Deborah Servili
d01cfb8d1e
Add SOREBRECT ransomware
2017-06-21 08:56:03 +02:00
dd2a51037a
jq all ;-)
2017-06-20 20:34:04 +02:00
Jaime
f92b9cb710
Added FIN8 actor
2017-06-20 11:28:32 -07:00
Deborah Servili
aa25157403
alwaaays moooore RAT
2017-06-20 12:26:16 +02:00
Deborah Servili
5f5b71aa93
add rats from https://www.lifewire.com/free-remote-access-software-tools-2625161
2017-06-20 11:16:36 +02:00
Deborah Servili
57f6c2414d
add rats
2017-06-20 09:19:19 +02:00
951ed3b9ed
jq
2017-06-16 22:18:51 +02:00
3219d5de5c
Merge pull request #67 from Delta-Sierra/master
...
add some rats and tools
2017-06-16 22:18:14 +02:00
Deborah Servili
91cf7b4cee
add some rats sand tools
2017-06-16 15:34:20 +02:00
David André
3dfbb7e1d0
Added Symantec alias for sofacy
2017-06-16 11:22:17 +02:00
danielplohmann
5724f19873
Merge branch 'master' into hidden-cobra-lazarus
2017-06-15 14:13:50 +02:00
Daniel Plohmann (jupiter)
f7963c9a8c
added Hidden Cobra as alias for Lazarus Group
2017-06-15 14:09:29 +02:00
Daniel Plohmann
ff4f428bc1
added ELECTRUM to threat-actor.json (afaik not confirmed as an alias atm)
2017-06-13 13:25:16 +02:00
Daniel Plohmann
9924a8875c
added PLATINUM to threat-actor.json (afaik not confirmed as an alias atm)
2017-06-13 13:21:10 +02:00
Deborah Servili
e95b0fb6e1
Merge https://github.com/MISP/misp-galaxy
2017-06-09 09:06:23 +02:00
Deborah Servili
0755e11c02
update rat
2017-06-09 09:01:33 +02:00
91663c4793
Merge pull request #58 from danielplohmann/wildneutron
...
added WildNeutron (Morph, Butterfly, Sphinx Moth)
2017-06-06 10:02:56 +02:00
Deborah Servili
aa34718b13
edit threat actor - should fix #59 and #60
2017-06-06 08:40:29 +02:00
Daniel Plohmann (jupiter)
068dc40a78
added WildNeutron (Morph, Butterfly, Sphinx Moth)
2017-06-05 19:13:27 +02:00
8796017151
Merge pull request #56 from elhoim/patch-1
...
Added synonyms for APT10 and one for APT1
2017-06-02 16:41:20 +02:00
Deborah Servili
bf8c050b8b
jq
2017-06-02 15:52:43 +02:00
Deborah Servili
17c0ffb255
add RAT listed in https://github.com/kevthehermit/RATDecoders
2017-06-02 15:40:06 +02:00
David André
83833f257c
Added synonyms for APT10 and one for APT1
2017-06-02 10:26:45 +02:00
Deborah Servili
c9ede88868
add rat galaxy
2017-05-31 16:39:19 +02:00
fab863933e
SilverTerrier added
2017-05-30 08:40:26 +02:00
dcfbfdfe47
jq all
2017-05-26 14:59:34 +02:00
d95351a72a
Merge branch 'master' of github.com:MISP/misp-galaxy
2017-05-26 14:52:50 +02:00
b562e6b729
Emotet/Geodo added
2017-05-26 14:52:35 +02:00
Deborah Servili
14835361f7
jq 'n ##COMMA##
2017-05-18 14:01:49 +02:00
Deborah Servili
7fee4f3a1b
add Uiwik ransomware
2017-05-18 13:59:47 +02:00
Deborah Servili
3b93a773e5
add synonym and cleaning
2017-05-18 11:18:32 +02:00
Deborah Servili
2c4256f42c
merge hiddentear & cryptear data
2017-05-18 10:18:45 +02:00
Deborah Servili
bc4f1a93ab
add synonym - half done
2017-05-18 09:19:48 +02:00
Deborah Servili
6859b2fb4e
add synonym - step 1
2017-05-17 12:14:10 +02:00
Deborah Servili
c501517e9a
add synonym to hancitor
2017-05-17 12:00:26 +02:00
Deborah Servili
66ca4c6f2a
add jaff Ransomwarejq-ed
2017-05-17 10:10:27 +02:00
Deborah Servili
44857c2ac3
add jaff Ransomware
2017-05-17 10:08:53 +02:00
3e62608d3a
Remove duplicate ref
2017-05-16 14:52:53 +02:00
e5faf4fba7
Input from Deborah incorporated
2017-05-16 14:47:16 +02:00
5da5df6384
APT32 added
2017-05-15 09:18:28 +02:00
bd18dc2f4b
WannaCry added
2017-05-14 16:37:37 +02:00
Kafeine
2182a790a3
Fix
2017-05-11 11:31:22 +01:00
Kafeine
6d90c3e691
+Bingo -- Hunter > Retired
2017-05-11 11:30:50 +01:00
248eecaef0
Kazuar: Multiplatform Espionage Backdoor with API Access added
2017-05-04 17:22:28 +02:00
Kafeine
32b0e6f95d
Update tds.json
2017-05-04 11:48:49 +01:00
f5d356523e
Duplicate references removed
2017-05-03 15:59:24 +02:00
ea611bcded
Merge pull request #49 from Delta-Sierra/master
...
reformat ransomware galaxy
2017-05-03 15:56:39 +02:00
Déborah Servili
9ff5f58978
add source to please the schema~
2017-05-03 15:21:58 +02:00
Déborah Servili
0a9814d6eb
change sources for authors
2017-05-03 15:15:34 +02:00
Déborah Servili
2dc6982fae
jq on ransomware
2017-05-03 15:09:23 +02:00
Déborah Servili
fb5eb32a0e
managing duplicate
2017-05-03 15:01:20 +02:00
Déborah Servili
8b10e3aaee
managing duplicate
2017-05-03 14:24:53 +02:00
Déborah Servili
24c6c51e4d
reformat ransomware galaxy - including http://pastebin.com/raw/GHgpWjar
2017-05-02 14:16:21 +02:00
Déborah Servili
82f4a633c0
reformat ransomware galaxy
2017-05-02 10:00:00 +02:00
35b94437e8
REDLEAVES malware added
2017-04-28 08:32:34 +02:00
Déborah Servili
c08cc781f5
update tools
2017-04-26 12:23:57 +02:00
3e4973f688
Feodo added
2017-04-25 19:56:06 +02:00
Déborah Servili
6267681362
add Cardinal RAT
2017-04-24 16:04:52 +02:00
07c82e15a5
FlexiSpy
2017-04-23 23:05:12 +02:00
52edcb1929
shadow broker leak of NSA tools from https://github.com/misterch0c/shadowbroker
2017-04-15 21:22:32 +02:00
6149740cd4
First batch of shadow broker leak (NSA name of exploit and tools) from
...
https://github.com/misterch0c/shadowbroker
2017-04-15 19:40:54 +02:00
3595d04b35
jq all
2017-04-14 16:28:43 +02:00
fa49ca127c
Merge pull request #40 from Kafeine/master
...
Updated.
2017-04-14 16:27:15 +02:00
Déborah Servili
7163e8c58c
add synonyms for Da Vinci RCS
2017-04-14 15:51:39 +02:00
Déborah Servili
531595c944
##comma##
2017-04-14 14:52:23 +02:00
Déborah Servili
54512eb840
Add some tools/threat actor
2017-04-14 14:48:39 +02:00
Kafeine
9e5db0be8c
fix
2017-04-14 13:47:16 +01:00
Kafeine
321044cdac
Update Terror
2017-04-14 13:46:59 +01:00
Kafeine
777fc1cde3
Updated
...
Blaze <-> Terror - Updated Sundown and Nebula status
2017-04-14 13:44:03 +01:00
Déborah Servili
9412519502
correct copypasta mistake
2017-04-12 16:11:57 +02:00
Déborah Servili
bbc2b79a5e
add tools from https://www.fireeye.com/blog/threat-research/2017/04/apt10_menupass_grou.html
2017-04-12 16:07:48 +02:00
Déborah Servili
8a645f42c9
update tool
2017-04-11 16:06:27 +02:00
Déborah Servili
7b5aaaeff2
json fix
2017-04-11 14:18:29 +02:00
Déborah Servili
eee2c6d6b5
update tool's galaxy using http://contagiodump.blogspot.lu/2013/03/mandiant-apt1-samples-categorized-by.html
2017-04-11 14:09:44 +02:00
bbf6716c73
Longhorn (CIA) added
2017-04-10 20:22:57 +02:00
ab5b73a3cd
Sathurbot added
2017-04-06 20:49:53 +02:00
8c09223477
The product from NSO Group Technologies added to the list of tools.
...
The Pegasus name is used as synonym of Chrysaor ;-)
2017-04-04 20:42:08 +02:00
0578d7b7b1
The mysterious ZIRCONIUM activity group added
2017-04-03 19:44:36 +02:00
nyx0
78cdb10aae
Add new Sednit name according to https://www.secureworks.com/research/iron-twilight-supports-active-measures
2017-03-31 09:28:50 -04:00
b3f1069686
Trochilus and MoonWind RATs added
2017-03-30 15:01:23 +02:00
f0e42a1818
KHRAT added
2017-03-29 16:37:31 +02:00
chrisdoman
dbf989c742
Added descriptions and reference to threat-actor json
2017-03-22 12:52:05 +00:00
Raphaël Vinot
1ed0558c07
Merge branch 'master' into master
2017-03-16 17:38:59 +01:00
Raphaël Vinot
e1b5701351
JQ all the things
2017-03-16 17:31:43 +01:00
Raphaël Vinot
0d8d265319
Fix typo.
2017-03-16 17:27:17 +01:00
CERT-Bund
4112a041f7
Added groups, joined groups, added synonyms (see extended description)
...
Added: HammerPanda, Barium, Infy, Sima, Groundbait
Joined: StrongPity and Promethium
Synonyms: Lead as Winnti, Moonlight as MoleRats, FalloutTeam as DarkHotel, DustStorm as StonePanda, Skipper and Popeye as Pacifier
2017-03-16 17:02:55 +01:00
71ad9099c4
IMEIJ added
2017-03-13 13:59:46 +01:00
Kafeine
73a82418df
Empire status, Nebula, Blaze/Terror
2017-03-02 21:29:19 +00:00
e002e62204
missing \n at the end of the file
2017-03-01 14:55:45 +01:00
Chris Doman
9e5c983a65
Ran jq
2017-03-01 13:24:00 +00:00
Chris Doman
e934f88b3b
Added references
...
Mostly added references to existing groups
Capitalised DarkHotel, put a space in APT30 default name (the others
had that)
2017-03-01 12:53:52 +00:00
a224c7ce5e
add: Gamaredon Group added
2017-02-28 09:17:33 +01:00
Christophe Vandeplas
048b831f53
minor correction
2017-02-27 11:00:48 +01:00
Thanat0s
07cc13feb8
remove duplicate of ratdecode import
2017-02-27 00:38:39 +01:00
Thanat0s
9eb2d097f2
add a bunch of rat from ratdecoder list
2017-02-27 00:23:56 +01:00
Thanat0s
849ca3ebbc
Pimp Epic turla
2017-02-26 23:38:50 +01:00
Thanat0s
f1ea577e95
pimp and agreggate turla
2017-02-26 23:24:51 +01:00
Thanat0s
3774f05237
Somes alias fetch from : https://attack.mitre.org/wiki/Groups
2017-02-26 23:07:42 +01:00
Thanat0s
2d658a6577
pimp comrat
2017-02-26 22:53:51 +01:00
Thanat0s
b865342f2e
pimp xneteagle
2017-02-26 22:47:16 +01:00
