Commit graph

1431 commits

Author SHA1 Message Date
3841447e16
Merge pull request #434 from r0ny123/patch-1
added microsoft naming for the groups
2019-08-10 18:52:26 +02:00
Thomas Dupuy
df5c9057a1 add synonyme for Turla 2019-08-09 17:34:22 -04:00
Carlos Borges
d96dc39c5a
Adding Amavaldo Banking Trojan 2019-08-09 18:00:37 -03:00
Rony
feac39db6b
added microsoft naming for the groups 2019-08-09 22:19:09 +05:30
Thomas Dupuy
320e298549 update victims 2019-08-09 10:45:10 -04:00
Thomas Dupuy
1988662ee5 add APT41 2019-08-09 10:24:06 -04:00
Deborah Servili
e239619d15
jq 2019-08-06 15:42:20 +02:00
Deborah Servili
53df0908c7
update version 2019-08-06 15:34:23 +02:00
Deborah Servili
4bef48b33e
add Amavaldo 2019-08-06 13:28:32 +02:00
Nils Kuhnert
17925f3e10
Remove local file link :) 2019-08-03 18:55:00 +02:00
Deborah Servili
21318cdf3d
fix building mistakes 2019-08-02 16:28:32 +02:00
7913adad61
chg: [threat-actor] rollback as discussed by chat with Andras until version 2.0 2019-08-02 16:08:40 +02:00
Andras Iklody
984be50396
lowercased value field for DarkHotel 2019-08-02 15:40:31 +02:00
17452d31a7
chg: [att&ck] July ATT&CK release included in MISP galaxy 2019-08-01 15:51:03 +02:00
a401ff7405
Merge branch 'master' into patch-13 2019-08-01 08:52:27 +02:00
Daniel Plohmann
0367e16ce0
adding secureworks actor names for energetic bear and teamspy 2019-07-31 14:35:09 +02:00
Daniel Plohmann
a4a72d0698
adding Proofpoint's TA428 2019-07-31 14:08:50 +02:00
Deborah Servili
08f713cb7d add tld
Signed-off-by: Deborah Servili <deborah.servili@gmail.com>
2019-07-26 16:22:45 +02:00
Deborah Servili
427b424cf7
rename galaxy target-location -> target-information 2019-07-19 13:49:43 +02:00
Deborah Servili
294a8bf6a2
new galaxy target-location [DRAFT] 2019-07-19 10:30:47 +02:00
Deborah Servili
2861d2d78c
jq 2019-07-16 10:13:10 +02:00
Deborah Servili
ea4d8a2d42
add SWEED threat actor 2019-07-16 10:03:07 +02:00
Deborah Servili
ca45f0deec
jq 2019-06-24 10:22:38 +02:00
Deborah Servili
32ffc98e5d
add Felipe Trojan 2019-06-24 10:20:29 +02:00
9517c8b878
chg: [threat-actor] version updated 2019-06-20 17:58:35 +02:00
8c90f7231c
chg: [threat-actor] duplicated refs removed 2019-06-20 17:35:35 +02:00
5e9d075ae5
chg: [threat-actor] synonyms fixed 2019-06-20 17:30:01 +02:00
195406cc6b
chg: [threat-actor] jq everything 2019-06-20 17:27:55 +02:00
d018519700
Merge branch 'master' of https://github.com/Delta-Sierra/misp-galaxy 2019-06-20 17:23:04 +02:00
Deborah Servili
30f042211b
fix duplicate 2019-06-20 16:35:49 +02:00
Deborah Servili
a984786c8b
update threat actor galaxy 2019-06-20 16:25:23 +02:00
Rony
7afb9083b2
Update threat-actor.json 2019-06-19 23:29:35 +05:30
Deborah Servili
4bd37e2b2d
update threat actor galaxy 2019-06-19 16:38:04 +02:00
Deborah Servili
52e51833de
update threat actor galaxy 2019-06-18 16:05:49 +02:00
Deborah Servili
431e7a36c1
update threat actor galaxy 2019-06-17 16:36:42 +02:00
Deborah Servili
b966369933
##COMMA## 2019-06-14 16:35:55 +02:00
Deborah Servili
1e5292d999
fix duplicate 2019-06-14 16:21:33 +02:00
Deborah Servili
ead217eb28
Update version 2019-06-14 16:11:02 +02:00
Deborah Servili
98f0572d51
update threat actor galaxy 2019-06-14 16:06:09 +02:00
Deborah Servili
b040f9f57b
fix duplicate and links update (APT34) 2019-06-14 08:41:38 +02:00
Deborah Servili
2001652dae
fix duplicate 2019-06-14 08:28:44 +02:00
Deborah Servili
20e77afcc3
update threat actor galaxy 2019-06-13 16:19:21 +02:00
Deborah Servili
11c2f43c9f
tryto fix duplicate 2019-06-13 11:26:42 +02:00
Deborah Servili
e4245ee991
update threat actor galaxy 2019-06-12 16:25:24 +02:00
Deborah Servili
5a3d7e816f
fix duplicate 2019-06-12 09:24:05 +02:00
Deborah Servili
01fade422f Merge branch 'master' of https://github.com/MISP/misp-galaxy 2019-06-12 09:20:38 +02:00
Deborah Servili
1ba7f19ca2
update threat actor galaxy 2019-06-11 16:14:58 +02:00
Deborah Servili
347ed5d529
jq 2019-06-11 15:57:21 +02:00
Deborah Servili
79f11de6db
update threat actor galaxy 2019-06-11 15:54:39 +02:00
Deborah Servili
d6b458520b
update threat actor galaxy 2019-06-11 11:57:04 +02:00
8c69da1fd9
Merge pull request #413 from Delta-Sierra/master
update threat actor galaxy
2019-06-07 20:14:49 +02:00
Deborah Servili
1f2e59addb
update Threat actor galaxy 2019-06-07 16:34:43 +02:00
Deborah Servili
185763a63a
update threat actor 2019-06-06 16:34:09 +02:00
Deborah Servili
b809b9cfbb
update threat actor darkhotel (nemim might be a typo) 2019-06-06 11:58:19 +02:00
Deborah Servili
189c3066a5
update threat actor 2019-06-04 16:32:39 +02:00
3948cc24c1
Merge pull request #412 from Delta-Sierra/master
update threat actors and tools
2019-06-04 09:56:47 +02:00
Deborah Servili
468800ed59
FlawedAmmy RAT 2019-06-04 09:10:44 +02:00
Deborah Servili
a6c9d335ee
fix multiple refs 2019-06-04 08:52:34 +02:00
Deborah Servili
b47863f1c1
update threat actors 2019-05-29 16:18:50 +02:00
Deborah Servili
f48167ce77
update threat actors 2019-05-29 15:34:20 +02:00
Deborah Servili
f4cf3464ce
update threat actors and tools 2019-05-28 16:05:54 +02:00
9eac2a3923
Merge pull request #411 from Delta-Sierra/master
update threat-actor galaxy
2019-05-28 09:37:14 +02:00
Deborah Servili
bf19ed9d8d
fix merge mistakes 2019-05-28 09:26:24 +02:00
Deborah Servili
77d20739db
update threat actor 2019-05-28 09:24:29 +02:00
Deborah Servili
940762e0c5
update threat actor 2019-05-28 09:22:26 +02:00
Deborah Servili
0bb1420ab7
update threat-actor galaxy 2019-05-27 16:38:01 +02:00
Deborah Servili
af6241fd20
update Anchor Panda Threat Actor 2019-05-27 11:47:05 +02:00
555a87275f
Merge pull request #409 from rmkml/master
Add GetCrypt Ransomware
2019-05-25 13:56:30 +02:00
rmkml
de9cc6898a Add GetCrypt Ransomware 2019-05-25 13:30:15 +02:00
3420e50bfd
Merge pull request #408 from rmkml/master
Add Phobos Ransomware
2019-05-25 08:42:26 +02:00
1ece51ed48
chg: [branded_vulnerability] version updated 2019-05-25 08:41:33 +02:00
rmkml
6f140ce358
Merge branch 'master' into master 2019-05-25 00:03:34 +02:00
Deborah Servili
0d97013022
add BlueKeep 2019-05-24 15:55:58 +02:00
Deborah Servili
9d8d5ce1c8
fix ransomware ransomnotes 2019-05-23 16:23:09 +02:00
Deborah Servili
f5a7efaadc
jq 2019-05-23 12:39:53 +02:00
Deborah Servili
b4e4d2e539
rework of ransomware galaxy 2019-05-23 12:39:33 +02:00
Daniel Plohmann
1cc0137c38
adding TA542 to MUMMY SPIDER (emotet) 2019-05-17 17:36:57 +02:00
Rony
380006ecbb
merging Pacifier & Turla 2019-05-16 23:57:49 +05:30
32af463dd1
Merge pull request #403 from Delta-Sierra/master
add Reaver and probably related tools
2019-05-16 17:04:14 +02:00
Deborah Servili
9f801122da
add Reaver and probably related tools 2019-05-16 15:45:03 +02:00
Daniel Plohmann
a20f7fbe91
adding APT31/ZIRCONIUM 2019-05-15 22:43:33 +02:00
rmkml
cd58833770 Add Phobos Ransomware 2019-05-15 21:02:32 +02:00
Raphaël Vinot
59869bf145 fix: o365-exchange-techniques (duplicate values, duplicate UUIDs) 2019-05-13 11:15:38 +02:00
Deborah Servili
f8e356e042
Merge pull request #400 from Delta-Sierra/master
add Sodinokibi
2019-05-13 08:50:26 +02:00
678b2a5621
chg: [o365-exchange-techniques] Actions on Intent added (finalized) 2019-05-12 18:25:01 +02:00
5d1565152c
chg: [o365-exchange-techniques] Expansion added (WiP) 2019-05-12 18:19:00 +02:00
ee0f793e49
chg: [o365-exchange-techniques] Persistence kill-chain added (WiP) 2019-05-12 17:54:53 +02:00
3a75c6a3df
chg: [o365-exchange-techniques] Compromise row added (WiP) 2019-05-12 12:07:30 +02:00
a2df5c46d8
chg: [o365-exchange-techniques] [WiP] based on John Lambert matrix techniques 2019-05-12 09:51:41 +02:00
Rony
7c0ea4949a
Update threat-actor.json 2019-05-12 11:11:09 +05:30
Deborah Servili
5bbb0ab53d
add Sodinokibi 2019-05-08 15:54:37 +02:00
Raphaël Vinot
82ebbc6612 fix: UUID issues 2019-05-07 12:09:39 +02:00
Raphaël Vinot
988586fde0 fix: Duplicate values, typos. 2019-05-06 17:17:16 +02:00
36f317b4a8
Merge pull request #395 from Delta-Sierra/master
add Scranos
2019-05-03 16:22:20 +02:00
Deborah Servili
ad00477c87
add Scarnos 2019-05-03 15:55:19 +02:00
6aa7c39714
Merge pull request #394 from StefanKelm/master
Update threat-actor.json
2019-05-02 16:50:25 +02:00
20007e7b7c
Merge pull request #393 from Delta-Sierra/master
add AESDDoS Botnet and JasperLoader
2019-05-02 16:48:55 +02:00
StefanKelm
7e329855b2
Update threat-actor.json
Silent Librarian / COBALT DICKENS
2019-05-02 15:34:19 +02:00
b77087d59e
chg: [malpedia] duplicates fixed 2019-05-02 14:48:17 +02:00
b706738d46
chg: [malpedia] jq all the things 2019-05-02 14:47:00 +02:00
1ddb38341b
Merge branch 'master' of https://github.com/nao-sec/misp-galaxy into nao-sec-master 2019-05-02 14:46:34 +02:00
Deborah Servili
dda2ede5f2
add JasperLoader 2019-05-02 13:02:00 +02:00
Deborah Servili
f51f13e84b
add AESDDoS Botnet 2019-05-02 10:15:26 +02:00
37da9bebdf
chg: [threat-actor] FIN4 updates 2019-05-01 17:41:03 +02:00
Rony
0afaf81438
Update threat-actor.json 2019-05-01 15:54:38 +05:30
Rony
c565f61761
Update threat-actor.json 2019-05-01 15:51:56 +05:30
Rony
3b185d8435
Update threat-actor.json 2019-05-01 15:40:10 +05:30
Rony
ed351b4eae
updated FIN4 2019-05-01 15:24:59 +05:30
94466d8196
chg: [ATT&CK] updated to the latest version 2019-04-30 19:07:57 +02:00
Rintaro KOIKE
57735a5b5c
chg: [malpedia] updated to the latest version
Ref: https://malpedia.caad.fkie.fraunhofer.de/api/get/misp
2019-04-30 20:41:12 +09:00
f9a030ce54
chg: [exploit-kit] jq all the things 2019-04-28 19:12:06 +02:00
82a85d1651
Merge branch 'master' of https://github.com/Kafeine/misp-galaxy into Kafeine-master 2019-04-28 19:11:20 +02:00
Kafeine
915b673b7a
+= Spelevo 2019-04-28 12:24:48 +02:00
2405f1c59e
chg: [tool] Cowboy and KimJongRAT (Sorry Paul, we forgot ;-)
ref: https://unit42.paloaltonetworks.com/babyshark-malware-part-two-attacks-continue-using-kimjongrat-and-pcrat/
2019-04-27 09:33:55 +02:00
094f0e0684
chg: [tool] jq all the things 2019-04-24 12:58:49 +02:00
088e7477a6
chg: [tool] Karkoff tool added 2019-04-24 11:40:06 +02:00
Rony
292df2360a
more report on APT36 2019-04-22 11:05:21 +05:30
Deborah Servili
8ac7aec85c
add Sea Turtle campaign 2019-04-19 13:21:11 +02:00
Deborah Servili
39a416e9e7 Merge branch 'master' of https://github.com/MISP/misp-galaxy 2019-04-19 11:54:26 +02:00
Christophe Vandeplas
ecc63cf166 chg; [threat-actor] validate + version bump 2019-04-17 21:01:55 +02:00
Christophe Vandeplas
d5fd896bb0
Merge pull request #385 from bartblaze/master
Add Whitefly
2019-04-17 20:53:15 +02:00
Deborah Servili
3abfe9fa48
merge 2019-04-17 16:06:50 +02:00
Bart
e1cab68683
Add Whitefly 2019-04-17 12:27:18 +01:00
Deborah Servili
83b900ecc2
Merge pull request #384 from r0ny123/patch-3
fixed the broken link
2019-04-17 08:27:09 +02:00
Deborah Servili
d72ea0d83a
Merge pull request #383 from rmkml/master
Add BigBobRoss Ransomware
2019-04-17 08:26:42 +02:00
Rony
d98aefa186
fixed the broken link 2019-04-17 09:17:23 +05:30
rmkml
d16cc2e184 Add Cr1ptt0r Ransomware 2019-04-14 20:49:36 +02:00
rmkml
271143519d Add SpelevoEK 2019-04-13 23:04:25 +02:00
rmkml
55f6d28388 Add Planetary Ransomware 2019-04-13 22:41:37 +02:00
rmkml
356c485459 Add BigBobRoss Ransomware 2019-04-13 22:06:53 +02:00
9f20c7aac1
Merge pull request #382 from rmkml/master
Add Caesar RAT
2019-04-13 22:02:40 +02:00
rmkml
747dd3f90d Add Caesar RAT 2019-04-13 21:47:24 +02:00
30baec12e9
Merge pull request #381 from rmkml/master
Add Tellyouthepass Ransomware
2019-04-13 20:01:30 +02:00
rmkml
9aa6244ed9 Add Ave Maria Stealer 2019-04-13 17:01:31 +02:00
rmkml
86323ca948 Add Tellyouthepass Ransomware 2019-04-13 16:38:46 +02:00
bc0949c357
Merge pull request #380 from bartblaze/master
Add DoNot team references
2019-04-13 09:29:35 +02:00
903612178f
Merge pull request #379 from rmkml/master
Add BlackWorm Ransomware
2019-04-13 09:29:02 +02:00
rmkml
f94e138b27 Add Vidar Stealer 2019-04-12 23:31:30 +02:00
rmkml
54cd80ee2d Add Brushaloader Malware 2019-04-12 22:42:57 +02:00
Bart
3256cca9e0
Add DoNot team references 2019-04-12 21:12:16 +01:00
rmkml
25597c24f7 Add BlackWorm Ransomware 2019-04-12 21:29:13 +02:00
d7b4908aa3
Merge branch 'patch-8' of https://github.com/danielplohmann/misp-galaxy into danielplohmann-patch-8 2019-04-12 05:58:47 +02:00
Daniel Plohmann
159225b6cf
Based on additional research, APT36 can actually be merged into Mythic Leopard 2019-04-11 22:29:49 +02:00
Rony
7987c8f023
Update threat-actor.json 2019-04-12 01:56:12 +05:30
Rony
2fc914b2f9
Update threat-actor.json 2019-04-12 01:06:50 +05:30
Rony
60e4a486a7
adding additional resources for APT36 2019-04-11 23:55:51 +05:30
rmkml
eb90e99daf Add Globe Imposter Ransomware 2019-04-10 22:37:54 +02:00
rmkml
6467fe5849 Add Parasite HTTP RAT 2019-04-09 22:27:28 +02:00
Daniel Plohmann
df5301eab5
adding FireEye's TMP.Lapis / APT36 2019-04-09 08:38:44 +02:00
Deborah Servili
c69a18c723 Merge branch 'master' of https://github.com/MISP/misp-galaxy 2019-04-02 08:21:41 +02:00
a0234020bc
chg: [ransomware] various fixes 2019-04-01 19:49:00 +02:00
d23e533cdb
chg: [ransomware] jq all the things(tm) 2019-04-01 19:44:05 +02:00
36895a2163
chg: [ransomware] fix the meta to payment-method 2019-04-01 19:40:30 +02:00
0fa6cf25ba
Merge branch 'master' of https://github.com/ismasma/misp-galaxy into ismasma-master 2019-04-01 19:38:23 +02:00
Deborah Servili
272ea3ba4a
add ref for Ryuk and LockerGoga ransomwares 2019-03-28 15:58:00 +01:00
ac6276a906
Merge pull request #371 from Delta-Sierra/master
Add Operation ShadowHammer
2019-03-26 22:25:22 +01:00
Deborah Servili
6027d546f2
Add Operation ShadowHammer 2019-03-26 10:40:29 +01:00
Deborah Servili
575dd64582
add relationship between Cardinal RAT and EVILNUM 2019-03-26 08:41:11 +01:00
52f088efc9
Merge branch 'master' of https://github.com/Delta-Sierra/misp-galaxy into Delta-Sierra-master 2019-03-21 20:51:59 +01:00
Daniel Plohmann
e0bb3d76a6
added APT-C-27 / GoldMouse 2019-03-21 18:06:03 +01:00
Deborah Servili
d0383b460f
jq 2019-03-21 09:15:16 +01:00
Deborah Servili
0fd04fa619
Merge branch 'master' into master 2019-03-21 08:42:30 +01:00
Deborah Servili
3c207f69be
add Cardinal RAT ref 2019-03-20 16:11:50 +01:00
Deborah Servili
f86c748b8c
add AOT-C-27 Goldmouse 2019-03-20 15:45:20 +01:00
Raphaël Vinot
6be42e6a1a fix: Make validate all happy 2019-03-20 12:58:18 +01:00
04accabaab
chg: [mitre att&ck] updated with new version 2019-03-20 12:37:38 +01:00
Deborah Servili
b2e1d5551f
add SPOILER vulnerability + other minor changes 2019-03-20 11:47:58 +01:00
b2538a1f8a
chg: [threat-actor] change attribution confidence to be a string by default 2019-03-19 16:51:41 +01:00
095b0a4d81
chg: [attck4fraud] updated 2019-03-19 16:33:27 +01:00
3cf53b670e
chg: [attck4fraud] completed 2019-03-19 16:02:08 +01:00
2b619dd9b7
chg: [attck4fraud] Assets Transfer added 2019-03-19 15:52:33 +01:00
75b4a3a951
chg: [attck4fraud] Obtain Fraudulent Assets added 2019-03-19 15:44:16 +01:00
bf6a605f6d
chg: [attck4fraud] Perform fraud added 2019-03-19 15:33:46 +01:00
e398cc3ef2
chg: [attck4fraud] Target compromise updated 2019-03-19 15:17:25 +01:00
e26918d749
chg: [attck4fraud] more techniques 2019-03-19 15:08:44 +01:00
4f454493b7
chg: [threat-actor] BRONZE UNION is also uppercase 2019-03-19 14:47:03 +01:00
9a6b597387
chg: [threat-actor] updated the version to avoid the past issue with 0 value for integer values 2019-03-19 14:44:49 +01:00
c2f10410f5
chg: [sector] typo fixed - reported in #364 2019-03-19 12:36:19 +01:00
e56cb33097
chg: [attck4fraud] fix the type issue 2019-03-19 10:03:33 +01:00
a80283672c
chg: [attck4fraud] uuid fixed 2019-03-19 08:39:08 +01:00
2419a33807
chg: [attck4fraud] ATM Shimming added 2019-03-19 08:33:08 +01:00
779bc4a6a0
chg: [attck4fraud] description fixed for FT1003 2019-03-19 08:11:33 +01:00
3c067c42a8
Merge branch 'master' of github.com:MISP/misp-galaxy 2019-03-19 08:10:36 +01:00
824465d879
add: [attck4fraud] initial attck-like matrix for fraud from https://github.com/burritoblue/attck4fraud (WiP) 2019-03-19 08:09:23 +01:00
78b886b2f0
Merge pull request #363 from Delta-Sierra/master
add H-worm RAT
2019-03-19 07:31:04 +01:00
Deborah Servili
3294091600
add H-worm RAT 2019-03-18 16:24:55 +01:00
Bart
dff2a827d6
Update preventive-measure.json
Add ACL
2019-03-17 21:47:54 +00:00
Deborah Servili
5ce8aae89e
add Operation Comando - hit version 100 2019-03-15 15:04:29 +01:00
ismasma
379ed61c34
Add payment method and price 2019-03-14 17:12:42 +01:00
5db30ba974
chg: [threat-actor] SandCat added 2019-03-14 06:18:10 +01:00
Thomas Dupuy
60d79b0153 add synonym, no need for uppercase in the name :) 2019-03-13 23:07:10 +01:00
Deborah Servili
ecf76178e7
add attribution-confidence attribute to threat-actor 2019-03-11 11:18:12 +01:00
Deborah Servili
7576d0db02
relations between SLUB Backdoor 2019-03-11 09:01:12 +01:00
Deborah Servili
a65688ec02 Merge branch 'master' of https://github.com/Delta-Sierra/misp-galaxy 2019-03-11 08:51:47 +01:00
Deborah Servili
33dbda1e1e Merge branch 'master' of https://github.com/MISP/misp-galaxy 2019-03-11 08:51:16 +01:00
Deborah Servili
59ee8a9f13
Merge branch 'master' into master 2019-03-11 08:40:38 +01:00
Deborah Servili
ddab5f7006
Merge branch 'master' into master 2019-03-11 08:40:11 +01:00
139e6c32ed
chg: [threat-actor] new attribution-confidence level introduced 2019-03-11 08:37:49 +01:00
eb665e2883
chg: [threat-actor] jq all the things 2019-03-10 11:15:13 +01:00
bebcc0eb5a
Merge branch 'master' of github.com:MISP/misp-galaxy 2019-03-10 10:48:31 +01:00
6fb1303570
chg: [threat-actor] IRIDIUM added
Ref: https://resecurity.com/blog/parliament_races/
2019-03-10 10:47:34 +01:00
Raphaël Vinot
4f3e6335b5 fix: Wrong (duplicate) value. 2019-03-09 06:29:26 +01:00
Deborah Servili
2815e48610
add StealthWorker malware 2019-03-08 15:57:30 +01:00
Deborah Servili
ee034babba
add SLUB backdoor 2019-03-08 14:39:34 +01:00
769e0002ef
chg: [tools] jq all the things 2019-03-08 08:10:42 +01:00
Daniel Plohmann
1d8ada33a0
Update threat-actor.json
another actor described by 360TIC.
2019-03-07 17:50:46 +01:00
63419046d4
Merge branch 'master' of github.com:MISP/misp-galaxy 2019-03-07 15:51:44 +01:00
31ba566c18
chg: [tool] SLUB Backdoor added 2019-03-07 15:51:16 +01:00
Deborah Servili
7afd311abc
add Jokeroo RaaS 2019-03-07 15:23:30 +01:00
Daniel Plohmann
cfb807861a
FireEye upgraded TEMP.Periscope to APT40 2019-03-07 14:34:14 +01:00
Deborah Servili
eb0a33eab6
add operation Kabar Cobra 2019-03-06 15:52:49 +01:00
Deborah Servili
ae49090845
add ref for garrantydecrypt 2019-03-04 16:34:52 +01:00
Deborah Servili
6ffb8dd437
add relation between Lazarus Group and Operation SharpShooter 2019-03-04 12:03:05 +01:00
Deborah Servili
19c4fe4d11
add Rising Sun Backdoor 2019-03-04 10:11:26 +01:00
Deborah Servili
bd3fce00e1
add Razdel 2019-02-25 16:35:06 +01:00
f7367ef887
chg: [tool] Xbash description updated 2019-02-23 09:25:14 +01:00
f2159bfaa3
chg: [threat-actor] format fixed 2019-02-22 22:50:42 +01:00
f621b40263
chg: [threat-actor] jq all the things late in the night 2019-02-22 22:47:25 +01:00
d5df0d1064
chg: [threat-actor] uuid fixed 2019-02-22 22:45:28 +01:00
f2c80cbcdd
chg: [tool] BabyShark added 2019-02-22 22:44:44 +01:00
38283f0f86
chg: [threat-actor] STOLEN PENCIL added 2019-02-22 22:41:06 +01:00
243a6280e0
Merge pull request #350 from bartblaze/master
Add more info on Lotus Blossom
2019-02-21 23:39:33 +01:00
Bart
06553bbec2
Add more info on Lotus Blossom
Add 2 more references, fix typo - Trend calls it "Esile", not "Eslie" as mistakenly stated by CFR. The backdoor itself is commonly referred to as Elise.
2019-02-21 22:31:14 +00:00
08e8aafcf7
chg: [cert-eu-govsector] version fixed 2019-02-21 07:19:04 +01:00
ed132cb1b8
chg: [threat-actor] version fixed 2019-02-21 07:18:16 +01:00
Daniel Plohmann
0cd79994cc
Two more actor names from GTR2019
I found two more actor names while going again over the crowdstrike's report and updating the cross-references to malpedia.
2019-02-19 22:38:11 +01:00
Daniel Plohmann
85ec27b4c4
Added missing actors from CrowdStrike GTR2019 2019-02-19 18:26:01 +01:00
Itay Cohen
7d9dc1ec9d
Fix 404'd reference of BuhTrap 2019-02-17 11:33:11 +02:00
9ad8a76a38
chg: [ransomware] no related object in meta 2019-02-15 10:30:20 +01:00
34042abe23 new: Added draft of the election guildelines galaxy 2019-02-15 08:44:33 +01:00
Deborah Servili
5bf18ffd23
Merge branch 'master' into master 2019-02-14 16:29:04 +01:00
Deborah Servili
9c450a80d4
add Gallmaker and other clusters 2019-02-14 16:04:54 +01:00
Deborah Servili
2794a20589
add OSX/Shlayer and some refs 2019-02-14 12:42:28 +01:00
ad0ef66b0a
chg: [tool] jq jq jq jq jq jq jq jq 2019-02-12 21:41:33 +01:00
Thomas Dupuy
95a70d09a5 add ANEL/UPPERCUT in tool cluster 2019-02-12 12:19:23 -05:00
Deborah Servili
8aeed60a24
Add Siesta campaign 2019-02-11 16:30:46 +01:00
João Neto
662cc5a012
Updated "Iran" name
This extra space leads to an unnecessary key error when parsing the json file
2019-02-08 16:50:22 +01:00
Nils Kuhnert
fc16f4f69c
Added Velvet Chollima as synonym to Kimsuki 2019-02-08 08:50:05 +01:00
Christophe Vandeplas
e5f74c8fdc
Merge pull request #336 from 3c7/synonym/static-kitten
Added static kitten as synonym for MuddyWater
2019-02-07 08:54:49 +01:00
2bbb8a6a43
Merge pull request #334 from 3c7/synonym/cobalt-spider
Added Cobalt Spider as Synonym for Cobalt
2019-02-07 08:53:19 +01:00
Nils Kuhnert
9778bea81e
Added Cobalt Spider reference 2019-02-07 08:41:00 +01:00
Nils Kuhnert
523a52c4db
Added static kitten as synonym for MuddyWater 2019-02-07 08:38:52 +01:00
Nils Kuhnert
0049acd81c
Added Turbine Panda as synonym for APT 26 2019-02-07 08:28:48 +01:00
Nils Kuhnert
5a077cf838
Added Cobalt Spider as Synonym for Cobalt 2019-02-07 08:26:10 +01:00
Nils Kuhnert
a171d5aa9d
Added Ocean Buffalo synonym for Ocean Lotus 2019-02-03 21:36:21 +01:00
b9f1317941
Merge pull request #332 from Delta-Sierra/master
Add APT39 & LockerGoga
2019-02-01 18:36:12 +01:00
Nils Kuhnert
0b04046d91
Added Quilted Tiger as Synonym for Patchwork/Dropping Elephant. 2019-02-01 13:17:43 +01:00
Deborah Servili
233b7f3aff
add APT39 2019-01-31 18:48:19 +01:00
Deborah Servili
b4751d396a
add LockerGoga ransomware 2019-01-30 12:07:19 +01:00
Nils Kuhnert
d45a32e9e2
Added Shadow Crane as synonym for Dark Hotel. 2019-01-30 08:22:46 +01:00
Nils Kuhnert
42ecbd801c
Added "Stardust Chollima" as synonym for Lazarus. 2019-01-29 08:36:12 +01:00
898bdaf7f8
Merge pull request #328 from Delta-Sierra/master
add Silence Group
2019-01-25 16:43:08 +01:00
Deborah Servili
c11a31b12a
add Silence Group 2019-01-25 16:19:51 +01:00
Thomas Dupuy
d38fb407ec add alternative name for DarkHydrus 2019-01-21 23:14:34 -05:00
Deborah Servili
45ed56cd61
add LoJax ref 2019-01-17 10:49:23 +01:00
Deborah Servili
3bdbd6646b
add Cold River Threat actor 2019-01-17 09:44:09 +01:00
Deborah Servili
5d61a75886
fix versions 2019-01-14 16:34:28 +01:00
Deborah Servili
61093f6f07
add several ransomware and threat actors 2019-01-14 16:28:15 +01:00
Deborah Servili
90d2bf7bc1
add drakhydrus ref 2019-01-11 10:17:07 +01:00
Deborah Servili
cddfd5fcd1
TA505 threat actorand affiliates malwares 2019-01-11 09:53:08 +01:00
Deborah Servili
4547b09f49
add hidenad synonym 2019-01-10 11:53:30 +01:00
Deborah Servili
a10a417b0a
add Cryptomix variants refs 2019-01-10 10:03:22 +01:00
Deborah Servili
d3ae9e1e14
update version 2019-01-09 15:54:09 +01:00
Deborah Servili
90e3602db6
add AndroidOS_HidenAd 2019-01-09 15:33:34 +01:00
Deborah Servili
cc0bd96527 Merge branch 'master' of https://github.com/MISP/misp-galaxy 2019-01-09 14:54:33 +01:00
Christophe Vandeplas
0ba220987d chg: [mitre] bump to latest MITRE ATT&CK dataset 2018-12-29 18:40:21 +01:00
Christophe Vandeplas
50c817a1fd
MITRE galaxy regeneration + updated migration script 2018-12-29 18:14:47 +01:00
Nils Kuhnert
1e4ebdd560
Added OilRig synonym "Helix Kitten". 2018-12-27 09:10:21 +01:00
Kafeine
5766cd68f8 zTDS 2018-12-22 11:51:40 +01:00
Kafeine
ce94cb8458 novidade,taurus 2018-12-22 10:19:52 +01:00
Deborah Servili
91b8da1e9e
add ransomwares 2018-12-20 00:37:49 +01:00
de66295539
Merge pull request #316 from danielplohmann/master
New name SNAKEMACKEREL for APT28 by Accenture
2018-12-19 14:06:38 +01:00
Gerard Wagener
7b347017e2
Removed Puplishing industry 2018-12-19 11:45:31 +01:00
Daniel Plohmann
cc22da1200 Microsoft alias for apt29 is YTTRIUM 2018-12-19 11:28:44 +01:00
Daniel Plohmann
c9e15b0c08 new name SNAKEMACKEREL for APT28 by Accenture 2018-12-19 10:46:58 +01:00
27f6b19570
Merge pull request #315 from Delta-Sierra/master
add OSX malwares
2018-12-18 17:43:34 +01:00
Deborah Servili
e6fa06f178
add OSX malwares 2018-12-18 16:26:49 +01:00
a04790ac41
chg: [malpedia] updated to the latest version
Ref: https://malpedia.caad.fkie.fraunhofer.de/api/get/misp
2018-12-14 19:00:18 +01:00
Deborah Servili
cb4345adf9
add operation sharpshooter 2018-12-13 13:47:54 +01:00
Deborah Servili
a9265d9858
update toll version 2018-12-13 09:44:09 +01:00
Deborah Servili
9f29f297d2
add shamoon synonym 2018-12-13 09:43:20 +01:00
Deborah Servili
3a2ac48faa
fix tool version 2018-12-12 15:39:34 +01:00
Deborah Servili
3ef58f7b21
fix exploit-kit version 2018-12-12 15:38:39 +01:00
Deborah Servili
70d68a312c
add some clusters or info 2018-12-12 15:26:54 +01:00
Deborah Servili
169d69871a
add Goden Chickens and affiliates 2018-12-12 13:52:55 +01:00
Deborah Servili
3183a4d1ff
add ransomwares 2018-12-12 09:27:27 +01:00
Christophe Vandeplas
1a65dfb9f4 chg: [mitre] re-generated galaxies and values using the MITRE sources
and also using the MISP version to keep manually created relationships and such
2018-12-09 09:16:03 +01:00
Christophe Vandeplas
39ff6b4bbc MITRE sorted
While dicts were sorted, lists were not yet sorted. This current sort algo is not yet the best, but is a good start. A good sort is needed for better comparison afterwards with automated tools. In a next stage tt will also be needed in the validate_all scripts.
2018-12-09 08:32:48 +01:00
Deborah Servili
bf77e1125a
add Operation Poison Needles 2018-12-07 16:32:09 +01:00
Deborah Servili
79828d7411
add clusters 2018-12-07 13:25:56 +01:00
Deborah Servili
5a725e71ef
add several clusters 2018-12-06 16:13:51 +01:00
ac2b5dbe05
fix: [ransomware] more duplicates removed 2018-12-02 12:00:17 +01:00
2e8f139daa
fix: [ransomware] removed duplicate values 2018-12-02 11:54:34 +01:00
Deborah Servili
be9b4ff40f
add DNSpionage cluster 2018-11-29 16:38:06 +01:00
Deborah Servili
ef54489ea9
add everbe rasomnotes 2018-11-29 15:33:39 +01:00
Deborah Servili
6382857ee3
add ransomwares 2018-11-29 15:23:57 +01:00
Deborah Servili
c81f128d98
add ransomwares 2018-11-27 15:59:26 +01:00
Deborah Servili
6f255c0999
add Aurora Ransomware metadata 2018-11-26 09:30:54 +01:00
Deborah Servili
e5487305f1
add Aurora Ransomware synonym 2018-11-26 08:33:11 +01:00
Deborah Servili
9f5e10abf6
fix version 2018-11-23 16:16:58 +01:00
Deborah Servili
b6b1c7171a
Add Rotexy 2018-11-23 16:15:48 +01:00
Deborah Servili
dac1c08491
update version 2018-11-23 12:42:41 +01:00
Deborah Servili
b50c8bd805
add PNG Dropper 2018-11-23 10:38:36 +01:00
Deborah Servili
1be4a1cedb
add reference for Emotet/Geodo 2018-11-22 09:00:43 +01:00
Deborah Servili
2bf5d46cc4 Merge branch 'master' of https://github.com/Delta-Sierra/misp-galaxy 2018-11-22 08:59:53 +01:00
Deborah Servili
2f5031b845
add several references for Emotet and others 2018-11-22 08:37:45 +01:00
Deborah Servili
de38e7249c
Merge branch 'master' into master 2018-11-19 15:23:45 +01:00
Deborah Servili
ce61b2d2dd
update oilrig related clusters + others 2018-11-19 14:56:13 +01:00
eec7693081
chg: uuid fixed 2018-11-18 06:31:04 +01:00
d324a1c39b
Merge branch 'master' of https://github.com/Delta-Sierra/misp-galaxy into Delta-Sierra-master 2018-11-18 06:29:50 +01:00
Deborah Servili
eb6f6a3f49
fix rat galaxy version 2018-11-16 16:40:23 +01:00
Deborah Servili
77b556d702
jq and add ref in tool galaxy -hit version 100- 2018-11-16 13:11:55 +01:00
Deborah Servili
faa16879da
add TheOneSpy 2018-11-16 13:10:21 +01:00
c9fd60d14b
chg: [threat-actor] INDRIK SPIDER added 2018-11-14 20:46:06 +01:00
Deborah Servili
ca33f1c2ce Merge branch 'master' of https://github.com/MISP/misp-galaxy 2018-11-13 15:25:34 +01:00
Deborah Servili
f55277b682
add several rqansomware and HookAds campaign 2018-11-13 12:20:37 +01:00
a505995b79
fix: [ransomware] duplicate removed 2018-11-13 07:12:36 +01:00
51d3af11fc
chg: [ransomware] duplicate removed 2018-11-13 07:08:49 +01:00
a4c916c916
Merge branch 'master' of github.com:MISP/misp-galaxy 2018-11-13 07:01:56 +01:00
Benoit Sevens
8f8c69134e
Update threat-actor.json
Add LuckyMouse link
2018-11-12 13:12:14 +01:00
Deborah Servili
46dba06e40
add/update ransomawares 2018-11-09 16:34:00 +01:00
Deborah Servili
14444e4321
add several tools and refs 2018-11-08 10:39:32 +01:00
Daniel Plohmann
1f6b606f75
added APT38 as (FireEye) alias for Lazarus
cross-references in https://content.fireeye.com/apt/rpt-apt38 suggest the link to Lazarus.
2018-11-07 17:19:50 +01:00
Deborah Servili
954264c084
Merge pull request #296 from Delta-Sierra/master
update ransomware galaxy
2018-11-07 09:19:23 +01:00
Deborah Servili
d41a279c73
update ransomware galaxy 2018-11-05 16:23:10 +01:00
8ae3214cd1
Merge pull request #295 from Delta-Sierra/master
update Red Alert 2 Android Banking Trojan
2018-11-05 12:37:29 +01:00
Deborah Servili
050a94a2c0
jq fix 2018-11-05 11:01:57 +01:00
Deborah Servili
ae24b71f45
update version 2018-11-05 10:45:54 +01:00
Deborah Servili
5fd4cfa4ee
update Red Alert 2 Android Banking Trojan 2018-11-05 09:50:10 +01:00
Deborah Servili
7813a29460
Merge pull request #294 from Delta-Sierra/master
add ransomwares
2018-10-31 16:05:18 +01:00
Deborah Servili
ad07b70a03
add ransomwares 2018-10-31 14:52:40 +01:00
2465235817
Merge pull request #293 from Delta-Sierra/master
add Operation EvilTraffic
2018-10-30 21:02:59 +01:00
Deborah Servili
e6b1eec329
add Chalubo botnet (+ jqallthethings) 2018-10-30 14:39:13 +01:00
Deborah Servili
41942d0daf
add Operation EvilTraffic 2018-10-30 13:28:46 +01:00
Deborah Servili
74ff4b957a
add Operation EvilTraffic 2018-10-30 13:28:27 +01:00
Nils Kuhnert
bc0bf1ca9f
Corrected DarkHotel threat actor entry 2018-10-29 09:03:30 +01:00
Deborah Servili
6e8abc0712
fix duplicate ref 2018-10-23 15:37:51 +02:00
Deborah Servili
af6020077e
add August Stealer 2018-10-23 15:25:37 +02:00
Deborah Servili
4a54044de6
add NukeSped reference 2018-10-22 14:50:57 +02:00
Deborah Servili
32d90a27e1
add GhostMiner 2018-10-22 14:46:44 +02:00
Deborah Servili
bd68ee280e Merge branch 'master' of https://github.com/MISP/misp-galaxy 2018-10-22 11:09:37 +02:00
Deborah Servili
504570a298
add tools from https://github.com/misterch0c/shadowbroker 2018-10-22 11:06:25 +02:00
Deborah Servili
4564c5eb37
add DarkPulsar and affiliates + update some refs 2018-10-22 10:14:30 +02:00
Christophe Vandeplas
4232f0b737 chg: further categorization of galaxies 2018-10-19 14:15:20 +02:00
Christophe Vandeplas
9dddc4427c jq 2018-10-19 10:23:09 +02:00
Christophe Vandeplas
6a9a9b7e1b Merge remote-tracking branch 'MISP/master' 2018-10-19 10:18:45 +02:00
Christophe Vandeplas
ddccac58c8 chg: categorization of galaxies
This allows relationships to be created.
2018-10-19 10:18:14 +02:00
0ecf34f06e
fix: [malpedia] version 2018-10-18 11:23:48 +02:00
83c6e6bef1
fix: [malpedia] broken reference has been fixed 2018-10-18 11:17:19 +02:00
3771c21218
Merge pull request #287 from cvandeplas/master
fixes an important bug in the gen_relations
2018-10-18 11:15:17 +02:00
66ded6d935
Some minor fixes 2018-10-17 20:59:08 +02:00
Christophe Vandeplas
ccebd86eed fix: add missing relations from commit 78c1f07359 2018-10-17 19:18:16 +02:00
Christophe Vandeplas
2b24efb14a fix: add missing relations from commit b857be9cab 2018-10-17 19:15:57 +02:00
Christophe Vandeplas
76b1429f10 fix: add missing relations from commit a81bbe288f 2018-10-17 19:13:35 +02:00
Christophe Vandeplas
84af053761 fix: add missing relations from commit 29beb01dc3 2018-10-17 19:07:01 +02:00
Christophe Vandeplas
873bc873b4 Merge remote-tracking branch 'MISP/master' 2018-10-17 18:28:44 +02:00
Christophe Vandeplas
1e90cac717 fix: intrusion is an actor and not a tool 2018-10-17 18:17:33 +02:00
9129724343
Merge pull request #286 from Delta-Sierra/master
Several clusters, refs, others.
2018-10-17 17:32:45 +02:00
Deborah Servili
c8cbb609a2
add GreyEnergy 2018-10-17 16:05:51 +02:00
Christophe Vandeplas
ca6c1caa8f fix: jq all the things 2018-10-17 08:26:45 +02:00
Christophe Vandeplas
2bb4df134b chg: removal of older unused relationships 2018-10-17 08:20:12 +02:00
Christophe Vandeplas
c51ba2e868 chg: MITRE relationships included in the respective cluster. 2018-10-17 08:08:58 +02:00
Deborah Servili
2ea560f9a7
add refs & synonyms 2018-10-15 12:02:21 +02:00
Deborah Servili
c134035a6d
add several refs 2018-10-15 11:33:37 +02:00
Deborah Servili
8d0c87c830
add several refs 2018-10-15 11:28:01 +02:00
Deborah Servili
11a27df82d
add roaming mantis group 2018-10-12 15:50:52 +02:00
Deborah Servili
b3109f6aea Merge branch 'master' of https://github.com/MISP/misp-galaxy 2018-10-12 13:55:01 +02:00
Christophe Vandeplas
f26a4f2806 fix: minor newline difference after jq_all_the 2018-10-12 12:31:29 +02:00
Christophe Vandeplas
f14d616e22 chg: magical mapping with malpedia 2018-10-12 11:00:00 +02:00
Christophe Vandeplas
65eb66a739 fix: automatically fix missing uuids 2018-10-12 10:55:24 +02:00
Christophe Vandeplas
2fbd8ce485 jq sort keys
Allows automation to edit the files
2018-10-12 10:35:31 +02:00
4ff2a45cbb
chg: [malpedia] duplicate urls removed 2018-10-10 22:18:32 +02:00
2d2749ccea
jq all the things 2018-10-10 22:12:59 +02:00
Steffen Enders
125f676d17
Updated malpedia.json to the current state
Fetched the new malpedia galaxy cluster from https://malpedia.caad.fkie.fraunhofer.de/api/get/misp - this includes an additional ~120 new families.
2018-10-10 17:31:27 +02:00
Deborah Servili
4c367737ac
add magecart ref 2018-10-10 14:52:16 +02:00
Deborah Servili
ec6b04cf6a
add SAVEfiles ransomware 2018-10-10 14:05:24 +02:00
Deborah Servili
ed5aa150a7
update version 2018-10-09 11:35:17 +02:00
Deborah Servili
510a37084c
update matrix ransomware 2018-10-08 16:26:58 +02:00
Deborah Servili
5fb9db8282
add Triout Android Malware 2018-10-05 16:21:01 +02:00
Deborah Servili
655b1619e4 Merge branch 'master' of https://github.com/MISP/misp-galaxy 2018-10-05 16:06:25 +02:00
Deborah Servili
58a86e4e26
fix failed copy-paste 2018-10-05 15:53:03 +02:00
8149960aa3
Merge pull request #276 from Delta-Sierra/master
add CoalaBot + Kraken Cryptor Ransmware + refs
2018-10-05 15:52:04 +02:00
Davide Arcuri
253fbed356 Added Malpedia Galaxy
based on malpedia git repo

Co-Authored-By: garanews <garanews@users.noreply.github.com>
2018-10-05 14:30:31 +02:00
Deborah Servili
80bf2f5556
jq 2018-10-05 12:04:13 +02:00
Deborah Servili
06c4869125
add CoalaBot + Kraken Cryptor Ransmware + refs 2018-10-05 11:09:54 +02:00
Deborah Servili
9225666b92
add CoalaBot + Kraken Cryptor Ransmware + refs 2018-10-05 11:09:45 +02:00
ecba2dbdbf
Merge pull request #274 from Delta-Sierra/master
Refs updates
2018-10-04 17:24:57 +02:00
Deborah Servili
7cf37a57f1
add Persirai botnet 2018-10-04 14:17:16 +02:00
Deborah Servili
50fecccf39
update Torii botnet 2018-10-04 13:44:32 +02:00
Deborah Servili
138a4e6f9e
add ref for Torii botnet 2018-10-04 13:41:27 +02:00
Deborah Servili
b45b4ce0b1
add refs 2018-10-04 12:01:26 +02:00
276992f180
Merge pull request #273 from Delta-Sierra/master
update synonyms & attributions
2018-10-04 11:17:19 +02:00
Deborah Servili
2893d715d6
Add ZEBROCY tool 2018-10-04 10:52:40 +02:00
Deborah Servili
5bcf34a953
update regarding https://twitter.com/adulau/status/1047764090410737664 2018-10-04 10:28:22 +02:00
Deborah Servili
c78416eee1
update synonyms & attributions 2018-10-04 10:09:34 +02:00
Deborah Servili
123099cd6d
Merge pull request #272 from Delta-Sierra/master
New clusters based on CIG Circular 66 – FASTCash ATM Cash Out Campaign
2018-10-03 16:38:33 +02:00
Deborah Servili
4d68b1c205
add NukeSped 2018-10-03 16:28:50 +02:00
Deborah Servili
3dfe8a5a34 add FASTCash 2018-10-03 15:09:14 +02:00
63b777fc9e
Merge pull request #271 from Delta-Sierra/master
Several updates
2018-10-01 21:51:11 +02:00
Deborah Servili
403f162451
add ref for magecart 2018-10-01 11:54:07 +02:00