Deborah Servili
130ad39d4c
add macOS malwares
2018-01-11 15:19:18 +01:00
Deborah Servili
db8ae5fbfe
update OilRig threat actor
2017-12-18 09:26:15 +01:00
Deborah Servili
5cac510818
update threat actor galaxy
2017-12-13 14:57:38 +01:00
steffenenders
96749fd350
Fixed mixed up description/value for MuddyWater
2017-11-19 19:23:10 +01:00
Deborah Servili
e2dbd5a9a3
add MuddyWater + Update HIDDEN COBRA and update its tools
2017-11-17 15:41:44 +01:00
Deborah Servili
09bab156c7
update version number
2017-11-09 12:30:32 +01:00
Deborah Servili
3369270bdb
add Sowbug group
2017-11-08 15:05:37 +01:00
Fredrik Borg
72d8bfc28a
fix-iso-code-3
2017-11-07 14:15:40 +01:00
Fredrik Borg
afc4972e25
fix iso codes
2017-11-07 14:04:04 +01:00
Fredrik Borg
53a6a8d26f
remove duplicate references
2017-11-07 13:34:44 +01:00
Siri Bromander
bf0d1d27ca
Updated with data from APT Groups and Operations
2017-11-07 11:07:23 +01:00
Fredrik Borg
26192bf39a
Bump version number
2017-11-01 18:14:20 +01:00
Fredrik Borg
51f86d5382
Use standard (2 digits) ISO codes for all countries
2017-11-01 12:38:21 +01:00
Daniel Plohmann
02710714bd
add APT33 as identified by FireEye
2017-09-29 11:43:38 +02:00
Daniel Plohmann
355a230182
added FIN7 as alias for anunak
2017-08-01 13:29:57 +02:00
Daniel Plohmann
b4e49823dd
merged barium into axiom (only one redundant reference given)
2017-08-01 13:13:56 +02:00
Raphaël Vinot
282c3a8101
Merge pull request #74 from Delta-Sierra/master
...
adding clusters based on MISP data
2017-07-26 11:41:00 +02:00
Deborah Servili
7e59f14dca
update Spring Dragon threat actor
2017-07-26 09:21:36 +02:00
Raphaël Vinot
8598210895
Remove empty string.
2017-07-25 18:02:11 +02:00
a295d40589
Cobalt gang added
2017-07-08 10:16:11 +02:00
c0786dfb22
El Machete added
2017-06-26 11:44:46 +02:00
dd2a51037a
jq all ;-)
2017-06-20 20:34:04 +02:00
Jaime
f92b9cb710
Added FIN8 actor
2017-06-20 11:28:32 -07:00
David André
3dfbb7e1d0
Added Symantec alias for sofacy
2017-06-16 11:22:17 +02:00
danielplohmann
5724f19873
Merge branch 'master' into hidden-cobra-lazarus
2017-06-15 14:13:50 +02:00
Daniel Plohmann (jupiter)
f7963c9a8c
added Hidden Cobra as alias for Lazarus Group
2017-06-15 14:09:29 +02:00
Daniel Plohmann
ff4f428bc1
added ELECTRUM to threat-actor.json (afaik not confirmed as an alias atm)
2017-06-13 13:25:16 +02:00
Daniel Plohmann
9924a8875c
added PLATINUM to threat-actor.json (afaik not confirmed as an alias atm)
2017-06-13 13:21:10 +02:00
91663c4793
Merge pull request #58 from danielplohmann/wildneutron
...
added WildNeutron (Morph, Butterfly, Sphinx Moth)
2017-06-06 10:02:56 +02:00
Deborah Servili
aa34718b13
edit threat actor - should fix #59 and #60
2017-06-06 08:40:29 +02:00
Daniel Plohmann (jupiter)
068dc40a78
added WildNeutron (Morph, Butterfly, Sphinx Moth)
2017-06-05 19:13:27 +02:00
David André
83833f257c
Added synonyms for APT10 and one for APT1
2017-06-02 10:26:45 +02:00
fab863933e
SilverTerrier added
2017-05-30 08:40:26 +02:00
5da5df6384
APT32 added
2017-05-15 09:18:28 +02:00
Déborah Servili
531595c944
##comma##
2017-04-14 14:52:23 +02:00
Déborah Servili
54512eb840
Add some tools/threat actor
2017-04-14 14:48:39 +02:00
bbf6716c73
Longhorn (CIA) added
2017-04-10 20:22:57 +02:00
nyx0
78cdb10aae
Add new Sednit name according to https://www.secureworks.com/research/iron-twilight-supports-active-measures
2017-03-31 09:28:50 -04:00
chrisdoman
dbf989c742
Added descriptions and reference to threat-actor json
2017-03-22 12:52:05 +00:00
Raphaël Vinot
e1b5701351
JQ all the things
2017-03-16 17:31:43 +01:00
Raphaël Vinot
0d8d265319
Fix typo.
2017-03-16 17:27:17 +01:00
CERT-Bund
4112a041f7
Added groups, joined groups, added synonyms (see extended description)
...
Added: HammerPanda, Barium, Infy, Sima, Groundbait
Joined: StrongPity and Promethium
Synonyms: Lead as Winnti, Moonlight as MoleRats, FalloutTeam as DarkHotel, DustStorm as StonePanda, Skipper and Popeye as Pacifier
2017-03-16 17:02:55 +01:00
e002e62204
missing \n at the end of the file
2017-03-01 14:55:45 +01:00
Chris Doman
9e5c983a65
Ran jq
2017-03-01 13:24:00 +00:00
Chris Doman
e934f88b3b
Added references
...
Mostly added references to existing groups
Capitalised DarkHotel, put a space in APT30 default name (the others
had that)
2017-03-01 12:53:52 +00:00
a224c7ce5e
add: Gamaredon Group added
2017-02-28 09:17:33 +01:00
Christophe Vandeplas
048b831f53
minor correction
2017-02-27 11:00:48 +01:00
Thanat0s
3774f05237
Somes alias fetch from : https://attack.mitre.org/wiki/Groups
2017-02-26 23:07:42 +01:00
Raphaël Vinot
7db66e05dd
Strict schema, update clusters accordingly
2017-02-14 11:34:59 +01:00
Raphaël Vinot
910398fe76
Fix validation, remove duplicate.
2017-02-13 18:52:54 +01:00