1051 commits

Author	SHA1	Message	Date
Alexandre Dulaunoy	9f20c7aac1	Merge pull request #382 from rmkml/master ... Add Caesar RAT	2019-04-13 22:02:40 +02:00
rmkml	747dd3f90d	Add Caesar RAT	2019-04-13 21:47:24 +02:00
Alexandre Dulaunoy	30baec12e9	Merge pull request #381 from rmkml/master ... Add Tellyouthepass Ransomware	2019-04-13 20:01:30 +02:00
rmkml	9aa6244ed9	Add Ave Maria Stealer	2019-04-13 17:01:31 +02:00
rmkml	86323ca948	Add Tellyouthepass Ransomware	2019-04-13 16:38:46 +02:00
Alexandre Dulaunoy	bc0949c357	Merge pull request #380 from bartblaze/master ... Add DoNot team references	2019-04-13 09:29:35 +02:00
Alexandre Dulaunoy	903612178f	Merge pull request #379 from rmkml/master ... Add BlackWorm Ransomware	2019-04-13 09:29:02 +02:00
rmkml	f94e138b27	Add Vidar Stealer	2019-04-12 23:31:30 +02:00
rmkml	54cd80ee2d	Add Brushaloader Malware	2019-04-12 22:42:57 +02:00
Bart	3256cca9e0	Add DoNot team references	2019-04-12 21:12:16 +01:00
rmkml	25597c24f7	Add BlackWorm Ransomware	2019-04-12 21:29:13 +02:00
Alexandre Dulaunoy	d7b4908aa3	Merge branch 'patch-8' of https://github.com/danielplohmann/misp-galaxy into danielplohmann-patch-8	2019-04-12 05:58:47 +02:00
Daniel Plohmann	159225b6cf	Based on additional research, APT36 can actually be merged into Mythic Leopard	2019-04-11 22:29:49 +02:00
Rony	7987c8f023	Update threat-actor.json	2019-04-12 01:56:12 +05:30
Rony	2fc914b2f9	Update threat-actor.json	2019-04-12 01:06:50 +05:30
Rony	60e4a486a7	adding additional resources for APT36	2019-04-11 23:55:51 +05:30
rmkml	eb90e99daf	Add Globe Imposter Ransomware	2019-04-10 22:37:54 +02:00
rmkml	6467fe5849	Add Parasite HTTP RAT	2019-04-09 22:27:28 +02:00
Daniel Plohmann	df5301eab5	adding FireEye's TMP.Lapis / APT36	2019-04-09 08:38:44 +02:00
Deborah Servili	c69a18c723	Merge branch 'master' of https://github.com/MISP/misp-galaxy	2019-04-02 08:21:41 +02:00
Alexandre Dulaunoy	a0234020bc	chg: [ransomware] various fixes	2019-04-01 19:49:00 +02:00
Alexandre Dulaunoy	d23e533cdb	chg: [ransomware] jq all the things(tm)	2019-04-01 19:44:05 +02:00
Alexandre Dulaunoy	36895a2163	chg: [ransomware] fix the meta to payment-method	2019-04-01 19:40:30 +02:00
Alexandre Dulaunoy	0fa6cf25ba	Merge branch 'master' of https://github.com/ismasma/misp-galaxy into ismasma-master	2019-04-01 19:38:23 +02:00
Deborah Servili	272ea3ba4a	add ref for Ryuk and LockerGoga ransomwares	2019-03-28 15:58:00 +01:00
Alexandre Dulaunoy	ac6276a906	Merge pull request #371 from Delta-Sierra/master ... Add Operation ShadowHammer	2019-03-26 22:25:22 +01:00
Deborah Servili	6027d546f2	Add Operation ShadowHammer	2019-03-26 10:40:29 +01:00
Deborah Servili	575dd64582	add relationship between Cardinal RAT and EVILNUM	2019-03-26 08:41:11 +01:00
Alexandre Dulaunoy	52f088efc9	Merge branch 'master' of https://github.com/Delta-Sierra/misp-galaxy into Delta-Sierra-master	2019-03-21 20:51:59 +01:00
Daniel Plohmann	e0bb3d76a6	added APT-C-27 / GoldMouse	2019-03-21 18:06:03 +01:00
Deborah Servili	d0383b460f	jq	2019-03-21 09:15:16 +01:00
Deborah Servili	0fd04fa619	Merge branch 'master' into master	2019-03-21 08:42:30 +01:00
Deborah Servili	3c207f69be	add Cardinal RAT ref	2019-03-20 16:11:50 +01:00
Deborah Servili	f86c748b8c	add AOT-C-27 Goldmouse	2019-03-20 15:45:20 +01:00
Raphaël Vinot	6be42e6a1a	fix: Make validate all happy	2019-03-20 12:58:18 +01:00
Alexandre Dulaunoy	04accabaab	chg: [mitre att&ck] updated with new version	2019-03-20 12:37:38 +01:00
Deborah Servili	b2e1d5551f	add SPOILER vulnerability + other minor changes	2019-03-20 11:47:58 +01:00
Alexandre Dulaunoy	b2538a1f8a	chg: [threat-actor] change attribution confidence to be a string by default	2019-03-19 16:51:41 +01:00
Alexandre Dulaunoy	095b0a4d81	chg: [attck4fraud] updated	2019-03-19 16:33:27 +01:00
Alexandre Dulaunoy	3cf53b670e	chg: [attck4fraud] completed	2019-03-19 16:02:08 +01:00
Alexandre Dulaunoy	2b619dd9b7	chg: [attck4fraud] Assets Transfer added	2019-03-19 15:52:33 +01:00
Alexandre Dulaunoy	75b4a3a951	chg: [attck4fraud] Obtain Fraudulent Assets added	2019-03-19 15:44:16 +01:00
Alexandre Dulaunoy	bf6a605f6d	chg: [attck4fraud] Perform fraud added	2019-03-19 15:33:46 +01:00
Alexandre Dulaunoy	e398cc3ef2	chg: [attck4fraud] Target compromise updated	2019-03-19 15:17:25 +01:00
Alexandre Dulaunoy	e26918d749	chg: [attck4fraud] more techniques	2019-03-19 15:08:44 +01:00
Alexandre Dulaunoy	4f454493b7	chg: [threat-actor] BRONZE UNION is also uppercase	2019-03-19 14:47:03 +01:00
Alexandre Dulaunoy	9a6b597387	chg: [threat-actor] updated the version to avoid the past issue with 0 value for integer values	2019-03-19 14:44:49 +01:00
Alexandre Dulaunoy	c2f10410f5	chg: [sector] typo fixed - reported in #364	2019-03-19 12:36:19 +01:00
Alexandre Dulaunoy	e56cb33097	chg: [attck4fraud] fix the type issue	2019-03-19 10:03:33 +01:00
Alexandre Dulaunoy	a80283672c	chg: [attck4fraud] uuid fixed	2019-03-19 08:39:08 +01:00
Alexandre Dulaunoy	2419a33807	chg: [attck4fraud] ATM Shimming added	2019-03-19 08:33:08 +01:00
Alexandre Dulaunoy	779bc4a6a0	chg: [attck4fraud] description fixed for FT1003	2019-03-19 08:11:33 +01:00
Alexandre Dulaunoy	3c067c42a8	Merge branch 'master' of github.com:MISP/misp-galaxy	2019-03-19 08:10:36 +01:00
Alexandre Dulaunoy	824465d879	add: [attck4fraud] initial attck-like matrix for fraud from https://github.com/burritoblue/attck4fraud (WiP)	2019-03-19 08:09:23 +01:00
Alexandre Dulaunoy	78b886b2f0	Merge pull request #363 from Delta-Sierra/master ... add H-worm RAT	2019-03-19 07:31:04 +01:00
Deborah Servili	3294091600	add H-worm RAT	2019-03-18 16:24:55 +01:00
Bart	dff2a827d6	Update preventive-measure.json ... Add ACL	2019-03-17 21:47:54 +00:00
Deborah Servili	5ce8aae89e	add Operation Comando - hit version 100	2019-03-15 15:04:29 +01:00
ismasma	379ed61c34	Add payment method and price	2019-03-14 17:12:42 +01:00
Alexandre Dulaunoy	5db30ba974	chg: [threat-actor] SandCat added	2019-03-14 06:18:10 +01:00
Thomas Dupuy	60d79b0153	add synonym, no need for uppercase in the name :)	2019-03-13 23:07:10 +01:00
Deborah Servili	ecf76178e7	add attribution-confidence attribute to threat-actor	2019-03-11 11:18:12 +01:00
Deborah Servili	7576d0db02	relations between SLUB Backdoor	2019-03-11 09:01:12 +01:00
Deborah Servili	a65688ec02	Merge branch 'master' of https://github.com/Delta-Sierra/misp-galaxy	2019-03-11 08:51:47 +01:00
Deborah Servili	33dbda1e1e	Merge branch 'master' of https://github.com/MISP/misp-galaxy	2019-03-11 08:51:16 +01:00
Deborah Servili	59ee8a9f13	Merge branch 'master' into master	2019-03-11 08:40:38 +01:00
Deborah Servili	ddab5f7006	Merge branch 'master' into master	2019-03-11 08:40:11 +01:00
Alexandre Dulaunoy	139e6c32ed	chg: [threat-actor] new attribution-confidence level introduced	2019-03-11 08:37:49 +01:00
Alexandre Dulaunoy	eb665e2883	chg: [threat-actor] jq all the things	2019-03-10 11:15:13 +01:00
Alexandre Dulaunoy	bebcc0eb5a	Merge branch 'master' of github.com:MISP/misp-galaxy	2019-03-10 10:48:31 +01:00
Alexandre Dulaunoy	6fb1303570	chg: [threat-actor] IRIDIUM added ... Ref: https://resecurity.com/blog/parliament_races/	2019-03-10 10:47:34 +01:00
Raphaël Vinot	4f3e6335b5	fix: Wrong (duplicate) value.	2019-03-09 06:29:26 +01:00
Deborah Servili	2815e48610	add StealthWorker malware	2019-03-08 15:57:30 +01:00
Deborah Servili	ee034babba	add SLUB backdoor	2019-03-08 14:39:34 +01:00
Alexandre Dulaunoy	769e0002ef	chg: [tools] jq all the things	2019-03-08 08:10:42 +01:00
Daniel Plohmann	1d8ada33a0	Update threat-actor.json ... another actor described by 360TIC.	2019-03-07 17:50:46 +01:00
Alexandre Dulaunoy	63419046d4	Merge branch 'master' of github.com:MISP/misp-galaxy	2019-03-07 15:51:44 +01:00
Alexandre Dulaunoy	31ba566c18	chg: [tool] SLUB Backdoor added	2019-03-07 15:51:16 +01:00
Deborah Servili	7afd311abc	add Jokeroo RaaS	2019-03-07 15:23:30 +01:00
Daniel Plohmann	cfb807861a	FireEye upgraded TEMP.Periscope to APT40	2019-03-07 14:34:14 +01:00
Deborah Servili	eb0a33eab6	add operation Kabar Cobra	2019-03-06 15:52:49 +01:00
Deborah Servili	ae49090845	add ref for garrantydecrypt	2019-03-04 16:34:52 +01:00
Deborah Servili	6ffb8dd437	add relation between Lazarus Group and Operation SharpShooter	2019-03-04 12:03:05 +01:00
Deborah Servili	19c4fe4d11	add Rising Sun Backdoor	2019-03-04 10:11:26 +01:00
Deborah Servili	bd3fce00e1	add Razdel	2019-02-25 16:35:06 +01:00
Alexandre Dulaunoy	f7367ef887	chg: [tool] Xbash description updated	2019-02-23 09:25:14 +01:00
Alexandre Dulaunoy	f2159bfaa3	chg: [threat-actor] format fixed	2019-02-22 22:50:42 +01:00
Alexandre Dulaunoy	f621b40263	chg: [threat-actor] jq all the things late in the night	2019-02-22 22:47:25 +01:00
Alexandre Dulaunoy	d5df0d1064	chg: [threat-actor] uuid fixed	2019-02-22 22:45:28 +01:00
Alexandre Dulaunoy	f2c80cbcdd	chg: [tool] BabyShark added	2019-02-22 22:44:44 +01:00
Alexandre Dulaunoy	38283f0f86	chg: [threat-actor] STOLEN PENCIL added	2019-02-22 22:41:06 +01:00
Alexandre Dulaunoy	243a6280e0	Merge pull request #350 from bartblaze/master ... Add more info on Lotus Blossom	2019-02-21 23:39:33 +01:00
Bart	06553bbec2	Add more info on Lotus Blossom ... Add 2 more references, fix typo - Trend calls it "Esile", not "Eslie" as mistakenly stated by CFR. The backdoor itself is commonly referred to as Elise.	2019-02-21 22:31:14 +00:00
Alexandre Dulaunoy	08e8aafcf7	chg: [cert-eu-govsector] version fixed	2019-02-21 07:19:04 +01:00
Alexandre Dulaunoy	ed132cb1b8	chg: [threat-actor] version fixed	2019-02-21 07:18:16 +01:00
Daniel Plohmann	0cd79994cc	Two more actor names from GTR2019 ... I found two more actor names while going again over the crowdstrike's report and updating the cross-references to malpedia.	2019-02-19 22:38:11 +01:00
Daniel Plohmann	85ec27b4c4	Added missing actors from CrowdStrike GTR2019	2019-02-19 18:26:01 +01:00
Itay Cohen	7d9dc1ec9d	Fix 404'd reference of BuhTrap	2019-02-17 11:33:11 +02:00
Alexandre Dulaunoy	9ad8a76a38	chg: [ransomware] no related object in meta	2019-02-15 10:30:20 +01:00
mokaddem	34042abe23	new: Added draft of the election guildelines galaxy	2019-02-15 08:44:33 +01:00
Deborah Servili	5bf18ffd23	Merge branch 'master' into master	2019-02-14 16:29:04 +01:00
Deborah Servili	9c450a80d4	add Gallmaker and other clusters	2019-02-14 16:04:54 +01:00
Deborah Servili	2794a20589	add OSX/Shlayer and some refs	2019-02-14 12:42:28 +01:00
Alexandre Dulaunoy	ad0ef66b0a	chg: [tool] jq jq jq jq jq jq jq jq	2019-02-12 21:41:33 +01:00
Thomas Dupuy	95a70d09a5	add ANEL/UPPERCUT in tool cluster	2019-02-12 12:19:23 -05:00
Deborah Servili	8aeed60a24	Add Siesta campaign	2019-02-11 16:30:46 +01:00
João Neto	662cc5a012	Updated "Iran" name ... This extra space leads to an unnecessary key error when parsing the json file	2019-02-08 16:50:22 +01:00
Nils Kuhnert	fc16f4f69c	Added Velvet Chollima as synonym to Kimsuki	2019-02-08 08:50:05 +01:00
Christophe Vandeplas	e5f74c8fdc	Merge pull request #336 from 3c7/synonym/static-kitten ... Added static kitten as synonym for MuddyWater	2019-02-07 08:54:49 +01:00
Alexandre Dulaunoy	2bbb8a6a43	Merge pull request #334 from 3c7/synonym/cobalt-spider ... Added Cobalt Spider as Synonym for Cobalt	2019-02-07 08:53:19 +01:00
Nils Kuhnert	9778bea81e	Added Cobalt Spider reference	2019-02-07 08:41:00 +01:00
Nils Kuhnert	523a52c4db	Added static kitten as synonym for MuddyWater	2019-02-07 08:38:52 +01:00
Nils Kuhnert	0049acd81c	Added Turbine Panda as synonym for APT 26	2019-02-07 08:28:48 +01:00
Nils Kuhnert	5a077cf838	Added Cobalt Spider as Synonym for Cobalt	2019-02-07 08:26:10 +01:00
Nils Kuhnert	a171d5aa9d	Added Ocean Buffalo synonym for Ocean Lotus	2019-02-03 21:36:21 +01:00
Alexandre Dulaunoy	b9f1317941	Merge pull request #332 from Delta-Sierra/master ... Add APT39 & LockerGoga	2019-02-01 18:36:12 +01:00
Nils Kuhnert	0b04046d91	Added Quilted Tiger as Synonym for Patchwork/Dropping Elephant.	2019-02-01 13:17:43 +01:00
Deborah Servili	233b7f3aff	add APT39	2019-01-31 18:48:19 +01:00
Deborah Servili	b4751d396a	add LockerGoga ransomware	2019-01-30 12:07:19 +01:00
Nils Kuhnert	d45a32e9e2	Added Shadow Crane as synonym for Dark Hotel.	2019-01-30 08:22:46 +01:00
Nils Kuhnert	42ecbd801c	Added "Stardust Chollima" as synonym for Lazarus.	2019-01-29 08:36:12 +01:00
Alexandre Dulaunoy	898bdaf7f8	Merge pull request #328 from Delta-Sierra/master ... add Silence Group	2019-01-25 16:43:08 +01:00
Deborah Servili	c11a31b12a	add Silence Group	2019-01-25 16:19:51 +01:00
Thomas Dupuy	d38fb407ec	add alternative name for DarkHydrus	2019-01-21 23:14:34 -05:00
Deborah Servili	45ed56cd61	add LoJax ref	2019-01-17 10:49:23 +01:00
Deborah Servili	3bdbd6646b	add Cold River Threat actor	2019-01-17 09:44:09 +01:00
Deborah Servili	5d61a75886	fix versions	2019-01-14 16:34:28 +01:00
Deborah Servili	61093f6f07	add several ransomware and threat actors	2019-01-14 16:28:15 +01:00
Deborah Servili	90d2bf7bc1	add drakhydrus ref	2019-01-11 10:17:07 +01:00
Deborah Servili	cddfd5fcd1	TA505 threat actorand affiliates malwares	2019-01-11 09:53:08 +01:00
Deborah Servili	4547b09f49	add hidenad synonym	2019-01-10 11:53:30 +01:00
Deborah Servili	a10a417b0a	add Cryptomix variants refs	2019-01-10 10:03:22 +01:00
Deborah Servili	d3ae9e1e14	update version	2019-01-09 15:54:09 +01:00
Deborah Servili	90e3602db6	add AndroidOS_HidenAd	2019-01-09 15:33:34 +01:00
Deborah Servili	cc0bd96527	Merge branch 'master' of https://github.com/MISP/misp-galaxy	2019-01-09 14:54:33 +01:00
Christophe Vandeplas	0ba220987d	chg: [mitre] bump to latest MITRE ATT&CK dataset	2018-12-29 18:40:21 +01:00
Christophe Vandeplas	50c817a1fd	MITRE galaxy regeneration + updated migration script	2018-12-29 18:14:47 +01:00
Nils Kuhnert	1e4ebdd560	Added OilRig synonym "Helix Kitten".	2018-12-27 09:10:21 +01:00
Kafeine	5766cd68f8	zTDS	2018-12-22 11:51:40 +01:00
Kafeine	ce94cb8458	novidade,taurus	2018-12-22 10:19:52 +01:00
Deborah Servili	91b8da1e9e	add ransomwares	2018-12-20 00:37:49 +01:00
Alexandre Dulaunoy	de66295539	Merge pull request #316 from danielplohmann/master ... New name SNAKEMACKEREL for APT28 by Accenture	2018-12-19 14:06:38 +01:00
Gerard Wagener	7b347017e2	Removed Puplishing industry	2018-12-19 11:45:31 +01:00
Daniel Plohmann	cc22da1200	Microsoft alias for apt29 is YTTRIUM	2018-12-19 11:28:44 +01:00
Daniel Plohmann	c9e15b0c08	new name SNAKEMACKEREL for APT28 by Accenture	2018-12-19 10:46:58 +01:00
Alexandre Dulaunoy	27f6b19570	Merge pull request #315 from Delta-Sierra/master ... add OSX malwares	2018-12-18 17:43:34 +01:00
Deborah Servili	e6fa06f178	add OSX malwares	2018-12-18 16:26:49 +01:00
Alexandre Dulaunoy	a04790ac41	chg: [malpedia] updated to the latest version ... Ref: https://malpedia.caad.fkie.fraunhofer.de/api/get/misp	2018-12-14 19:00:18 +01:00
Deborah Servili	cb4345adf9	add operation sharpshooter	2018-12-13 13:47:54 +01:00
Deborah Servili	a9265d9858	update toll version	2018-12-13 09:44:09 +01:00