborah Servili	c78416eee1	update synonyms & attributions	2018-10-04 10:09:34 +02:00
Deborah Servili	123099cd6d	Merge pull request #272 from Delta-Sierra/master ... New clusters based on CIG Circular 66 – FASTCash ATM Cash Out Campaign	2018-10-03 16:38:33 +02:00
Deborah Servili	4d68b1c205	add NukeSped	2018-10-03 16:28:50 +02:00
Deborah Servili	3dfe8a5a34	add FASTCash	2018-10-03 15:09:14 +02:00
Alexandre Dulaunoy	63b777fc9e	Merge pull request #271 from Delta-Sierra/master ... Several updates	2018-10-01 21:51:11 +02:00
Deborah Servili	403f162451	add ref for magecart	2018-10-01 11:54:07 +02:00
Deborah Servili	35582f7ed5	new threat actors & tools	2018-10-01 11:52:40 +02:00
Alexandre Dulaunoy	2402c7d98f	chg: [tool] NOKKI added ... ref: https://researchcenter.paloaltonetworks.com/2018/09/unit42-new-konni-malware-attacking-eurasia-southeast-asia/	2018-09-29 09:01:47 +02:00
Deborah Servili	3649e03ad5	Merge branch 'master' of https://github.com/MISP/misp-galaxy	2018-09-28 16:28:16 +02:00
Deborah Servili	f828c8f79e	add synonym	2018-09-28 16:18:54 +02:00
Deborah Servili	a27534cfa1	add refs	2018-09-28 15:40:00 +02:00
Alexandre Dulaunoy	49fe210812	Merge pull request #270 from Delta-Sierra/master ... new clusters, relations and information	2018-09-28 12:57:13 +02:00
Deborah Servili	97581d7185	jq	2018-09-28 11:20:38 +02:00
Deborah Servili	fbf21487cf	new clusters and informtion	2018-09-28 11:08:21 +02:00
Alexandre Dulaunoy	46eddf1874	chg: [botnet] Torii added	2018-09-27 15:43:49 +02:00
Deborah Servili	78c1f07359	new ransomware and relations	2018-09-27 15:42:20 +02:00
Nex	014aa325b7	Added missing country values	2018-09-26 23:05:46 +02:00
Deborah Servili	29beb01dc3	add relationships on Mirai	2018-09-24 16:06:36 +02:00
Deborah Servili	f7e10cb38d	add references	2018-09-24 14:58:21 +02:00
Deborah Servili	77897be97e	add BusyGasper android spyware	2018-09-24 12:12:41 +02:00
Deborah Servili	2bc8e1e719	add Cobalt Dickensthreat actor	2018-09-24 11:51:09 +02:00
Deborah Servili	69c5fc30e5	add remcos ref	2018-09-24 11:07:17 +02:00
Deborah Servili	5a1734f170	update version	2018-09-21 11:16:36 +02:00
Deborah Servili	3c7e367cbf	fix field mistake	2018-09-21 11:14:19 +02:00
Deborah Servili	1cee9d71e0	update Lazarus group cluster	2018-09-20 15:38:32 +02:00
Deborah Servili	6d43d52731	new unnamedthreat actor	2018-09-20 13:24:11 +02:00
Deborah Servili	d0864a6531	new threat actors	2018-09-20 12:10:20 +02:00
Deborah Servili	0a724bee3d	merge	2018-09-19 16:01:46 +02:00
Deborah Servili	3f22dbd17d	add notpetya and update jadeRAT	2018-09-19 15:06:43 +02:00
Deborah Servili	058f778e61	add references	2018-09-19 09:04:04 +02:00
Alexandre Dulaunoy	79146b9d10	fix: array in synonyms (MISP accepts it but not the schema ;-)	2018-09-19 07:35:35 +02:00
Alexandre Dulaunoy	6105522453	chg: [threat-actor] Iron Group added ... ref: https://www.intezer.com/iron-cybercrime-group-under-the-scope-2/	2018-09-19 07:08:16 +02:00
Alexandre Dulaunoy	4ae0ccd192	chg: [tool] Xbash added ... ref: https://researchcenter.paloaltonetworks.com/2018/09/unit42-xbash-combines-botnet-ransomware-coinmining-worm-targets-linux-windows/	2018-09-19 07:03:56 +02:00
Alexandre Dulaunoy	8238bd5eb1	Merge pull request #263 from botherder/bahamut ... Added Bahamut to threat actors list	2018-09-19 06:46:26 +02:00
Deborah Servili	fd960bfc1b	Add magentocore malware	2018-09-18 23:10:33 +02:00
Nex	f0383758fc	Added Bahamut to threat actors list	2018-09-18 11:27:32 +02:00
Alexandre Dulaunoy	fe60e58f5b	Merge pull request #262 from botherder/mythic-leopard ... Added additional name to C-Major	2018-09-18 11:25:58 +02:00
Nex	1e502a494e	Added additional name to C-Major	2018-09-18 11:18:42 +02:00
Nex	ee7f609397	Removed duplicates	2018-09-18 11:16:00 +02:00
Alexandre Dulaunoy	88c9d8d9f6	Merge pull request #259 from botherder/country-sync ... Synced country codes with suspected state sponsor	2018-09-17 18:18:00 +02:00
Nex	be0dd94c90	Synced country codes with suspected state sponsor	2018-09-17 16:26:14 +02:00
Nex	c2ea505459	Merged Transparent Tribe in C-Major	2018-09-17 16:11:18 +02:00
Deborah Servili	ff9409e164	add blacknurse logo	2018-09-13 12:42:01 +02:00
Deborah Servili	1dcf2e50a7	add blacknurse	2018-09-13 12:33:19 +02:00
Deborah Servili	17d3959445	add Crypt0saur ransomware	2018-09-13 11:34:57 +02:00
Deborah Servili	0843fdfb23	adding and updating clusters	2018-09-13 09:03:41 +02:00
Deborah Servili	039fc91bd6	add description for sigma ransomware	2018-09-12 14:27:09 +02:00
Deborah Servili	a73424139f	fix versions	2018-09-12 14:26:44 +02:00
Deborah Servili	f107563cad	add ref for operation Applejeus	2018-09-12 09:34:16 +02:00
Deborah Servili	cb5fa5e822	fix version	2018-09-10 14:21:14 +02:00
Deborah Servili	c92dc15937	add Operation AppleJeus	2018-09-10 14:13:09 +02:00
Deborah Servili	a81bbe288f	fix some relations	2018-09-10 12:27:40 +02:00
Deborah Servili	40d5cca20f	clusters	2018-09-07 16:03:40 +02:00
Deborah Servili	addda6c545	more clusters~	2018-09-05 16:39:33 +02:00
Deborah Servili	14024efbf1	add CamuBot Banker Trojan	2018-09-05 09:19:35 +02:00
Deborah Servili	5866b660c8	jq~	2018-09-05 08:29:08 +02:00
Deborah Servili	fb328b0ef4	add ransomwares	2018-09-05 08:20:24 +02:00
Deborah Servili	0a9e91766b	Merge branch 'master' of https://github.com/MISP/misp-galaxy	2018-09-04 10:18:07 +02:00
Deborah Servili	912e91a5f5	add ransomware	2018-09-04 09:43:58 +02:00
Alexandre Dulaunoy	0acc41131d	"jq all the thing (tm)"	2018-09-01 11:58:52 +02:00
Alexandre Dulaunoy	e55f91b7ac	Merge branch 'master' of https://github.com/Kafeine/misp-galaxy into Kafeine-master	2018-09-01 11:56:10 +02:00
Kafeine	ac94f367b1	+ Fallout	2018-09-01 10:07:46 +02:00
Kafeine	21cf5ec957	Hunter EK > Active	2018-08-30 22:47:00 +02:00
Kafeine	85130f264d	Adding Underminer EK	2018-08-30 17:27:59 +02:00
Kafeine	afa3fb4cfd	Status from Terror, Bingo and Astrum	2018-08-30 17:08:37 +02:00
Kafeine	67e9ef2719	Adapting to modification from Misp repository	2018-08-30 17:04:08 +02:00
Deborah Servili	f14dd27315	add cfr data	2018-08-27 15:29:16 +02:00
Deborah Servili	d1940b6a69	Update microsoft-activity-group.json version	2018-08-27 08:38:22 +02:00
Deborah Servili	9efca2fd79	more clusters ... Signed-off-by: Deborah Servili <deborah.servili@gmail.com>	2018-08-24 16:11:16 +02:00
Deborah Servili	c943d1c9d1	add APT28/STRONTIUM refs	2018-08-22 09:59:40 +02:00
Deborah Servili	afea4ca5e7	Merge branch 'master' of https://github.com/MISP/misp-galaxy	2018-08-22 09:03:26 +02:00
Alexandre Dulaunoy	f8c5640613	chg: [tool] biscuit biscvt tool BISKVIT ... ref: https://www.fortinet.com/blog/threat-research/russian-army-exhibition-decoy-leads-to-new-biskvit-malware.html	2018-08-21 10:48:47 +02:00
Alexandre Dulaunoy	cd76f19f52	chg: [threat-actor] APT-C-35 actor added ... ref: https://ti.360.net/blog/articles/latest-activity-of-apt-c-35/	2018-08-15 20:25:57 +02:00
Deborah Servili	3940964956	update Dharma Ransomware	2018-08-14 15:56:09 +02:00
Deborah Servili	d5f35d94dc	version update	2018-08-14 12:21:50 +02:00
Deborah Servili	f3c02ad195	merge black ruby duplicate (delete the newer)	2018-08-14 12:20:29 +02:00
Deborah Servili	31142b41ac	merge	2018-08-14 12:09:21 +02:00
Deborah Servili	a28c50203e	fix	2018-08-14 12:07:12 +02:00
Deborah Servili	2081dc1627	resolve merge confilct -I hope-	2018-08-14 12:06:42 +02:00
Deborah Servili	4e911b2c17	Merge branch 'master' into master	2018-08-14 11:43:59 +02:00
Deborah Servili	7829e0fab6	fix typo and missing uuid	2018-08-14 11:41:06 +02:00
Deborah Servili	a646a835fe	add Rosenbridge backdoor	2018-08-14 10:09:26 +02:00
Christophe Vandeplas	88162aa44e	chg: [mapping] Generated automatic mapping between clusters	2018-08-14 09:35:22 +02:00
Christophe Vandeplas	5478f0aa45	no change: dump files with sort_keys=True ... This is needed to keep better track of the changes when other tools load and save the json files.	2018-08-13 17:06:29 +02:00
Christophe Vandeplas	021107e597	fix: [threat-actor] added missing uuids	2018-08-13 17:00:40 +02:00
Deborah Servili	b100b0cedd	add KEYPASS ransomware	2018-08-13 15:50:09 +02:00
Deborah Servili	f1dcb05576	Merge pull request #246 from Delta-Sierra/master ... add Skygofree android spyware	2018-08-13 12:28:30 +02:00
Deborah Servili	56fe9eb63c	add Skygofree android spyware	2018-08-13 12:20:16 +02:00
Alexandre Dulaunoy	9059a85eed	chg: [tool] KEYMARBLE malware added ... ref: https://www.us-cert.gov/ncas/analysis-reports/AR18-221A	2018-08-11 16:14:39 +02:00
Deborah Servili	27805ca768	add tools used by SamSam	2018-08-09 15:55:36 +02:00
Deborah Servili	597e7bacb9	add ransomwares	2018-08-09 13:53:04 +02:00
Alexandre Dulaunoy	6620b5575a	fix: [threat-actor] related is an array of JSON objects	2018-08-09 07:53:42 +02:00
Alexandre Dulaunoy	1429b60555	chg: [threat-actor] jq document	2018-08-08 16:38:39 +02:00
Deborah Servili	ebc7287e14	update schema	2018-08-08 16:12:29 +02:00
Deborah Servili	33a300b773	tags is an array	2018-08-08 15:59:44 +02:00
Deborah Servili	b857be9cab	relationship system - v2	2018-08-08 15:51:22 +02:00
Deborah Servili	050a864be0	update some clusters and try to add a relationship system	2018-08-08 14:20:38 +02:00
Deborah Servili	84adb50f0f	add RedAlpha campaigns	2018-08-07 13:55:05 +02:00
Deborah Servili	b7de06ffcc	delete forgotten conflict marker	2018-08-06 08:49:44 +02:00
Deborah Servili	010df0a2b6	resolve merge conflict	2018-08-06 08:48:21 +02:00
Deborah Servili	def23775e5	resolve merge conflict	2018-08-06 08:45:03 +02:00
Nils Kuhnert	ab49b58b02	Added DarkHydrus	2018-08-06 08:33:34 +02:00
Nils Kuhnert	4654f51889	Two small typos	2018-08-05 15:09:38 +02:00
Deborah Servili	e5b185deee	Merge branch 'master' into master	2018-08-03 16:11:16 +02:00
Deborah Servili	35aa8ba34e	delete duplicate gorgon group	2018-08-03 16:08:43 +02:00
Deborah Servili	a9a71ef84c	more clusters	2018-08-03 15:58:54 +02:00
Alexandre Dulaunoy	b3701b6b34	chg: [threat-actor] The Gordon Group added ... ref: https://researchcenter.paloaltonetworks.com/2018/08/unit42-gorgon-group-slithering-nation-state-cybercrime/	2018-08-03 10:26:52 +02:00
Alexandre Dulaunoy	a0dfdd65ae	chg: [rat] Hallaj PRO Rat added ... ref: https://securelist.com/attacks-on-industrial-enterprises-using-rms-and-teamviewer/87104/ misp-event: 5b63f5e4-bf24-4f46-8340-48fc02de0b81	2018-08-03 08:34:55 +02:00
Alexandre Dulaunoy	3da005a3f3	fix: jq all the things(tm)	2018-08-02 15:15:47 +02:00
Alexandre Dulaunoy	1fdf47d509	fix: [threat-actor] synonyms are always arraus	2018-08-02 15:13:18 +02:00
Alexandre Dulaunoy	ece56dff38	chg: [threat-actor] leafminer - RASPITE added	2018-08-02 15:08:39 +02:00
Alexandre Dulaunoy	c232b3dd5a	chg: [tool] added based on Carbanak tooling description from Crowdstrike ... ref: https://www.crowdstrike.com/blog/arrests-put-new-focus-on-carbon-spider-adversary-group/	2018-08-02 10:30:47 +02:00
Alexandre Dulaunoy	43fa95df7a	chg: [threat-actor] new reference to CARBON SPIDER/Carbanak	2018-08-02 10:03:18 +02:00
Alexandre Dulaunoy	4cf84858e3	chg: [tool] Bisonal malware added (new variant with encryption capabilities)	2018-07-31 15:26:11 +02:00
Deborah Servili	e7d2541929	add Kronos Banking Trojan	2018-07-25 09:46:46 +02:00
Deborah Servili	381f7e4a19	Add CFR.org metadata into the galaxy - part 2	2018-07-25 09:08:16 +02:00
Deborah Servili	28456545be	Merge https://github.com/MISP/misp-galaxy	2018-07-16 09:16:13 +02:00
Alexandre Dulaunoy	98db303047	chg: [threat-actor] The Big Bang campaign/group added	2018-07-10 08:49:00 +02:00
Alexandre Dulaunoy	43a2c7f0ef	chg: [botnet] Xor DDoS added	2018-07-09 14:25:19 +02:00
raw-data	77cfaa8221	[add] new backdoor galaxy and cluster	2018-07-06 20:09:52 +01:00
Raphaël Vinot	e5939e3248	Merge branch 'master' of github.com:MISP/misp-galaxy	2018-07-06 15:25:09 +02:00
Raphaël Vinot	6f7a7921ae	new: Add entries from Bambenek Consulting	2018-07-06 15:25:05 +02:00